AWS Architecture
EC2, VPC, S3, RDS, Lambda, Route 53, CloudFront, IAM, WAF and CloudWatch.
Open to remote cloud opportunities
AWS CERTIFIED SOLUTIONS ARCHITECT
Cloud infrastructure built to be secure, scalable and automated.
I’m Benjamin Cooper, an AWS Cloud Engineer focused on Terraform, Infrastructure as Code, CI/CD, cloud security and resilient AWS architecture.
Benjamin Cooper
Cloud Platform EngineerAWS SAACertified
Terraform + CI/CDInfrastructure automation
4 yearsHands-on AWS experience
40%Faster release cycles
AWS SAACertified
Remote-firstCollaboration mindset
HOW I BUILD
Infrastructure that is version-controlled, observable and repeatable.
I treat infrastructure like software: define it in code, review it, automate delivery and monitor the result.
cloud-platform.deploy
$ terraform plan
Plan: 28 to add, 0 to change, 0 to destroy.
$ terraform apply -auto-approve
Apply complete! Resources: 28 added.
$ aws cloudfront create-invalidation
Deployment complete.Route 53
→
CloudFront
→
ALB
→
EC2
ABOUT ME
Engineering cloud infrastructure with clarity and purpose.
I design, automate and support AWS infrastructure with a strong focus on security, reliability, cost awareness and maintainability.
My experience spans cloud networking, identity and access management, monitoring, high availability, disaster recovery and CI/CD automation. I enjoy translating business requirements into practical cloud solutions that are well documented and easy for teams to operate.
My biggest asset is perspective most engineers don't have: more than ten years across operations, finance and technology before I moved into the cloud. I connect infrastructure decisions to real business impact, communicate clearly with non-technical stakeholders, and take ownership of a problem from first requirement to running, monitored system.
CORE CAPABILITIES
Platform engineering across cloud infrastructure, delivery, security and operations.
Infrastructure as Code
Terraform modules, reusable environments, remote state and version-controlled infrastructure.
CI/CD & Automation
GitHub Actions, Jenkins, AWS CodePipeline, CodeBuild, Bash and Python automation.
Security
Least-privilege IAM, AWS WAF, secrets management, encryption and network segmentation.
Monitoring
CloudWatch dashboards, logs, alarms, SNS notifications and operational troubleshooting.
Engineering & Developer Tooling
Python, REST APIs, Git/GitHub, GitHub Apps, JWT and event-driven automation.
AWSTerraformPythonGit/GitHubREST APIsGitHub AppsJWTGitHub ActionsJenkinsCodePipelineCodeBuildCI/CDCloud SecurityObservabilityDisaster RecoveryCost Control
EXPERIENCE
Professional impact.
2022 — 2026
Cloud Platform Engineer
BKS
- Automated AWS application delivery using CodePipeline and CodeBuild, reducing deployment times by approximately 40%.
- Provisioned and managed AWS infrastructure with Terraform for repeatable, version-controlled deployments.
- Implemented CloudWatch monitoring, SNS alerting, RDS Multi-AZ resilience and S3 Cross-Region Replication.
- Strengthened security through VPC design, IAM least privilege, Security Groups and AWS WAF.
2021 — 2022
Junior Infrastructure Engineer
PCS
- Supported IAM access management, S3 backup solutions, endpoint security and Conditional Access controls.
- Produced technical documentation and resolved user-facing technical issues across business systems.
CERTIFICATION
AWS Certified Solutions Architect – Associate
Validated knowledge of secure, resilient, high-performing and cost-optimised AWS architectures.
SAA
FEATURED WORK
Selected projects.
Work I’m most proud of. Source for these is kept private; a walkthrough or live demo is available on request.
01
Featured · demo on request
AWS SERVERLESS • SECURITY • TERRAFORM
RepoSentinel — Policy-Controlled Repository Access Broker
Replaces long-lived Git credentials with short-lived, repository-scoped access that is requested, evaluated against policy, approved where required, issued, used and revoked. The focus is the control plane around credential issuance: a policy engine, a human-approval step, an auditable grant state machine with replay protection, and a Git gateway that mints and enforces short-lived, repo-scoped GitHub App tokens at clone time. Built entirely on AWS serverless and Terraform, and designed so that AI agents are first-class principals alongside humans.
02
Private · demo on request
AWS SERVERLESS • PYTHON • TERRAFORM
Serverless Intake Pipeline
A Terraform-built serverless intake pipeline: API Gateway receives POST /intake, a Python Lambda handles the request and writes to RDS MySQL, with Secrets Manager holding the database credentials — no secrets in code.
03
Private · demo on request
AWS • SECURITY • TERRAFORM
Secure AWS Web Platform
Locked-down AWS infrastructure as code: CloudFront CDN and AWS WAF in front of the application, least-privilege access throughout, and automation that writes its own incident reports when something breaks — all defined in Terraform.
04
Private · demo on request
AWS • NETWORKING • TERRAFORM
AWS Enterprise App Platform
A private three-tier stack — VPC → EC2 → RDS — provisioned entirely in Terraform with zero hardcoded credentials: IAM roles instead of static keys, and Secrets Manager for database credentials.
05
Private · demo on request
MULTI-REGION • RESILIENCE • TERRAFORM
AWS Multi-Region Resilient Platform
A production-shaped, multi-region AWS stack (Tokyo and São Paulo) built entirely in Terraform: ALB with real TLS, AWS WAF, CloudFront CDN, and a cross-region Transit Gateway for resilient connectivity.
06
Private · demo on request
AWS • STATIC HOSTING • CI/CD
Global Portfolio Hosting Platform
A secure static application delivered through Amazon S3, CloudFront, Route 53 and ACM, with HTTPS delivery and automated cache invalidation on each deploy.
LATEST GITHUB WORK
Projects that update automatically.
This section loads my latest eligible public repositories directly from GitHub, so new work appears here without manually editing the website.
Loading latest GitHub projects...
Unable to load GitHub projects.
LET'S CONNECT
Looking for a platform engineer who can build, automate and take ownership?
I’m open to remote Cloud Platform, DevOps and Infrastructure Engineering opportunities.