Available for Remote Engagements

Ndohnwi
Declan

Technology Architect·Douala, Cameroon. Open to remote work worldwide.

20+ years of professional technology delivery across cloud, cybersecurity, AI automation, VoIP, and SaaS. AWS Certified Solutions Architect. CompTIA Security+. Google AI and Cybersecurity certified. Available for remote engagements globally.

Follow Me
0+
Years Experience
0
Certifications
0+
Systems Deployed
0
Technical Domains

Systems architect with over 20 years of professional technology delivery spanning telecommunications, networking, IP video, enterprise infrastructure, cloud architecture, cybersecurity, automation, and artificial intelligence. Career began in 2005 engineering carrier VoIP infrastructure for an international reseller carrying 300,000 minutes per month, and has progressed through enterprise surveillance systems for national government, hotel IT architecture, ISP media platforms, and now cloud, AI, and SaaS product engineering.

On the cloud side, I design and deploy production AWS environments with a focus on resilience, cost efficiency, and security posture. On the security front, I implement risk frameworks aligned with NIST CSF and CIS Controls, conduct technical audits, and build defensive infrastructure, validated by CompTIA Security+ and Google Cybersecurity certifications.

I build AI-powered automation and SaaS products, including TewaGo, a Business Operating System for WhatsApp I founded and architected in 2025, now live in beta. Current work designs and builds systems combining AI, cloud, software, security, and automation into production-grade platforms.

The defining capability is not tied to a single technology. It is the ability to enter an unfamiliar technical domain, understand how complex systems fit together across layers, select appropriate technologies for the constraints at hand, and turn that into production systems that are secured, monitored, documented, and maintained. Remote-first by default, operating effectively across time zones with structured async communication and full documentation discipline.

20 Years
of Delivery

Founder and Technical Architect, TewaGo

2025 – Present

SaaS · AI · WhatsApp Business Operating System

Architected and built TewaGo, a multi-tenant SaaS platform providing businesses with CRM, AI assistants, bulk messaging, chatbot workflows, shared team inbox, advertising integrations, and AI-driven customer acquisition. Live in beta with active business testers ahead of official launch.

Independent Technology Consultant & Systems Architect

2010 – Present

Cloud · Cybersecurity · AI · DevOps · Infrastructure

Independent consulting across cloud architecture (AWS), cybersecurity, AI automation, software engineering, and infrastructure for clients across Africa and internationally. Delivered production environments, security audits, AI workflow systems, and SaaS platforms across multiple industries.

Lead Technical Consultant, Swecom ISP

2012 – 2014

IPTV · Video-on-Demand · Streaming Infrastructure

Led architecture and implementation of an IPTV and Video-on-Demand platform serving 2,000+ subscribers across five cities. Designed server architecture, selected technology stack, provisioned streaming infrastructure, and integrated the platform with the ISP's network environment.

Lead Systems Architect and IT Engineer, Chariot Hotel

2010 – 2012

Enterprise IT · Windows Server · Property Management

Designed and deployed the hotel's complete IT environment: IP network, Windows Server 2008 R2, Active Directory, Microsoft Exchange, eZee property management system, electronic access control, and IP video surveillance. Led IT support for all hotel operations.

Lead Systems Architect, Essoka Security / DGSN

2007 – 2010

IP Video Surveillance · ANPR · Government Security

Lead architect for a 64-camera enterprise IP video surveillance deployment at Cameroon's national police authority headquarters, across 4 floors in 2 buildings, with video analytics, ANPR licence plate recognition, and a dedicated secure monitoring and control room.

Cambridge Certified Security Associate (CCSecA)

2008 – 2010

Network Security · Cryptography · Security Principles

Completed the Cambridge Certified Security Associate programme through Cambridge International, covering network security, cryptography, and security principles. Listed on the Cambridge alumni register with ID 412046721.

Cisco Certified Network Associate (CCNA)

2006 – 2010

TCP/IP · Routing · Switching · Cisco Technologies

Obtained CCNA certification, consolidating the networking foundation in TCP/IP, routing, switching, network troubleshooting, and Cisco technologies that underpinned all subsequent infrastructure and security engineering work.

VoIP and Telecommunications Engineer, Telcan Canada

2005 – 2007

VoIP · SIP · Class 5 Softswitch · 300K min/month

Engineered and maintained VoIP/telecom infrastructure for an international reseller: 17 SIP trunks, Class 5 softswitch configuration, GSM gateway integration, call-centre infrastructure, DID management, carrier interconnection, and QoS for ~300,000 call minutes per month.

