Available for Remote Engagements

Ndohnwi
Declan

AI, Cloud & Systems Architect · Douala, Cameroon. Open to remote work worldwide.

20+ years of professional technology delivery across cloud, cybersecurity, AI automation, VoIP, and SaaS. AWS Certified Solutions Architect. CompTIA Security+. Google AI and Cybersecurity certified. Available for remote engagements globally.

20+
Years Experience
5
Certifications
20+
Systems Deployed
8
Technical Domains
Ndohnwi Declan, AI Cloud and Systems Architect based in Douala, Cameroon

Ndohnwi Declan

AI · Cloud · Cybersecurity

Systems architect with over 20 years of professional technology delivery spanning telecommunications, networking, IP video, enterprise infrastructure, cloud architecture, cybersecurity, automation, and artificial intelligence. Career began in 2005 engineering carrier VoIP infrastructure for an international reseller carrying 300,000 minutes per month, and has progressed through enterprise surveillance systems for national government, hotel IT architecture, ISP media platforms, and now cloud, AI, and SaaS product engineering.

On the cloud side, I design and deploy production AWS environments with a focus on resilience, cost efficiency, and security posture. On the security front, I implement risk frameworks aligned with NIST CSF and CIS Controls, conduct technical audits, and build defensive infrastructure, validated by CompTIA Security+ and Google Cybersecurity certifications.

I build AI-powered automation and SaaS products, including TewaGo, a Business Operating System for WhatsApp I founded and architected in 2025, now live in beta. Current work designs and builds systems combining AI, cloud, software, security, and automation into production-grade platforms.

The defining capability is not tied to a single technology. It is the ability to enter an unfamiliar technical domain, understand how complex systems fit together across layers, select appropriate technologies for the constraints at hand, and turn that into production systems that are secured, monitored, documented, and maintained. Remote-first by default, operating effectively across time zones with structured async communication and full documentation discipline.

20 Years
of Delivery

Founder and Technical Architect, TewaGo

2025 – Present

SaaS · AI · WhatsApp Business Operating System

Architected and built TewaGo, a multi-tenant SaaS platform providing businesses with CRM, AI assistants, bulk messaging, chatbot workflows, shared team inbox, advertising integrations, and AI-driven customer acquisition. Live in beta with active business testers ahead of official launch.

Independent Technology Consultant & Systems Architect

2010 – Present

Cloud · Cybersecurity · AI · DevOps · Infrastructure

Independent consulting across cloud architecture (AWS), cybersecurity, AI automation, software engineering, and infrastructure for clients across Africa and internationally. Delivered production environments, security audits, AI workflow systems, and SaaS platforms across multiple industries.

Lead Technical Consultant, Swecom ISP

2012 – 2014

IPTV · Video-on-Demand · Streaming Infrastructure

Led architecture and implementation of an IPTV and Video-on-Demand platform serving 2,000+ subscribers across five cities. Designed server architecture, selected technology stack, provisioned streaming infrastructure, and integrated the platform with the ISP's network environment.

Lead Systems Architect and IT Engineer, Chariot Hotel

2010 – 2012

Enterprise IT · Windows Server · Property Management

Designed and deployed the hotel's complete IT environment: IP network, Windows Server 2008 R2, Active Directory, Microsoft Exchange, eZee property management system, electronic access control, and IP video surveillance. Led IT support for all hotel operations.

Lead Systems Architect, Essoka Security / DGSN

2007 – 2010

IP Video Surveillance · ANPR · Government Security

Lead architect for a 64-camera enterprise IP video surveillance deployment at Cameroon's national police authority headquarters, across 4 floors in 2 buildings, with video analytics, ANPR licence plate recognition, and a dedicated secure monitoring and control room.

Cambridge Certified Security Associate (CCSecA)

2008 – 2010

Network Security · Cryptography · Security Principles

Completed the Cambridge Certified Security Associate programme through Cambridge International, covering network security, cryptography, and security principles. Listed on the Cambridge alumni register with ID 412046721.

