Fungai Marshall Mangondoza
😏

Hello, I'm Marshall. I'm a cloud & DevOps engineer with 8+ years of experience. I design and maintain infrastructure for ISP platforms serving 100k+ users. My focus is Docker, Kubernetes, API gateways, CI/CD pipelines, and cloud-native architecture.

About Me

Cloud & DevOps engineer with a foundation in full-stack development and a growing focus on cloud infrastructure, platform engineering, and security. I currently maintain infrastructure for ISP platforms serving over 100,000 users, managing everything from API gateways and containerized deployments to CI/CD pipelines and system monitoring.

My core stack is Docker, Linux, Go, PHP, Python, TypeScript (Next.js/React), Flutter, and PostgreSQL. I recently built a gRPC relay in Go to decouple mobile app releases from backend API changes, and deployed a full observability stack (Grafana, Loki, Prometheus, Tempo, Fluent Bit) for production ISP infrastructure.

I hold the AWS Cloud Practitioner and CCSK v4.1 certifications, and I'm studying toward the AWS Solutions Architect Associate (SAA-C03) alongside deepening my expertise in Terraform, Kubernetes, and CI/CD pipelines.

When I'm not deploying, I enjoy travelling, learning new languages (currently Turkish and Zulu), playing guitar, and exploring the intersection of AI and DevOps — building tools like The Hub, a containerized AI development environment that powers my daily workflow.

Projects

Warden — Deployment Orchestrator

Python-based blue/green deployment orchestrator with Docker, Redis state management, and webhook/CLI triggers. Full CI/CD pipeline via GitHub Actions (pytest gate → multi-stage Docker build → GHCR push with dual tagging). Infrastructure-as-Code via Terraform (8 resources, Docker provider). Built from scratch as a DevOps portfolio piece.

View ProjectRead Article
  • Python
  • Docker
  • Redis
  • CI/CD
  • GitHub Actions
  • Terraform
  • IaC

Waypoint — gRPC Relay

Go-based gRPC relay sitting between the TTAG REST gateway and 4 Flutter mobile apps across 5 ISP tenants. Decouples mobile releases from backend API changes — proto regeneration propagates to all apps without app store updates. 7 proto files, 50+ RPCs, with bidirectional streaming reserved for future chat. Learned Go and gRPC from zero in a single sprint.

  • Go
  • gRPC
  • Protobuf
  • API Gateway
  • Mobile Backend

Observability Stack

Designed and deployed a complete open-source monitoring stack for a production ISP API gateway: Grafana (dashboards), Loki (log aggregation), Prometheus (metrics), Tempo (distributed tracing), Fluent Bit (log pipeline with Lua-based container metadata enrichment). Cross-service trace linking between Loki and Tempo. Built from scratch where the workplace had zero observability.

  • Grafana
  • Loki
  • Prometheus
  • Tempo
  • Fluent Bit
  • Docker
  • Observability

Add To Basket — Payment Platform Infrastructure

Designed and deployed the cloud infrastructure for a payment integration company. Traefik reverse proxy routing 5 PHP services (API, dashboard, 3 client sites) across dedicated entrypoints with per-service PHP-FPM isolation behind a unified Nginx frontend. Dual MariaDB instances for transactional and media data separation. Portainer for container management with host-based Traefik routing. Full Docker Compose orchestration with persistent volumes and service dependency chaining.

  • Docker
  • Traefik
  • Nginx
  • PHP-FPM
  • MariaDB
  • Portainer
  • Infrastructure

TTAG — API Gateway

PHP-based API gateway serving multiple ISP platforms. Features JWT authentication, rate limiting, structured JSON logging, health endpoints, timing middleware, and WebSocket support. Currently being instrumented for full observability (metrics, distributed tracing). Containerized with Docker for production deployment.

  • PHP
  • API Gateway
  • Docker
  • JWT
  • WebSocket
  • Observability

nol-dashboard

Next.js operational dashboard for ISP network data. Real-time metrics visualization, containerized deployment with Docker Compose, PostgreSQL backend, and CI/CD pipeline integration.

  • Next.js
  • TypeScript
  • Docker
  • PostgreSQL
  • CI/CD

Nethouse & Kibrisonline Mobile Apps

Led development of two Flutter mobile apps for sister ISP companies. Published on iOS and Android for customer account management, bill payments, and support tickets.

View Project
  • Mobile App
  • Flutter
  • iOS
  • Android

The Hub — AI Development Environment

Containerized portable dev environment running Hermes Agent + TheCurator memory service + Telegram bot. Built on Docker with persistent context, skill management, and cron automation for personal productivity.

  • Docker
  • AI
  • DevOps
  • Automation
  • Python

Skills

Experience

Platform/Software Engineer

Netonline (Nethouse Networks)Nicosia, North Cyprus / İstanbul, Turkey
June 2019 - Present

Lead platform engineer at the largest ISP in North Cyprus. Built the DevOps toolchain from scratch: designed TTAG enterprise API gateway serving multiple ISP tenants with JWT auth, rate limiting, and WebSocket support. Deployed a full open-source observability stack (Grafana, Loki, Prometheus, Tempo, Fluent Bit) where the workplace had zero monitoring. Designed a gRPC relay in Go (Waypoint) to decouple mobile app releases from backend API changes across 4 Flutter apps. Manage containerized deployments, nginx reverse proxy, CI/CD pipelines, and infrastructure-as-code via Terraform.

Software Integration Engineer

Add To BasketNicosia, North Cyprus
November 2023 - Present

Payment integration company. Designed cloud infrastructure with Docker, Traefik Proxy, WireGuard, and Nginx. Built Docker Compose stack routing 5 PHP services across dedicated Traefik entrypoints with per-service PHP-FPM isolation. Dual MariaDB instances for transactional and media data separation. Portainer for container management. Server hardening, VPS provisioning, and deployment automation via Tmux/Neovim over SSH.

Full Stack Developer

Photon OrganizationJohannesburg, South Africa
July 2021 - September 2023

Energy company specializing in solar installations. Designed secure AWS environments for solar energy data management using Tailscale (zero-trust networking). Built REST APIs with Python, JWT and Redis, ensuring secure data flow between solar monitoring systems and dashboards. Managed server infrastructure with Tmux/Neovim over SSH.

Full Stack Developer

Ata BilişimNicosia, North Cyprus
November 2015 - September 2019

Digital marketing agency specializing in brand management and social media. Website design, API integration and data management, Joomla/WordPress theme development, Search Engine Optimizations (SEO), web app maintenance and upgrade, security reviews, and user management.

Junior Web Developer (Temporary)

Innovia DigitalNicosia, North Cyprus
May 2015 - October 2015

Worked on multiple projects, debugging apps, implementing designs, and creating scripts to accomplish repetitive tasks.

Contact

Charles Bukowski

Going all the way

" If you're going to try, go all the way. Otherwise, don't even start. This could mean losing girlfriends, wives, relatives and maybe even your mind. It could mean not eating for three or four days. It could mean freezing on a park bench. It could mean jail. It could mean derision. It could mean mockery — isolation. Isolation is the gift. All the others are a test of your endurance, of how much you really want to do it. And, you'll do it, despite rejection and the worst odds. And it will be better than anything else you can imagine. If you're going to try, go all the way. There is no other feeling like that. You will be alone with the gods, and the nights will flame with fire. You will ride life straight to perfect laughter. It's the only good fight there is. "

Please contact me directly on fmarshall.m@gmail.com or use the form below.