Ndohnwi
Declan
Technology Architect·Douala, Cameroon. Open to remote work worldwide.
20+ years of professional technology delivery across cloud, cybersecurity, AI automation, VoIP, and SaaS. AWS Certified Solutions Architect. CompTIA Security+. Google AI and Cybersecurity certified. Available for remote engagements globally.

Ndohnwi Declan
AI · Cloud · Cybersecurity
Systems architect with over 20 years of professional technology delivery spanning telecommunications, networking, IP video, enterprise infrastructure, cloud architecture, cybersecurity, automation, and artificial intelligence. Career began in 2005 engineering carrier VoIP infrastructure for an international reseller carrying 300,000 minutes per month, and has progressed through enterprise surveillance systems for national government, hotel IT architecture, ISP media platforms, and now cloud, AI, and SaaS product engineering.
On the cloud side, I design and deploy production AWS environments with a focus on resilience, cost efficiency, and security posture. On the security front, I implement risk frameworks aligned with NIST CSF and CIS Controls, conduct technical audits, and build defensive infrastructure, validated by CompTIA Security+ and Google Cybersecurity certifications.
I build AI-powered automation and SaaS products, including TewaGo, a Business Operating System for WhatsApp I founded and architected in 2025, now live in beta. Current work designs and builds systems combining AI, cloud, software, security, and automation into production-grade platforms.
The defining capability is not tied to a single technology. It is the ability to enter an unfamiliar technical domain, understand how complex systems fit together across layers, select appropriate technologies for the constraints at hand, and turn that into production systems that are secured, monitored, documented, and maintained. Remote-first by default, operating effectively across time zones with structured async communication and full documentation discipline.
20 Years
of Delivery
Founder and Technical Architect, TewaGo
2025 – PresentSaaS · AI · WhatsApp Business Operating System
Architected and built TewaGo, a multi-tenant SaaS platform providing businesses with CRM, AI assistants, bulk messaging, chatbot workflows, shared team inbox, advertising integrations, and AI-driven customer acquisition. Live in beta with active business testers ahead of official launch.
Independent Technology Consultant & Systems Architect
2010 – PresentCloud · Cybersecurity · AI · DevOps · Infrastructure
Independent consulting across cloud architecture (AWS), cybersecurity, AI automation, software engineering, and infrastructure for clients across Africa and internationally. Delivered production environments, security audits, AI workflow systems, and SaaS platforms across multiple industries.
Lead Technical Consultant, Swecom ISP
2012 – 2014IPTV · Video-on-Demand · Streaming Infrastructure
Led architecture and implementation of an IPTV and Video-on-Demand platform serving 2,000+ subscribers across five cities. Designed server architecture, selected technology stack, provisioned streaming infrastructure, and integrated the platform with the ISP's network environment.
Lead Systems Architect and IT Engineer, Chariot Hotel
2010 – 2012Enterprise IT · Windows Server · Property Management
Designed and deployed the hotel's complete IT environment: IP network, Windows Server 2008 R2, Active Directory, Microsoft Exchange, eZee property management system, electronic access control, and IP video surveillance. Led IT support for all hotel operations.
Lead Systems Architect, Essoka Security / DGSN
2007 – 2010IP Video Surveillance · ANPR · Government Security
Lead architect for a 64-camera enterprise IP video surveillance deployment at Cameroon's national police authority headquarters, across 4 floors in 2 buildings, with video analytics, ANPR licence plate recognition, and a dedicated secure monitoring and control room.
Cambridge Certified Security Associate (CCSecA)
2008 – 2010Network Security · Cryptography · Security Principles
Completed the Cambridge Certified Security Associate programme through Cambridge International, covering network security, cryptography, and security principles. Listed on the Cambridge alumni register with ID 412046721.
Cisco Certified Network Associate (CCNA)
2006 – 2010TCP/IP · Routing · Switching · Cisco Technologies
Obtained CCNA certification, consolidating the networking foundation in TCP/IP, routing, switching, network troubleshooting, and Cisco technologies that underpinned all subsequent infrastructure and security engineering work.
VoIP and Telecommunications Engineer, Telcan Canada
2005 – 2007VoIP · SIP · Class 5 Softswitch · 300K min/month
Engineered and maintained VoIP/telecom infrastructure for an international reseller: 17 SIP trunks, Class 5 softswitch configuration, GSM gateway integration, call-centre infrastructure, DID management, carrier interconnection, and QoS for ~300,000 call minutes per month.
