ALLAN DEUSDevOps & Systems Engineer
LinkedIn GitHub Email Download CV
DevOps & Systems Engineer · Dar es Salaam, Tanzania

I build, ship and run production systems.

For three years I have designed, deployed and operated the full sales platform of Tanzanite Auto Traders on AWS: Linux servers, Docker, CI/CD with automatic rollback, PostgreSQL, monitoring and the Next.js application itself.

See the Case StudyDownload CV
15,808vehicles migrated
313,575photos on a CDN
3 yearsin production
7languages served
Live system
Checking tanzaniteauto.com…
Hosting
AWS eu-west-2 (London)
Deploys
GitHub Actions, no stored keys
Visit Live Site
Open to: DevOps EngineerCloud EngineerSite ReliabilitySystems AdministratorDar es Salaam or Remote
Case study · production

Tanzanite Auto Traders Platform

A Japanese used car sales company (Tokyo head office, East Africa Regional Office in Dar es Salaam) needed one platform for customers, staff and management. I designed it, built it, put it on AWS and keep it running.

🔒 tanzaniteauto.comOpen live site
Tanzanite Auto Traders home page
Mobile stock list
/stock-listOpen live site
Stock list with FOB and CIF prices
/vehicle/DBU8678Open live site
Vehicle page
Production architecture: GitHub to Actions to ECR to EC2, serving users, with CloudFront, S3, Neon Postgres, Redis and SES GitHubgit push main GitHub Actionsbuild · test · OIDC Amazon ECRversioned Docker images Customers & staffHTTPS · 7 languages EC2 · Docker · CaddyTLS · SSM · health · rollback S3 + CloudFront CDN313K photos · OAC Amazon SESDKIM · SPF · DMARC PostgreSQL (Neon)Prisma · auto migrations Redis queue + workerphoto processing jobs CloudWatch + SNSalarms · auto-recover
01 · BUILD

The product

  • Next.js, TypeScript, React site with customer, staff and admin portals
  • PostgreSQL + Prisma, 20+ versioned migrations, Redis job queue
  • Secure auth: sessions, 4 roles, rate limiting, audit logs
  • 7 languages, 4 currencies, natural-language search, SEO
02 · SHIP

The delivery pipeline

  • GitHub Actions builds and pushes Docker images to ECR
  • Keyless AWS access via OIDC, nothing stored in CI
  • Deploys over SSM, migrations, health check
  • Automatic rollback if the new version is unhealthy
03 · RUN

Operations & security

  • CloudWatch alarms: auto-reboot and hardware recovery
  • Daily EBS snapshots, DB restore window, runbooks
  • MFA, least-privilege IAM, SSH closed, TLS, CSP
  • SES email with DKIM, SPF and DMARC
Real incidents

When production broke, and what I changed

Running a system is mostly what happens after launch. Three incidents from 2026, with cause, fix and prevention.

SEV-1 · SITE DOWN

Database stopped answering: data transfer quota exhausted

Detect
Health check returned 503 "database unreachable".
Cause
Product cards loaded every photo row per vehicle: gigabytes of egress in hours.
Fix
Query reads only the main photo, duplicate scan moved into SQL, database plan right-sized.
Prevent
Query statistics enabled; egress tracked.
✓ restored the same day
SEV-2 · DEPLOYS BLOCKED

Releases failing: "no space left on device"

Detect
Three CI deploys failed; the SSM agent returned no output.
Cause
Old images kept 7 days filled the 30 GB disk; build cache shipped inside the image.
Fix
Live EBS resize to 40 GB, 21.7 GB reclaimed, filesystem grown online.
Prevent
Prune before pull, keep only the running image, slimmer image.
✓ <1 minute of downtime
SEV-3 · USER IMPACT

Staff could not set a main photo on phones

Detect
Staff report: "nothing changes"; admins unaffected.
Cause
Portal not responsive: hover-only 10 px buttons on a 390 px screen.
Fix
Responsive portals, slide-out menu, always-visible touch targets.
Prevent
Phone-sized end-to-end checks before release.
✓ fixed and verified same day
Selected work

Projects

Systems I have designed and built: business platforms, data portals, management systems and mobile apps.

LIVE

Tanzanite Auto Traders

Multi-portal vehicle sales platform on AWS with keyless CI/CD, automatic rollback and 313K photos on a CDN.

Next.jsPostgreSQLDockerAWS
Live site ↗Case study
Dar es Salaam Open Data PortalDjango · pandas · REST

Dar es Salaam Open Data Portal

Django portal for city datasets with a pandas transformation engine, REST API, admin portal and PDF/Excel reports.