Technical Capability Map

Cloud & Infrastructure

AWS Certified Solutions Architect

  • AWS VPC, EC2, RDS, S3, Lambda, CloudFront architecture
  • Infrastructure-as-Code with Terraform & CloudFormation
  • Multi-region high-availability design
  • Cost architecture & resource optimization
  • Container orchestration: Docker, ECS

Cybersecurity

CompTIA Security+ · Google Cybersecurity

  • NIST, ISO 27001, CIS Controls frameworks
  • Risk assessment & vulnerability management
  • Security audits & penetration testing
  • IAM policy design & zero-trust principles
  • Incident response & security monitoring

AI & Automation

Google AI Fundamentals

  • LLM integration & prompt engineering
  • n8n, Make, Zapier workflow automation
  • AI-driven business process optimization
  • Python scripting & data pipelines
  • API orchestration & webhook automation

Telecom & VoIP

Infrastructure & SIP Architecture

  • Asterisk & FreePBX PBX systems
  • SIP trunk configuration & DID management
  • Call routing, IVR, and queue management
  • QoS configuration for voice traffic
  • VoIP security & fraud prevention

Software Development

Python · PHP · MySQL

  • Python backend services & automation scripts
  • PHP/MySQL application development
  • RESTful API design & integration
  • Database schema design & optimization
  • Cron jobs & scheduled task architecture

Systems & IT Support

Smart Home · IoT · SysAdmin

  • Linux/Windows server administration
  • Smart home & IoT system integration
  • Network design, routing, & firewall config
  • Monitoring & alerting infrastructure
  • Helpdesk escalation & technical documentation

Selected Projects

Client work and open-source projects with documented outcomes, technology choices, and results.

Cloud Infrastructure
Production

AWS Production Environment Deployment

Problem

A scaling web application was hosted on a single server with no redundancy, automated backups, or cost controls; one hardware failure away from complete outage.

Solution

Designed a multi-AZ AWS architecture using EC2 Auto Scaling Groups, Application Load Balancer, RDS Multi-AZ, S3 for static assets, and CloudFront for global edge delivery. IaC via Terraform for repeatable deployments.

Outcome

99.95% uptime achieved. Infrastructure costs reduced 35% vs. legacy approach. Recovery time objective reduced from hours to under 5 minutes.

AWS EC2RDSCloudFrontTerraformAuto Scaling
Cybersecurity
Framework

Enterprise Security Audit Framework

Problem

An SME operating in financial services had no documented security posture, undefined incident response procedures, and uncontrolled user access privileges across critical systems.

Solution

Conducted a full security audit aligned to NIST CSF and CIS Controls. Implemented IAM role restructuring, MFA enforcement, network segmentation, and a documented incident response playbook.

Outcome

Critical attack surface reduced by 60%. Organization passed subsequent compliance review. Zero security incidents in the 12 months following implementation.

NIST CSFCIS ControlsIAMIncident Response
AI & Automation
Deployed

AI-Powered Business Workflow Automation

Problem

A service business was spending 20+ hours weekly on manual report generation, client communication drafts, and data entry across disconnected SaaS tools.

Solution

Built an n8n-based automation layer integrating LLM APIs for content generation, webhook triggers for real-time data sync, and a custom Python middleware for business logic processing.

Outcome

Manual workload reduced by 18 hours per week. Turnaround on client deliverables cut from 48 hours to under 2 hours. System runs unattended with zero manual intervention.

n8nLLM APIsPythonWebhooksREST APIs
Telecom
Production

Enterprise VoIP Infrastructure Deployment

Problem

A 50-seat call centre was running on aging PSTN hardware with high per-minute costs, no call recording, and no centralized management of routing or extensions.

Solution

Deployed Asterisk-based PBX with SIP trunking for international DIDs, configured IVR flows, call queues, and agent reporting. Implemented fail-over routing with QoS policies on network layer.

Outcome

Telephony costs reduced by 55%. Call recording and compliance logging enabled. System handles peak loads of 120 concurrent calls without degradation.

AsteriskSIPFreePBXQoSIVR
IoT / Smart Systems
Integrated

Smart Facility Automation System

Problem

A commercial property needed centralized control over HVAC, lighting, access control, and CCTV, all running on separate, incompatible systems with no unified management interface.

Solution

Designed a Home Assistant-based integration layer connecting Z-Wave, Zigbee, and IP-based devices. Built custom automation scripts for scheduled and event-driven control, with a remote management dashboard.