Cisco Certified Network Associate (CCNA)

2006 – 2010

TCP/IP · Routing · Switching · Cisco Technologies

Obtained CCNA certification, consolidating the networking foundation in TCP/IP, routing, switching, network troubleshooting, and Cisco technologies that underpinned all subsequent infrastructure and security engineering work.

VoIP and Telecommunications Engineer, Telcan Canada

2005 – 2007

VoIP · SIP · Class 5 Softswitch · 300K min/month

Engineered and maintained VoIP/telecom infrastructure for an international reseller: 17 SIP trunks, Class 5 softswitch configuration, GSM gateway integration, call-centre infrastructure, DID management, carrier interconnection, and QoS for ~300,000 call minutes per month.

Technical Capability Map

Cloud & Infrastructure

AWS Certified Solutions Architect

  • AWS VPC, EC2, RDS, S3, Lambda, CloudFront architecture
  • Infrastructure-as-Code with Terraform & CloudFormation
  • Multi-region high-availability design
  • Cost architecture & resource optimization
  • Container orchestration: Docker, ECS

Cybersecurity

CompTIA Security+ · Google Cybersecurity

  • NIST, ISO 27001, CIS Controls frameworks
  • Risk assessment & vulnerability management
  • Security audits & penetration testing
  • IAM policy design & zero-trust principles
  • Incident response & security monitoring

AI & Automation

Google AI Fundamentals

  • LLM integration & prompt engineering
  • n8n, Make, Zapier workflow automation
  • AI-driven business process optimization
  • Python scripting & data pipelines
  • API orchestration & webhook automation

Telecom & VoIP

Infrastructure & SIP Architecture

  • Asterisk & FreePBX PBX systems
  • SIP trunk configuration & DID management
  • Call routing, IVR, and queue management
  • QoS configuration for voice traffic
  • VoIP security & fraud prevention

Software Development

Python · PHP · MySQL

  • Python backend services & automation scripts
  • PHP/MySQL application development
  • RESTful API design & integration
  • Database schema design & optimization
  • Cron jobs & scheduled task architecture

Systems & IT Support

Smart Home · IoT · SysAdmin

  • Linux/Windows server administration
  • Smart home & IoT system integration
  • Network design, routing, & firewall config
  • Monitoring & alerting infrastructure
  • Helpdesk escalation & technical documentation

Selected Projects

Client work and open-source projects with documented outcomes, technology choices, and results.

Founded Product Live Beta

TewaGo

2025 – Present

Business Operating System for WhatsApp. A multi-tenant SaaS platform I founded and architected from scratch, providing businesses with a single operational layer covering customer acquisition through to customer conversation: CRM, AI assistants, chatbot workflows, bulk messaging, shared team inbox, advertising campaign management, and AI-generated creative workflows via the Meta Graph API.

Architecture

Multi-tenant Laravel/PHP backend, MySQL, Node.js, REST APIs, Supabase, systemd services, and PM2 process management

AI Layer

LLM-powered customer conversation, AI sales agents, generative image/video creative, voice agent capabilities, and n8n automation pipelines

Infrastructure

Ubuntu/Apache/PHP-FPM production deployment, Cloudflare R2 off-site backup replication, CDN media delivery, disaster recovery procedures

Laravel PHP MySQL Node.js Meta Graph API LLM APIs n8n Cloudflare R2 Ubuntu Supabase
Cloud Infrastructure
Production

AWS Production Environment Deployment

Problem

A scaling web application was hosted on a single server with no redundancy, automated backups, or cost controls; one hardware failure away from complete outage.

Solution

Designed a multi-AZ AWS architecture using EC2 Auto Scaling Groups, Application Load Balancer, RDS Multi-AZ, S3 for static assets, and CloudFront for global edge delivery. IaC via Terraform for repeatable deployments.

Outcome

99.95% uptime achieved. Infrastructure costs reduced 35% vs. legacy approach. Recovery time objective reduced from hours to under 5 minutes.

AWS EC2 RDS CloudFront Terraform Auto Scaling
Cybersecurity
Framework

Enterprise Security Audit Framework

Problem

An SME operating in financial services had no documented security posture, undefined incident response procedures, and uncontrolled user access privileges across critical systems.