DjangopandasREST
Code

Hospital Management System

Role-based portals for reception, doctors, lab, pharmacy and admins: patients, appointments, tests and prescriptions.

DjangoRBACPostgreSQL
Code

Inventory Management

React dashboard and Django REST API with JWT auth: products, suppliers, stock movements, low-stock alerts and reports.

ReactDRFJWT
FrontendAPI

Abode Harmony Property Management

Landlord and tenant dashboards on Supabase: tenants, notices, receipts and maintenance requests.

ReactSupabaseSQL
Code

CertifyWell Exam Portal

Online examinations: courses, question banks, token-protected exams, automatic grading and results.

PHPMySQLJavaScript
Code

Student Registration System

Programmes, courses and semesters with student enrolment, role-based access and admin and student dashboards.

DjangoRBAC
Code

RoomSync Hostel Management

Students register and book rooms; admins manage rooms, users and availability.

PHPMySQL
Code
Library Management (desktop)Python · PostgreSQL · SQLAlchemy

Library Management (desktop)

Python desktop app on PostgreSQL: books, members, loans and returns, fines, analytics, an audit log and a report builder.

PythonPostgreSQLSQLAlchemy
Code
Salon Website (bilingual)Docker · Django · PostgreSQL

Salon Website (bilingual)

English and Swahili site in Django 5 and Tailwind, containerized with Docker Compose and PostgreSQL, served by Gunicorn.

DockerDjangoPostgreSQL
Code
Vegas AI Hotel ConciergeNode.js · Express · LLM

Vegas AI Hotel Concierge

Chat widget grounded in real suite, price and policy data that turns conversations into reservation leads.

Node.jsExpressLLM
Code
ARU Connect MailReact · TypeScript

ARU Connect Mail

Campus email client for Ardhi University: inbox, compose and reader plus an admin console for bulk mail and analytics.

ReactTypeScript
Live demo ↗Code
Toolbox

Skills

Used in production, not just in tutorials.

Cloud & DevOps

AWS EC2S3CloudFrontIAMSESSSMCloudWatchDockerGitHub ActionsCloudFormation

Systems & Security

Linux (Ubuntu)BashsystemdCaddy / TLSDNSMFA & least privilegeBackupsIncident response

Backend & Data

Node.jsREST APIsPostgreSQLPrismaRedisPythonDjangopandas

Frontend & Mobile

Next.jsReactTypeScriptTailwindReact NativeFlutterFigmai18n & SEO
Experience & education

Where I Have Worked

OCT 2023 – PRESENT · DAR ES SALAAM (HYBRID)

DevOps & Systems Engineer · Full-Stack Developer

Tanzanite Auto Traders Ltd

Designed, built, deployed and operate the company's sales platform: AWS infrastructure, CI/CD, monitoring, security, backups, database administration and the Next.js application with its customer, staff and admin portals.

NOV 2024 – PRESENT

Software Developer & UI/UX Designer

Ardhi University · project-based academic work

Led Figma design and built web and mobile applications from requirements to tested, working software.

2024 – 2027 (EXPECTED)

BSc Information Systems and Management (ISM)

Ardhi University, Dar es Salaam

Systems analysis and design, databases, computer networks and systems administration, IT project management.

This website

How This Site Is Built and Deployed

The portfolio itself follows the same practices I use in production.

  1. Infrastructure as code: one CloudFormation template creates a private S3 bucket, a CloudFront distribution with Origin Access Control, an ACM TLS certificate and security headers.
  2. Keyless CI/CD: every push to main runs GitHub Actions, which assumes an AWS role through OIDC. No access keys exist.
  3. Atomic deploy: files sync to S3 with long-lived caching for assets, then the CDN cache is invalidated.
  4. Fast and secure: static HTML, no tracking, HTTPS only, HSTS and a strict content security policy.
AWS resourcePurpose
S3 bucketPrivate, encrypted, versioned site files
CloudFrontCDN with Origin Access Control and HTTP/3
ACMTLS certificate, TLS 1.2+ only
Headers policyHSTS, CSP, frame and referrer rules
IAM roleGitHub OIDC, main branch only
Let's talk

Need someone to build and run your systems?

I am open to DevOps, Cloud, Site Reliability and Systems Administrator roles in Dar es Salaam or remote.

allandeus014@gmail.com LinkedIn GitHub Download CV