Buntu Stuurman
Get in touch →
Cloud Engineer Cape Town, --:-- SAST AWS & Azure 4+ years in production

Buntu Stuurman, cloud engineer. Design. Secure. Automate.

01Architecture on AWS and Azure, shaped around how the business runs. 02Security designed in from the start, not added at the end. 03Every environment defined in code and shipped through CI/CD.

I design, secure and automate cloud infrastructure on AWS and Azure, from the first diagram to production.

Get in touch → View work
(01)

Capabilities

Six areas. One standard.

01

Cloud Architecture

NetworkingHigh availabilityDisaster recovery
02

Serverless & Event‑Driven

LambdaAzure FunctionsQueues
03

Security & IAM

Least privilegeEncryptionCompliance
04

DevOps & IaC

TerraformCloudFormationCI/CD
05

Backend Engineering

PythonJavaAPIs
06

Cost Optimisation

RightsizingSavings PlansFinOps
(02)

Process

Four stages. Nothing reaches production unreviewed.

1

Scope

Requirements, constraints and what success looks like.

2

Design

An architecture diagram, agreed before anything is built.

3

Build

Infrastructure in code, shipped through CI/CD.

4

Document

Diagrams and docs the team can run with.

(03)

Architecture

From a commit to running infrastructure, on either cloud.

  1. 01One pipeline. Every change ships through GitHub Actions.
  2. 02The right IaC per cloud. Terraform for both, CloudFormation for AWS, Bicep for Azure.
  3. 03Least privilege by default. Access is scoped from the first resource.
GitHub Actions deploys CloudFormation to AWS, Bicep to Azure, and Terraform to both. AWS runs IAM, Lambda, S3 and DynamoDB inside a VPC; Azure runs Key Vault, Functions, Blob storage and App Service inside a VNet. CI / CD INFRASTRUCTURE AS CODE CLOUD GitHub Actions CloudFormation Terraform Bicep AWS AF-SOUTH-1 VPC IAM LAMBDA S3 DYNAMODB Azure SA NORTH VNET KEY VAULT FUNCTIONS BLOB APP SVC LEAST PRIVILEGE BY DEFAULT ONE PIPELINE · REVIEWED · REPRODUCIBLE
Fig. 1 — Reference architecture · scroll →AWS af-south-1 · Azure South Africa North
(04)

Selected work

Each one written up in full on Medium.

01

Cloud infrastructure automation with CloudFormation

CloudFormation / IAM / EC2

Nested stacks with automated rollback.

 02

Serverless microservices on API Gateway, Lambda and DynamoDB

API Gateway / Lambda / DynamoDB

Event-driven, auto-scaling, millisecond reads.

 03

Static site hosting on Amazon S3 and CloudFront

S3 / CloudFront / IAM

Global CDN delivery from an S3 origin.

 04

High availability with Auto Scaling and a load balancer

EC2 / ALB / ASG

Multi-AZ, self-healing, zero-downtime deploys.

 05

This portfolio on S3, CloudFront and GitHub Actions

S3 / CloudFront / GitHub Actions

Deployed by GitHub Actions on every push.
(05)

About

Cloud engineer based in Cape Town, South Africa.

Portrait of Buntu Stuurman

I am a Cloud Engineer with a foundation in backend software engineering and more than four years of experience designing, securing, and operating production workloads on AWS and Azure.

Security is a design requirement, not a final check. Every environment is defined in code: versioned, peer-reviewed and reproducible.

Toolkit
Cloud
AWS, Azure
IaC
Terraform, CloudFormation, Bicep
CI/CD
GitHub Actions
Runtime
Docker
Languages
Python, Java
4+Years in production
2Cloud platforms
5Published case studies
(06)

Certified

AWS certifications in security and solutions architecture, each verifiable on Credly.

AWS · SCS-C02Security – Specialty

Identity and access management, data protection, infrastructure security, logging and incident response on AWS.

Verify on Credly ↗ AWS · SAA-C03Solutions Architect – Associate

Designing secure, resilient, high-performing and cost-optimised architectures on AWS.

Verify on Credly ↗
(07) Contact

Let’s talk.

Whether it is an architecture question, a security concern or an idea worth building, I am happy to talk it through.

bstuurmanct@gmail.com
LinkedIn↗ GitHub↗ Medium↗