Solution

Conducted a full security audit aligned to NIST CSF and CIS Controls. Implemented IAM role restructuring, MFA enforcement, network segmentation, and a documented incident response playbook.

Outcome

Critical attack surface reduced by 60%. Organization passed subsequent compliance review. Zero security incidents in the 12 months following implementation.

NIST CSF CIS Controls IAM Incident Response
AI & Automation
Deployed

AI-Powered Business Workflow Automation

Problem

A service business was spending 20+ hours weekly on manual report generation, client communication drafts, and data entry across disconnected SaaS tools.

Solution

Built an n8n-based automation layer integrating LLM APIs for content generation, webhook triggers for real-time data sync, and a custom Python middleware for business logic processing.

Outcome

Manual workload reduced by 18 hours per week. Turnaround on client deliverables cut from 48 hours to under 2 hours. System runs unattended with zero manual intervention.

n8n LLM APIs Python Webhooks REST APIs
Telecom
Production

Enterprise VoIP Infrastructure Deployment

Problem

A 50-seat call centre was running on aging PSTN hardware with high per-minute costs, no call recording, and no centralized management of routing or extensions.

Solution

Deployed Asterisk-based PBX with SIP trunking for international DIDs, configured IVR flows, call queues, and agent reporting. Implemented fail-over routing with QoS policies on network layer.

Outcome

Telephony costs reduced by 55%. Call recording and compliance logging enabled. System handles peak loads of 120 concurrent calls without degradation.

Asterisk SIP FreePBX QoS IVR
IoT / Smart Systems
Integrated

Smart Facility Automation System

Problem

A commercial property needed centralized control over HVAC, lighting, access control, and CCTV, all running on separate, incompatible systems with no unified management interface.

Solution

Designed a Home Assistant–based integration layer connecting Z-Wave, Zigbee, and IP-based devices. Built custom automation scripts for scheduled and event-driven control, with a remote management dashboard.

Outcome

Operational costs reduced 28% through scheduling and energy management. All building systems visible and controllable from a single pane. Remote incident response time cut from 2 hours to under 10 minutes.

Home Assistant Z-Wave Zigbee Python MQTT
Backend Development
Live System

Custom PHP/MySQL Business Management Platform

Problem

A logistics company was managing operations across spreadsheets and WhatsApp threads: no audit trail, no reporting, and no integration between billing, dispatch, and client management.

Solution

Built a role-based PHP web application with MySQL, covering client management, job dispatch, invoice generation, payment tracking, and management reporting with export functionality.

Outcome

Full operational visibility achieved. Invoice processing time dropped from 45 minutes to under 3 minutes. Management reporting that previously took a week now runs in seconds.

PHP MySQL REST API RBAC Reporting

Public repositories on GitHub. Verified, version-controlled work you can inspect, clone, and run.

Cloud Security
Open Source

AWS Secure Remote Access (Client VPN)

Problem

Remote teams accessing AWS resources over the public internet with no encrypted channel or certificate-based authentication in place.

Solution

Terraform-provisioned AWS Client VPN with mutual TLS using an easy-rsa PKI. CloudWatch logs every connection event. One terraform apply deploys the full stack.

Outcome

Zero-trust encrypted tunnel into the VPC. Mutual certificate auth - no passwords to rotate or leak. Full CloudWatch audit trail of every connection.

Terraform AWS Client VPN mTLS easy-rsa CloudWatch IaC
AWS / Python
Open Source

AWS Cost Auditor

Problem

AWS bills accumulate quietly. Unattached EBS volumes, idle Elastic IPs, and long-stopped instances charge every month with no default alert.

Solution

Python + boto3 CLI that queries Cost Explorer for monthly service spend, compares month-over-month, and scans for idle resources with a per-item dollar estimate of monthly waste.

Outcome

Full cost snapshot in seconds using read-only IAM permissions. Clean terminal report plus optional CSV export. Works against any AWS account.