Outcome

Operational costs reduced 28% through scheduling and energy management. All building systems visible and controllable from a single pane. Remote incident response time cut from 2 hours to under 10 minutes.

Home AssistantZ-WaveZigbeePythonMQTT
Backend Development
Live System

Custom PHP/MySQL Business Management Platform

Problem

A logistics company was managing operations across spreadsheets and WhatsApp threads: no audit trail, no reporting, and no integration between billing, dispatch, and client management.

Solution

Built a role-based PHP web application with MySQL, covering client management, job dispatch, invoice generation, payment tracking, and management reporting with export functionality.

Outcome

Full operational visibility achieved. Invoice processing time dropped from 45 minutes to under 3 minutes. Management reporting that previously took a week now runs in seconds.

PHPMySQLREST APIRBACReporting

Public repositories on GitHub. Verified, version-controlled work you can inspect, clone, and run.

Cloud Security
Open Source

AWS Secure Remote Access (Client VPN)

Problem

Remote teams accessing AWS resources over the public internet with no encrypted channel or certificate-based authentication in place.

Solution

Terraform-provisioned AWS Client VPN with mutual TLS using an easy-rsa PKI. CloudWatch logs every connection event. One terraform apply deploys the full stack.

Outcome

Zero-trust encrypted tunnel into the VPC. Mutual certificate auth - no passwords to rotate or leak. Full CloudWatch audit trail of every connection.

TerraformAWS Client VPNmTLSeasy-rsaCloudWatchIaC
AWS / Python
Open Source

AWS Cost Auditor

Problem

AWS bills accumulate quietly. Unattached EBS volumes, idle Elastic IPs, and long-stopped instances charge every month with no default alert.

Solution

Python + boto3 CLI that queries Cost Explorer for monthly service spend, compares month-over-month, and scans for idle resources with a per-item dollar estimate of monthly waste.

Outcome

Full cost snapshot in seconds using read-only IAM permissions. Clean terminal report plus optional CSV export. Works against any AWS account.

Pythonboto3Cost ExplorerEC2CLI
Security / Python
Open Source

AWS Security Lens (CSPM Scanner)

Problem

AWS accounts collect misconfigurations silently - public S3 buckets, wildcard IAM policies, security groups exposing SSH, CloudTrail disabled. None of it triggers an alert by default.

Solution

Python + boto3 CSPM tool running 18 checks across S3, IAM, EC2, and logging. Every finding is severity-ranked (CRITICAL to LOW) with a concrete AWS CLI remediation command. Exports to JSON.

Outcome

Full posture snapshot in one command. Read-only - safe to run in production. JSON export feeds directly into remediation workflows and ticketing systems.

Pythonboto3S3IAMEC2CloudTrail

Certifications

Verified credentials from globally recognized certification bodies.

CompTIA Security+

CompTIA | Security Domain Certification

Verified

Covers threat management, cryptography, IAM, PKI, secure network architecture, and risk assessment methodologies. Industry benchmark for cybersecurity professionals.

Verify Credential

AWS Certified Solutions Architect

Amazon Web Services | Associate Level

Verified

Demonstrates ability to design distributed systems on AWS with optimal availability, cost efficiency, fault tolerance, and scalability using AWS services and best practices.

Verify Credential

Google Cybersecurity Certificate

Google | Professional Certificate

Verified

Covers threat identification, security information and event management (SIEM), network security, Python for security automation, and Linux system administration for security.

Verify Credential

Google AI Fundamentals

Google | AI Fundamentals

Verified

Applied AI concepts, machine learning fundamentals, LLM deployment, responsible AI principles, and integration of AI capabilities into production applications and business workflows.

Verify Credential

Cambridge Certified Security Associate (CCSecA)

Cambridge International | Security Certification

Verified

Security associate certification covering network security, cryptography, and security principles. Completed 2008 to 2010. Listed on the Cambridge alumni register with ID 412046721.

Verify on Alumni Register

Tools & Technologies

Languages

PythonPHPSQLBash / ShellJavaScriptYAMLHCL (Terraform)

Cloud Platforms

AWS EC2AWS S3AWS RDSAWS LambdaCloudFrontRoute 53CloudWatchIAM

DevOps & IaC

TerraformDockerGitHub ActionsCloudFormationApacheNginxPHP-FPMPM2systemdLinuxGit

AI & Automation

n8nLLM APIsOpenAI APIAnthropic APIMeta Graph APIAI AgentsRAGWebhooks

Networking & Telecom

AsteriskFreePBXSIPTCP/IPVLANspfSenseWiresharkQoS

Databases & Backend

MySQLPostgreSQLRedisLaravelFlaskNode.jsSupabaseCloudflare R2REST APIs

Remote Work

All work is delivered remotely. Infrastructure is managed via SSH, cloud consoles, and IaC tooling. Communication runs through Slack, email, and video calls. Every system is documented before, during, and after delivery. Based in Douala, Cameroon (UTC+1), with full-day overlap with European business hours.

