About Projects Services Message Me
CLOUD
ENGINEER.

One git push and the infrastructure builds itself.

buntu@cloud-shell — IaC
TERRAFORM
Buntu Stuurman
// Hi, I'm

Buntu
Stuurman

Cape Town, South Africa

I'm a Cloud Engineer with a Backend Software Engineering foundation, with four-plus years designing and securing production workloads across AWS and Azure. I build systems secure by instinct, scalable by design, and cost efficient by nature.

Security isn't a layer I bolt on at the end. I help organisations harden their cloud environments and protect the data inside them, which means staying close to how threats actually move and to the architecture practices that answer them.

My work lives at the intersection of cloud architecture and software craft. You bring the idea, I translate it into an architecture diagram, align with you until it fits your vision, then build it. Enterprise scale or far simpler, the bar doesn't move.

Nothing I ship is clicked into existence. Infrastructure gets defined in code, reviewed like code, and rebuilt the same way every time. When I work something out worth keeping, I write it up.

// Tech Stack
buntu@cloud-shell — architecture
$./stack --graph
CI / CD
  • GitHub Actions devops
IaC
  • CloudFormation aws only
  • Terraform multi-cloud
  • Bicep azure only
Cloud
  • AWS cloud
  • Azure cloud
Runtime
  • Python backend
  • Java backend
  • Docker devops
graph rendered — 9 nodes · 4 tiers

Credentials & Certs

// 04 verified

Selected
Projects

05 case studies
01

Cloud Infrastructure Automation — CloudFormation

End-to-end automation of AWS resource deployment, lifecycle management, and rollback strategies using nested CloudFormation stacks.

CloudFormation IAM EC2
Read Here
02

Serverless Microservices — API Gateway + Lambda + DynamoDB

Zero-server microservice architecture with event-driven invocation, auto-scaling compute, and single-digit millisecond DB reads.

API Gateway Lambda DynamoDB
Read Here
03

Static Site Hosting on Amazon S3 + CloudFront

Decoupled content delivery at the edge — S3 origin, global CDN distribution, and sub-100ms TTFB across regions.

S3 CloudFront IAM
Read Here
04

High Availability — Auto Scaling Group + Application Load Balancer

Fault-tolerant multi-AZ architecture with health-check-driven replacement, traffic routing, and zero-downtime deployments.

EC2 ALB ASG
Read Here
05

Cloud Resume Portfolio — S3 + CloudFront + GitHub Actions

Full-stack cloud resume built on the Cloud Resume Challenge — static frontend hosted on S3, distributed via CloudFront CDN, with a GitHub Actions pipeline for automated deployments.

S3 CloudFront GitHub Actions
View Live

What I
Build

From bare metal to the application layer, I design and deliver the full stack of cloud-native infrastructure.

SVC — 01

Cloud Architecture

Multi-cloud infrastructure design across AWS, GCP, and Azure. VPCs, IAM, networking, HA patterns, and disaster recovery.

SVC — 02

Serverless & Event-Driven

Lambda, Cloud Functions, event bridges, and queue-based architectures that scale to zero and back without blinking.

SVC — 03

Security & IAM

Least-privilege access, policy hardening, encryption strategies, and compliance-ready configurations baked in from day one.

SVC — 04

DevOps & IaC

Terraform, CloudFormation, and CI/CD pipelines that make infrastructure as repeatable and reviewable as application code.

SVC — 05

Backend Engineering

Python, Java, and Node.js services — clean APIs, data pipelines, and the glue code that holds cloud-native systems together.

SVC — 06

Cost Optimisation

FinOps analysis, rightsizing, Savings Plans, spot strategy, and architectural refactors that cut cloud bills without cutting corners.

Let's
Connect

Have infrastructure to architect, a product to launch, or a cloud bill that's getting out of hand? I'm all ears.

SEND A MESSAGE