Python boto3 Cost Explorer EC2 CLI
Security / Python
Open Source

AWS Security Lens (CSPM Scanner)

Problem

AWS accounts collect misconfigurations silently - public S3 buckets, wildcard IAM policies, security groups exposing SSH, CloudTrail disabled. None of it triggers an alert by default.

Solution

Python + boto3 CSPM tool running 18 checks across S3, IAM, EC2, and logging. Every finding is severity-ranked (CRITICAL to LOW) with a concrete AWS CLI remediation command. Exports to JSON.

Outcome

Full posture snapshot in one command. Read-only - safe to run in production. JSON export feeds directly into remediation workflows and ticketing systems.

Python boto3 S3 IAM EC2 CloudTrail

Certifications

Verified credentials from globally recognized certification bodies.

CompTIA Security+

CompTIA | Security Domain Certification

Verified

Covers threat management, cryptography, IAM, PKI, secure network architecture, and risk assessment methodologies. Industry benchmark for cybersecurity professionals.

Verify Credential

AWS Certified Solutions Architect

Amazon Web Services | Associate Level

Verified

Demonstrates ability to design distributed systems on AWS with optimal availability, cost efficiency, fault tolerance, and scalability using AWS services and best practices.

Verify Credential

Google Cybersecurity Certificate

Google | Professional Certificate

Verified

Covers threat identification, security information and event management (SIEM), network security, Python for security automation, and Linux system administration for security.

Verify Credential

Google AI Fundamentals

Google | AI Fundamentals

Verified

Applied AI concepts, machine learning fundamentals, LLM deployment, responsible AI principles, and integration of AI capabilities into production applications and business workflows.

Verify Credential

Cambridge Certified Security Associate (CCSecA)

Cambridge International | Security Certification

Verified

Security associate certification covering network security, cryptography, and security principles. Completed 2008 to 2010. Listed on the Cambridge alumni register with ID 412046721.

Verify on Alumni Register

Tools & Technologies

Languages

Python PHP SQL Bash / Shell JavaScript YAML HCL (Terraform)

Cloud Platforms

AWS EC2 AWS S3 AWS RDS AWS Lambda CloudFront Route 53 CloudWatch IAM

DevOps & IaC

Terraform Docker GitHub Actions CloudFormation Apache Nginx PHP-FPM PM2 systemd Linux Git

AI & Automation

n8n LLM APIs OpenAI API Anthropic API Meta Graph API AI Agents RAG Webhooks

Networking & Telecom

Asterisk FreePBX SIP TCP/IP VLANs pfSense Wireshark QoS

Databases & Backend

MySQL PostgreSQL Redis Laravel Flask Node.js Supabase Cloudflare R2 REST APIs

Remote Work

All work is delivered remotely. Infrastructure is managed via SSH, cloud consoles, and IaC tooling. Communication runs through Slack, email, and video calls. Every system is documented before, during, and after delivery. Based in Douala, Cameroon (UTC+1), with full-day overlap with European business hours.

Timezone Flexibility

Africa (WAT/EAT) overlaps with European business hours and covers Middle East and Asian markets. Available for structured overlap with US East and West Coast teams.

GMT+1 GMT+3 EU Overlap Async-first

Communication Infrastructure

Full remote collaboration stack in active daily use. Written documentation culture: every system, decision, and process is documented before, during, and after delivery.

Slack Zoom Notion Jira GitHub

Remote Infrastructure Management

Cloud systems, VoIP infrastructure, and IoT deployments managed and maintained remotely. Monitoring stacks, alerting pipelines, and runbook documentation are standard deliverables.

SSH CloudWatch Grafana Uptime Kuma
100%
Remote project delivery rate; no on-site dependency for any phase of work
24hr
Maximum response time during standard availability window, typically under 2 hours
Full
Documentation delivered with every system: architecture diagrams, runbooks, SOPs

Available for
Remote Engagements

If you need cloud infrastructure, cybersecurity, AI automation, VoIP, or SaaS development delivered remotely, get in touch. hello@ndeclanx.com or via LinkedIn.