Joseph Edaman Naja

Joseph Edaman Naja

AWS Solutions Architect – Professional | Associate | AI Practitioner

Cloud infrastructure engineer with 5+ years in data center operations and AWS environments, transitioning into Solutions Architecture. I design scalable, cost-effective cloud solutions grounded in real-world infrastructure experience — from physical hardware to cloud-native services.

👁️ Visitors: ...

Joseph Edaman Naja

Paris, France • josephnaja1@gmail.com • LinkedIn • josephnaja.com

Professional Summary

AWS Solutions Architect – Professional | Associate | AI Practitioner with 5+ years of experience in cloud infrastructure, data center operations, and systems administration. Combines deep hands-on infrastructure expertise with cloud architecture design skills, translating complex technical requirements into scalable, cost-effective AWS solutions. Proven track record of maintaining 100% uptime in Tier III environments and recovering 1,000+ cloud servers to improve service availability. Actively transitioning into a Solutions Architect role, leveraging end-to-end infrastructure knowledge to help organizations build resilient, intelligent cloud environments.

Certifications

  • AWS Certified AI Practitioner | Apr 2026
  • AWS Certified Solutions Architect – Professional | Dec 2025
  • AWS Certified Solutions Architect – Associate | Mar 2023
  • AWS Certified Cloud Practitioner | Nov 2021
  • ITIL 4 Foundation | Jul 2021

Core Competencies

Cloud & Architecture: AWS Architecture & Design, EC2, VPC, IAM, S3, Route 53, CloudFront, CloudWatch, CloudFormation, Lambda, Well-Architected Framework
Networking & Security: Cloud Networking, DNS, IPv4/IPv6, Load Balancing, VPN, Security Best Practices, Firewall Configuration
AI/ML & Automation: AI/ML Foundations, Infrastructure as Code, Bash Scripting, Python, AWS Lambda, Serverless Patterns
Infrastructure & Operations: Data Center Operations (Tier III & IV), Server Installation & Maintenance, ITSM/ITIL, Monitoring & Observability

Professional Experience

Amazon Web Services (AWS)

Data Center Technician

Paris, France May 2022 – Present
  • Recover and patch 1,000+ EC2, EBS, and S3 host servers, directly contributing to service availability and uptime SLAs across multiple Availability Zones — improving service availability by 30%.
  • Collaborate with network engineers and data center managers to maintain AWS network infrastructure, gaining deep understanding of cloud networking at the physical layer.
  • Install, configure, and maintain EC2 server and VPC network racks, building hands-on expertise in the compute, storage, and network layers that underpin AWS cloud services.
  • Lead safety and operational training programs for cross-functional teams, reducing incidents by 10% and fostering a culture of operational excellence.
  • Resolved a critical network issue preventing potential significant financial loss, demonstrating root cause analysis and rapid incident response capabilities.

Correlation One (Amazon Career Choice)

Software Developer Fellow

Remote Jul 2024 – Oct 2024
  • Selected for a competitive 23-week Software Developer Fellowship, building full-stack applications with HTML, CSS, JavaScript, React.js, RESTful APIs, and PostgreSQL — strengthening ability to evaluate and architect application workloads.
  • Developed and deployed web-based projects including e-commerce platforms with database integration, gaining practical understanding of multi-tier application architecture (frontend, backend, data layer).
  • Designed and implemented React-based applications applying component-driven architecture and state management patterns relevant to modern serverless and microservices design.
  • Managed end-to-end project delivery with weekly milestones, demonstrating the planning and stakeholder communication skills essential to solution design engagements.

MainOne Cable Co. Ltd

Data Center Operations Engineer

Accra, Ghana Dec 2020 – May 2022
  • Maintained 100% uptime across all electrical and precision cooling systems (UPS, PDU, CRACs, feeders & transformers) in a Tier III data center, ensuring high availability aligned with cloud service SLA standards.
  • Racked, installed, configured, and troubleshot 100+ servers, storage, and networking equipment, building deep understanding of compute, storage, and network layers that map directly to cloud service models (EC2, EBS, VPC).
  • Managed incident and problem resolution workflows using Remedy (ITSM), applying structured root cause analysis and change management processes aligned with ITIL best practices.
  • Produced daily, weekly, and monthly availability reports, developing a metrics-driven operational mindset essential to monitoring cloud workloads and maintaining SLA compliance.
  • Supervised facility and IT vendors, enforcing zero-tolerance standards for human error through process documentation and operational checklists — skills transferable to cloud security and compliance frameworks.
  • Generated comprehensive audit-ready documentation for internal reviews and external compliance assessments, demonstrating governance practices applicable to AWS Well-Architected and regulatory frameworks.

National Communications Authority (NCA)

Graduate Engineer

Accra, Ghana Sep 2019 – Aug 2020
  • Audited frequency allocations leading to a reallocation that improved spectrum efficiency by 87%, demonstrating analytical rigor and data-driven decision-making.
  • Authored technical reports that influenced critical regulatory decisions, enhancing mobile data service quality by 14%.
  • Collaborated with cross-border stakeholders on frequency sharing agreements, developing the communication and negotiation skills essential to customer-facing architecture roles.

Cloud Architecture Projects

Mistral LLM Inference Platform on AWS EKS

Architected and deployed a production-grade LLM inference platform serving Mistral 7B on AWS EKS with vLLM on NVIDIA A10G GPUs (Spot), a FastAPI gateway with authentication and rate limiting, Prometheus/Grafana observability, Helm-based deployments, Terraform IaC, and CI/CD canary pipelines with automated rollback — achieving 0% failure rate and ~3.4s inference latency.