Timezone Flexibility

Africa (WAT/EAT) overlaps with European business hours and covers Middle East and Asian markets. Available for structured overlap with US East and West Coast teams.

GMT+1GMT+3EU OverlapAsync-first

Communication Infrastructure

Full remote collaboration stack in active daily use. Written documentation culture: every system, decision, and process is documented before, during, and after delivery.

SlackZoomNotionJiraGitHub

Remote Infrastructure Management

Cloud systems, VoIP infrastructure, and IoT deployments managed and maintained remotely. Monitoring stacks, alerting pipelines, and runbook documentation are standard deliverables.

SSHCloudWatchGrafanaUptime Kuma
100%
Remote project delivery rate; no on-site dependency for any phase of work
24hr
Maximum response time during standard availability window, typically under 2 hours
Full
Documentation delivered with every system: architecture diagrams, runbooks, SOPs

Latest Clips

Short-form walkthroughs, tutorials, and behind-the-scenes looks at production system builds.

View All
Our AI content agent skipped an afternoon batch because it said no topic qualified. I checked: Facebook, Instagram, X and LinkedIn could publish. The blocker was the topic gate, not the platforms. So I changed the workflow. If an idea fails, the agent finds another or rewrites it. It stops only for a real operational blocker. The agent prepares the content. I approve what goes out. Where should your AI agent stop and ask you? #TewaGo #AIAgents #AfricanTech #WhatsAppBusiness

Our AI content agent skipped an afternoon batch because it said no topic qualified. I checked: Facebook, Instagram, X and LinkedIn could publish. The blocker was the topic gate, not the platforms. So I changed the workflow. If an idea fails, the agent finds another or rewrites it. It stops only for a real operational blocker. The agent prepares the content. I approve what goes out. Where should your AI agent stop and ask you? #TewaGo #AIAgents #AfricanTech #WhatsAppBusiness

A little reset before getting back to working on TewaGo, the business OS for WhatsApp #TewaGo #FoundersLife #ResetMode #PoolSide #quitemoments

A little reset before getting back to working on TewaGo, the business OS for WhatsApp #TewaGo #FoundersLife #ResetMode #PoolSide #quitemoments

Lunch break, building can wait for 20 minutes.

Lunch break, building can wait for 20 minutes.

When the delivery agent reaches the wrong place, the customer blames the business, not the rider. Delivery is not just movement.   It is trust. Before an order leaves your business, who confirms the address, the payment, and the next step? #TewaGo #AfricanBusiness #WhatsAppBusiness #SmallBusinessAfrica #DeliveryBusiness

When the delivery agent reaches the wrong place, the customer blames the business, not the rider. Delivery is not just movement. It is trust. Before an order leaves your business, who confirms the address, the payment, and the next step? #TewaGo #AfricanBusiness #WhatsAppBusiness #SmallBusinessAfrica #DeliveryBusiness

Many customers don’t leave because the price is too high. Sometimes they leave because nobody replied fast enough. If your business depends on WhatsApp, replies are not just customer service. They are sales. Question: when customers message your business, who owns the reply? #TewaGo #AfricanBusiness #WhatsAppBusiness #SmallBusinessAfrica #BusinessSystems

Many customers don’t leave because the price is too high. Sometimes they leave because nobody replied fast enough. If your business depends on WhatsApp, replies are not just customer service. They are sales. Question: when customers message your business, who owns the reply? #TewaGo #AfricanBusiness #WhatsAppBusiness #SmallBusinessAfrica #BusinessSystems

Common WhatsApp questions need more than fast typing. They need prepared answers, ownership, and a next step so the customer does not wait while the team starts from zero again. Save this if your team sells through WhatsApp. #TewaGo #WhatsAppBusiness #BusinessOnWhatsApp

Common WhatsApp questions need more than fast typing. They need prepared answers, ownership, and a next step so the customer does not wait while the team starts from zero again. Save this if your team sells through WhatsApp. #TewaGo #WhatsAppBusiness #BusinessOnWhatsApp