Nzo ya Marques · House of Marques
Today · 5 min read

GOOD MORNING.WELCOME TO THE HOUSE OF MARQUES.

Skills don't expire. Fear does.

Loading today's briefing. If nothing appears, the latest run hasn't landed yet and these are placeholders.

Updated every 3 hours

Today in 30 seconds

Claude · AWS · cloud

Core every day

Cloud · AWS[source · date]

[Headline, linked to the original]

Solid?

Official source.

Telecom · 5G · telco cloud

Telecom when it matters

Telecom / 5G[source · date]

[Headline, linked to the original]

Highlight of the day · NBA

NBA · [today's highlight]

[Source and date. The latest from the NBA, every day.]

Signal to Cloud · The transition

15 YEARS
OF SIGNAL.
NOW CLOUD.

I didn't discover networks.
I built them. 2G to 5G. Submarine cables to data centres.
Now I'm taking everything I know to AWS.
This is that leap.

Connect on LinkedIn GitHub
15+Years in telecom
5Major companies
2G→5GFull-stack telecom
AWSNext chapter
Skills & capabilities

What I bring to the cloud

Cloud Infrastructure

Three systems live on AWS, built, run and paid for by me. Private networks with zero inbound ports, shell access only through SSM.

EC2 · GravitonVPCS3CloudFrontWAFRoute 53ACMSSM

Serverless & Events

An incident platform with no servers: one route per state change, P1 escalation by events, files straight to S3 with presigned URLs.

LambdaAPI Gateway · JWTDynamoDBCognitoEventBridgeStep FunctionsSNS

Infrastructure as Code & CI/CD

Everything as code: about 125 resources on one project. Plan with a read-only role, apply only after human approval, no stored keys.

TerraformGitHub ActionsOIDCAnsibleDependabotCloudFormation

Containers & Kubernetes

A 5G core and RAN on k3s, installed by Ansible over SSM, packaged with Helm. Multi-arch images built in CI and published to GHCR.

Kubernetes · k3sHelmDockerGHCRCloudflare Tunnel

Networks, 2G to 5G Core

15 years deep, from submarine fibre to 5G RAN. Now running a 5G standalone core and a simulated radio in the cloud: the UE attaches and pings.

5G SA coreOpen5GSOCUDU · srsUE5G RANLTEBGP/OSPFFibre optic

Data Centre Operations

Physical cloud infrastructure. Rack and stack. VMO2 and 3UK enterprise deployments across the UK.

HP serversExtreme NetworksEricssonA10Structured cabling

Monitoring & Reliability

KPI analysis since before it was called observability. Alarms on errors, failed escalations and missed backups; load tested before launch.

CloudWatchAlarmsVPC Flow LogsLoad testingRCAKPI analysis

Security & Access

One IAM role per function, no long-lived keys anywhere, secrets and account IDs kept out of public repos and CI logs.

Least privilegeOIDCIMDSv2CSPSecret scanningMFA

AI in Operations

Claude on Amazon Bedrock triages every new incident. The AI suggests a severity and a reason; a human decides.

Amazon BedrockClaudePrompt-injection guardHuman in the loop
Projects

What I've built

CloudOps

Live demo

A serverless platform for logging, working and closing IT and data-centre incidents: one place for every incident, its photos and full history.

  • About 125 resources in Terraform, shipped only through CI with human approval.
  • P1 incidents nobody picks up escalate by themselves: EventBridge and Step Functions, no glue code.
  • AI triage with Claude on Bedrock. It suggests; a manager decides.
LambdaAPI GatewayDynamoDBCognitoBedrockTerraform
github.com/rugerious/cloudops-aws-platform

Handover: 5G Operations Lab

Building

My handover from RAN to cloud: a cloud-native 5G network on Kubernetes in AWS.

  • Open5GS core and an OCUDU gNB with srsUE on k3s: the UE attaches and pings, 0% loss.
  • Built with Terraform and Ansible over SSM. Zero inbound ports; the node stops itself every night.
  • Our own Helm chart for the RAN; the radio images are built in CI at pinned commits.
k3sHelmOpen5GSOCUDUAnsibleTerraform
github.com/rugerious/handover-5g

Kuribotas

Live · in family use

A real-time chat for family and friends: 2000s IRC and instant messengers, rebuilt for the phone.

  • On a Graviton instance behind a Cloudflare Tunnel: no inbound ports at all.
  • Web Push encryption written from scratch and checked against RFC 8291.
  • Load tested: 150 people chatting, p99 7 ms, on the smallest instance.
TypeScriptWebSocketsSQLitePWADockerTerraform
github.com/rugerious/kuribotas
Career journey

Every stop sharpened the signal

  1. 2009
    Nokia · Lisbon, PT GDC Network Integration Engineer

    "First day. Cold server room. Cables everywhere. This is where it starts."

    Gained

    2G and 3G integration from scratch. Physical network understanding most engineers never touch.

    Why move

    Mastered the baseline. The world was bigger than Lisbon.

  2. 2013
    O2 / Telefónica · London, UK NMC Radio Analyst

    "London. Millions of users. National scale. This is the real thing."

    Gained

    Live ops at national scale. KPI discipline. BT, Vodafone, major partners. International confidence.

    Why move

    Wanted to go deeper. Below radio. Below everything.

  3. 2018
    Alcatel-Lucent · London, UK Network Design Engineer

    "Submarine cables. Under the ocean. Connecting continents. How is this even a job?"

    Gained

    The deepest layer of global internet infrastructure. Optical systems. Expertise very few engineers ever touch.

    Why move

    5G was coming. Wanted to build it.

  4. 2021
    Nokia · Lisbon, PT Network Design & Planning Engineer

    "5G. Not talking about it. Building it."

    Gained

    End-to-end 5G RAN design. Parameter tuning. Frequency planning. The complete modern mobile picture.

    Why move

    Networks are moving to the cloud. I needed to move with them.

  5. 2024
    Genesis Technologies · UK Data Centre & GDC Engineer

    "The cloud has to live somewhere. I'm going to learn every rack it lives in."

    Gained

    Physical cloud infrastructure. VMO2 and 3UK enterprise deployments. The bridge between telecom and cloud.

    Next

    AWS Solutions Architect Associate. The chapter that makes all the others make sense.

WHY GROWING?
WHY NOT.

Discomfort = DirectionEvery leap compoundsBorders are suggestionsSkills don't expire. Fear does.Nzo ya Marques
Right now · 2026

The leap to AWS

Live · in progress

AWS Solutions Architect.
Making the leap.

15 years of knowing how networks physically work, now applied to cloud architecture. Pursuing AWS SAA-C03. Three systems running on AWS, all in Terraform and all deployed over OIDC with no stored keys: a serverless incident platform with AI triage, a cloud-native 5G lab on Kubernetes, and a real-time chat my family uses every day. This site too: S3 and CloudFront, a briefing built from RSS every few hours. Every project on GitHub. One commit at a time.

AWS SAA-C03TerraformKubernetesServerlessGitHub Actions · OIDC5G coreBedrockCloud networkingIAM & security
Email LinkedIn GitHub