Secure Multi-Account AWS Landing Zone for Banking

Designed and implemented a production-grade AWS Landing Zone for French banking institutions subject to DORA and RGPD regulations. The architecture provisions seven dedicated accounts across four OUs, with centralized security monitoring, immutable audit logging (365-day S3 Object Lock), hub-and-spoke networking via Transit Gateway with route table segmentation, dual-path hybrid connectivity (Direct Connect + VPN), and cross-region disaster recovery (RTO 4h, RPO 1h).

AWS Cloud Resume Challenge

Architected and deployed a full-stack serverless resume website using S3 (static hosting), CloudFront (CDN), Route 53 (DNS), DynamoDB (visitor counter), and Lambda (API backend) — demonstrating end-to-end AWS architecture design and implementation.

WordPress High-Availability Deployment

Designed and deployed a highly available WordPress application on AWS using EC2, RDS (Multi-AZ), Route 53, Application Load Balancer, and Auto Scaling Groups — showcasing multi-tier architecture, fault tolerance, and scalability patterns.

Education

Abdelmalek Essaadi University

MSc: Telecommunication Engineering

Tétouan, Morocco2019

Hassan I University

BSc: Telecom and Computer Networks Engineering

Settat, Morocco2017

Languages

• English (Fluent) • French (Fluent)

Hands-On Projects

Mistral LLM Inference Platform on AWS EKS

EKSTerraformHelmvLLMGPU (A10G)FastAPIPrometheusDockerGitHub ActionsSpot InstancesHPA

Designed and deployed a production-grade LLM inference platform serving Mistral 7B Instruct on AWS EKS with GPU-accelerated inference via vLLM. The architecture features a FastAPI gateway with bearer token authentication and per-IP rate limiting, proxying OpenAI-compatible requests to a vLLM backend running on NVIDIA A10G GPUs (Spot instances for 60-70% cost savings). Infrastructure is provisioned via Terraform (VPC, EKS, ECR, managed node groups with AL2023 NVIDIA AMI), deployed with Helm charts, and monitored with Prometheus metrics and Grafana dashboards. Autoscaling is driven by a custom HPA metric (pending inference request queue depth). CI/CD pipelines implement canary deployments with automated smoke tests and rollback. Load testing with Locust validated 0% failure rate at ~3.4s p50 latency for 100-token completions.

Mistral LLM Platform Architecture Diagram
📖 Read blog post →

AWS Cloud Resume Challenge

S3CloudFrontRoute 53DynamoDBLambdaAPI GatewayCloudFormationGitHub Actions

Built and deployed a full-stack serverless personal website on AWS. Static files are hosted in S3 and served globally through CloudFront with a custom domain and HTTPS via ACM. A visitor counter is powered by a Lambda function (Python) backed by DynamoDB, exposed through API Gateway and routed via CloudFront. The entire infrastructure is defined as code using CloudFormation and deployed with a single script. A GitHub Actions CI/CD pipeline automatically syncs website updates to S3 and invalidates the CloudFront cache on every push to main.

AWS Cloud Resume Challenge Architecture Diagram
📖 Read blog post →

Secure Multi-Account AWS Landing Zone for Banking

TerraformAWS OrganizationsTransit GatewayKMSSecurity HubGuardDutyCloudTrailDirect ConnectS3 Object LockIAM Identity Center

Designed and implemented a production-grade AWS Landing Zone for French banking institutions subject to DORA and RGPD regulations. The architecture provisions seven dedicated accounts across four OUs, with centralized security monitoring, immutable audit logging (365-day S3 Object Lock), hub-and-spoke networking via Transit Gateway with route table segmentation, dual-path hybrid connectivity (Direct Connect + VPN), and cross-region disaster recovery (RTO 4h, RPO 1h). Six Service Control Policies enforce compliance guardrails including region restriction, encryption enforcement, and service allowlisting. The entire infrastructure is codified in 10 reusable Terraform modules with a simulation mode for single-account testing.

AWS Landing Zone Organizations Architecture
📖 Read blog post →

WordPress Application Deployment

VPCEC2RDSEFSALBAuto ScalingRoute 53ACMNAT Gateway

Designed and deployed a highly available WordPress application for a medium-sized business on AWS. The architecture spans two Availability Zones with a VPC containing public and private subnets. An Application Load Balancer distributes traffic to EC2 instances running in an Auto Scaling group across private subnets. Amazon RDS (Multi-AZ) provides a managed, fault-tolerant MySQL database, while Amazon EFS provides shared storage for WordPress media files across all instances. NAT Gateways in the public subnets enable outbound internet access for the private instances. Route 53 handles DNS routing and ACM provides HTTPS encryption.

WordPress Application Deployment Architecture Diagram

Gen AI Spending Analyst Agent

Amazon BedrockConverse APIClaude 3Tool UsePythonMatplotlib

An AI-powered spending analysis agent built with Amazon Bedrock's Converse API and the tool use pattern. The agent reads transaction data from CSV files, categorizes expenses using keyword matching, calculates budgets with date-range filtering, and generates visual charts (pie and bar) — all through natural language conversation. The CLI-based agent uses a multi-turn conversation loop where Claude decides which local Python tools to call based on the user's question, executes them locally, and interprets the results in plain English. Built as a learning project to explore the fundamentals of building AI agents with function calling.

Certifications

AWS Certified AI Practitioner badge

AWS Certified AI Practitioner

April 2026

View Credential ↗
AWS Certified Solutions Architect – Professional badge

AWS Certified Solutions Architect – Professional

December 2025

View Credential ↗
AWS Certified Solutions Architect – Associate badge

AWS Certified Solutions Architect – Associate

March 2023

View Credential ↗
AWS Certified Cloud Practitioner badge

AWS Certified Cloud Practitioner

November 2021

View Credential ↗
ITIL 4 Foundation badge

ITIL 4 Foundation

July 2021

View Credential ↗

Blog