// cloud engineer · leeds, uk

Joshua Barradas

I build serverless, infrastructure-as-code systems on AWS — and I keep them running. This page is one of them: static site on private S3 behind CloudFront, with a Lambda + DynamoDB visitor counter, deployed by Terraform and GitHub Actions.

EXPERIENCE

Cloud Engineer

Aug 2025 - Jan 2026

RFID inventory platform · retail (40+ branches)

  • Production AWS platform for real-time stock visibility across a multi-branch retailer: IoT Core rules engine, Lambda, DynamoDB, API Gateway and S3, integrated with SAP (IDoc) and instrumented with CloudWatch.
  • Infrastructure defined in Terraform; deployed to af-south-1.
  • Contributed to a measured reduction in branch stockouts of roughly 20%.

Cloud Engineer — Integrations (contract)

Apr 2026 - Present

JobAdder OAuth 2.0 integration

  • Rebuilt a single-tenant OAuth integration into a multi-tenant architecture: per-tenant token storage in DynamoDB and three Lambda functions (callback, refresh, candidate fetch), provisioned via CloudFormation.

PROJECTS

Cloud Resume Challenge flagship · live

repo →

The site you're reading now.

  • Private S3 origin behind CloudFront (Origin Access Control), custom domain over HTTPS with an ACM certificate.
  • Visitor counter: API Gateway → Lambda → DynamoDB, using an atomic update so no visit is ever lost under concurrency.
  • 100% Terraform with remote state; GitHub Actions CI/CD that tests, applies, syncs and invalidates on every push — authenticating to AWS via OIDC, with no long-lived keys.

intellidoc-engine

repo →

Receipt / document processing pipeline on AWS.

jobadder-oauth-aws

repo →

Multi-tenant OAuth 2.0 token service (sanitised, with live demo).

CERTIFICATIONS

SKILLS

AWS

Lambda · DynamoDB · API Gateway · S3 · CloudFront · Route 53 · IoT Core · CloudWatch

IaC & CI/CD

Terraform · CloudFormation · GitHub Actions · OIDC

Languages

Python · Bash · SQL

Integration

SAP (IDoc) · REST APIs · OAuth 2.0

EDUCATION

BSc Business with Marketing

2025

University of Leeds