Technical Capability Map
Cloud & Infrastructure
AWS Certified Solutions Architect
- AWS VPC, EC2, RDS, S3, Lambda, CloudFront architecture
- Infrastructure-as-Code with Terraform & CloudFormation
- Multi-region high-availability design
- Cost architecture & resource optimization
- Container orchestration: Docker, ECS
Cybersecurity
CompTIA Security+ · Google Cybersecurity
- NIST, ISO 27001, CIS Controls frameworks
- Risk assessment & vulnerability management
- Security audits & penetration testing
- IAM policy design & zero-trust principles
- Incident response & security monitoring
AI & Automation
Google AI Fundamentals
- LLM integration & prompt engineering
- n8n, Make, Zapier workflow automation
- AI-driven business process optimization
- Python scripting & data pipelines
- API orchestration & webhook automation
Telecom & VoIP
Infrastructure & SIP Architecture
- Asterisk & FreePBX PBX systems
- SIP trunk configuration & DID management
- Call routing, IVR, and queue management
- QoS configuration for voice traffic
- VoIP security & fraud prevention
Software Development
Python · PHP · MySQL
- Python backend services & automation scripts
- PHP/MySQL application development
- RESTful API design & integration
- Database schema design & optimization
- Cron jobs & scheduled task architecture
Systems & IT Support
Smart Home · IoT · SysAdmin
- Linux/Windows server administration
- Smart home & IoT system integration
- Network design, routing, & firewall config
- Monitoring & alerting infrastructure
- Helpdesk escalation & technical documentation
Selected Projects
Client work and open-source projects with documented outcomes, technology choices, and results.
TewaGo
Business Operating System for WhatsApp. A multi-tenant SaaS platform I founded and architected from scratch, providing businesses with a single operational layer covering customer acquisition through to customer conversation: CRM, AI assistants, chatbot workflows, bulk messaging, shared team inbox, advertising campaign management, and AI-generated creative workflows via the Meta Graph API.
Multi-tenant Laravel/PHP backend, MySQL, Node.js, REST APIs, Supabase, systemd services, and PM2 process management
LLM-powered customer conversation, AI sales agents, generative image/video creative, voice agent capabilities, and n8n automation pipelines
Ubuntu/Apache/PHP-FPM production deployment, Cloudflare R2 off-site backup replication, CDN media delivery, disaster recovery procedures
AWS Production Environment Deployment
Problem
A scaling web application was hosted on a single server with no redundancy, automated backups, or cost controls; one hardware failure away from complete outage.
Solution
Designed a multi-AZ AWS architecture using EC2 Auto Scaling Groups, Application Load Balancer, RDS Multi-AZ, S3 for static assets, and CloudFront for global edge delivery. IaC via Terraform for repeatable deployments.
Outcome
99.95% uptime achieved. Infrastructure costs reduced 35% vs. legacy approach. Recovery time objective reduced from hours to under 5 minutes.
Enterprise Security Audit Framework
Problem
An SME operating in financial services had no documented security posture, undefined incident response procedures, and uncontrolled user access privileges across critical systems.
Solution
Conducted a full security audit aligned to NIST CSF and CIS Controls. Implemented IAM role restructuring, MFA enforcement, network segmentation, and a documented incident response playbook.
Outcome
Critical attack surface reduced by 60%. Organization passed subsequent compliance review. Zero security incidents in the 12 months following implementation.
AI-Powered Business Workflow Automation
Problem
A service business was spending 20+ hours weekly on manual report generation, client communication drafts, and data entry across disconnected SaaS tools.
Solution
Built an n8n-based automation layer integrating LLM APIs for content generation, webhook triggers for real-time data sync, and a custom Python middleware for business logic processing.
Outcome
Manual workload reduced by 18 hours per week. Turnaround on client deliverables cut from 48 hours to under 2 hours. System runs unattended with zero manual intervention.
Enterprise VoIP Infrastructure Deployment
Problem
A 50-seat call centre was running on aging PSTN hardware with high per-minute costs, no call recording, and no centralized management of routing or extensions.
Solution
Deployed Asterisk-based PBX with SIP trunking for international DIDs, configured IVR flows, call queues, and agent reporting. Implemented fail-over routing with QoS policies on network layer.
Outcome
Telephony costs reduced by 55%. Call recording and compliance logging enabled. System handles peak loads of 120 concurrent calls without degradation.
Smart Facility Automation System
Problem
A commercial property needed centralized control over HVAC, lighting, access control, and CCTV, all running on separate, incompatible systems with no unified management interface.
Solution
Designed a Home Assistant-based integration layer connecting Z-Wave, Zigbee, and IP-based devices. Built custom automation scripts for scheduled and event-driven control, with a remote management dashboard.
Outcome
Operational costs reduced 28% through scheduling and energy management. All building systems visible and controllable from a single pane. Remote incident response time cut from 2 hours to under 10 minutes.
Custom PHP/MySQL Business Management Platform
Problem
A logistics company was managing operations across spreadsheets and WhatsApp threads: no audit trail, no reporting, and no integration between billing, dispatch, and client management.
Solution
Built a role-based PHP web application with MySQL, covering client management, job dispatch, invoice generation, payment tracking, and management reporting with export functionality.
Outcome
Full operational visibility achieved. Invoice processing time dropped from 45 minutes to under 3 minutes. Management reporting that previously took a week now runs in seconds.
Public repositories on GitHub. Verified, version-controlled work you can inspect, clone, and run.
AWS Secure Remote Access (Client VPN)
Problem
Remote teams accessing AWS resources over the public internet with no encrypted channel or certificate-based authentication in place.
Solution
Terraform-provisioned AWS Client VPN with mutual TLS using an easy-rsa PKI. CloudWatch logs every connection event. One terraform apply deploys the full stack.
Outcome
Zero-trust encrypted tunnel into the VPC. Mutual certificate auth - no passwords to rotate or leak. Full CloudWatch audit trail of every connection.
AWS Cost Auditor
Problem
AWS bills accumulate quietly. Unattached EBS volumes, idle Elastic IPs, and long-stopped instances charge every month with no default alert.
Solution
Python + boto3 CLI that queries Cost Explorer for monthly service spend, compares month-over-month, and scans for idle resources with a per-item dollar estimate of monthly waste.
Outcome
Full cost snapshot in seconds using read-only IAM permissions. Clean terminal report plus optional CSV export. Works against any AWS account.
AWS Security Lens (CSPM Scanner)
Problem
AWS accounts collect misconfigurations silently - public S3 buckets, wildcard IAM policies, security groups exposing SSH, CloudTrail disabled. None of it triggers an alert by default.
Solution
Python + boto3 CSPM tool running 18 checks across S3, IAM, EC2, and logging. Every finding is severity-ranked (CRITICAL to LOW) with a concrete AWS CLI remediation command. Exports to JSON.
Outcome
Full posture snapshot in one command. Read-only - safe to run in production. JSON export feeds directly into remediation workflows and ticketing systems.
Certifications
Verified credentials from globally recognized certification bodies.
CompTIA Security+
CompTIA | Security Domain Certification
Covers threat management, cryptography, IAM, PKI, secure network architecture, and risk assessment methodologies. Industry benchmark for cybersecurity professionals.
Verify CredentialAWS Certified Solutions Architect
Amazon Web Services | Associate Level
Demonstrates ability to design distributed systems on AWS with optimal availability, cost efficiency, fault tolerance, and scalability using AWS services and best practices.
Verify CredentialGoogle Cybersecurity Certificate
Google | Professional Certificate
Covers threat identification, security information and event management (SIEM), network security, Python for security automation, and Linux system administration for security.
Verify CredentialGoogle AI Fundamentals
Google | AI Fundamentals
Applied AI concepts, machine learning fundamentals, LLM deployment, responsible AI principles, and integration of AI capabilities into production applications and business workflows.
Verify CredentialCambridge Certified Security Associate (CCSecA)
Cambridge International | Security Certification
Security associate certification covering network security, cryptography, and security principles. Completed 2008 to 2010. Listed on the Cambridge alumni register with ID 412046721.
Verify on Alumni RegisterTools & Technologies
Languages
Cloud Platforms
DevOps & IaC
AI & Automation
Networking & Telecom
Databases & Backend
Remote Work
All work is delivered remotely. Infrastructure is managed via SSH, cloud consoles, and IaC tooling. Communication runs through Slack, email, and video calls. Every system is documented before, during, and after delivery. Based in Douala, Cameroon (UTC+1), with full-day overlap with European business hours.
Timezone Flexibility
Africa (WAT/EAT) overlaps with European business hours and covers Middle East and Asian markets. Available for structured overlap with US East and West Coast teams.
Communication Infrastructure
Full remote collaboration stack in active daily use. Written documentation culture: every system, decision, and process is documented before, during, and after delivery.
Remote Infrastructure Management
Cloud systems, VoIP infrastructure, and IoT deployments managed and maintained remotely. Monitoring stacks, alerting pipelines, and runbook documentation are standard deliverables.