★ flagship production platform
● production live
☸️ CloudOps Insight — GitOps & FinOps Platform
Production multi-tenant CloudOps and FinOps platform for connecting AWS accounts securely, synchronizing cloud inventory, health, metrics, and costs, and presenting operational insights through a modern command-center UI. The application runs on OCI Kubernetes Engine and is delivered through a GitOps workflow.
- Built multi-tenant workspaces with owner/admin/member/viewer RBAC, invitations, tenant isolation, authentication lifecycle, email verification, password reset, and account deletion workflows.
- Implemented secure customer AWS onboarding with STS AssumeRole + External ID, avoiding stored customer access keys while synchronizing resources, CloudWatch metrics, and Cost Explorer data.
- Built CI/CD with GitHub Actions, Trivy, GHCR, Helm, and Argo CD, including immutable SHA-tagged multi-architecture linux/amd64 and linux/arm64 images.
- Provisioned the production OCI platform with Terraform, including OKE, VCN/network security, persistent storage, Object Storage, Vault-aware infrastructure, PostgreSQL backups, and a certified restore workflow.
Kubernetes
OCI OKE
Argo CD
Helm
Terraform
GitHub Actions
AWS
FastAPI
React
PostgreSQL
View architecture & platform details
Platform architecture
React + TypeScript frontend, FastAPI backend, Celery workers and scheduler, PostgreSQL, Redis, AWS cross-account integrations, and Kubernetes-native production operations.
GitOps delivery
Application commits are tested and scanned in GitHub Actions, published to GHCR as immutable images, promoted through GitOps configuration, and reconciled into OKE by Argo CD.
Security & recovery
Workspace RBAC, tenant isolation, AWS External IDs, Sealed Secrets, Cloudflare Tunnel, scheduled PostgreSQL logical backups, OCI storage protection, and restore validation.
Git Push
→
GitHub Actions
→
Test + Trivy
→
GHCR
→
GitOps
→
Argo CD
→
OCI OKE
AWS STS
Cost Explorer
CloudWatch
boto3
Celery
Redis
SQLAlchemy
Alembic
Cloudflare Tunnel
Sealed Secrets
GHCR
Trivy
OCI VCN
Object Storage
Block Volume
★ featured cloud-native project
● deployed on demand
🚢 Cloud-Native Task Manager on AWS
Production-inspired FastAPI application deployed on AWS ECS Fargate with Terraform-managed infrastructure, RDS PostgreSQL, Docker, GitHub Actions CI/CD, OIDC authentication, automated database migrations, HTTPS, monitoring, and cost-controlled operations.
- Designed six reusable Terraform modules for AWS networking, security, RDS, ALB, ECS, and monitoring.
- Built secure GitHub Actions CI/CD using AWS OIDC, immutable image tags, Alembic migrations, ECS deployment, and HTTPS smoke testing.
- Deployed a non-root Dockerized FastAPI service on Amazon ECS Fargate, connected to a non-public RDS PostgreSQL database.
- Implemented HTTPS, Secrets Manager integration, CloudWatch alarms, health checks, deployment rollback controls, and cost-saving start/stop automation.
AWS
ECS Fargate
Terraform
Docker
GitHub Actions
FastAPI
PostgreSQL
CI/CD
ℹ API documentation is available when the cost-controlled AWS environment is running.
View deployment workflow & complete technology stack
Infrastructure
Terraform provisions a one-Availability-Zone VPC, security groups, private database subnets, RDS PostgreSQL, ALB, ECS Fargate, ECR, IAM, ACM, Secrets Manager, CloudWatch, and encrypted S3 remote state.
Secure delivery
GitHub Actions assumes a repository-restricted AWS role through OIDC, builds a commit-SHA-tagged image, publishes it to ECR, and registers a new ECS task definition.
Reliable rollout
A one-off ECS task runs Alembic migrations before the service update. The workflow waits for stability and verifies the HTTPS health endpoint with retries.
Push to main→Lint + Test→AWS OIDC→Build + ECR→Alembic Migration→ECS Rollout→HTTPS Smoke Test
⌘Supporting Cloud & Engineering Tools
Amazon RDSAmazon ECRApplication Load BalancerAWS IAMAWS OIDCSecrets ManagerAWS Certificate ManagerCloudWatchSQLAlchemyAlembicPytestRuff
★ featured cloud project
● production live
☁️ Cloud Portfolio — AWS S3 + CloudFront
Production portfolio website built as a static cloud project and deployed on AWS S3
with CloudFront CDN, HTTPS delivery, and a custom domain. The project is delivered
through a GitLab CI/CD build → test → deploy workflow and includes source code,
resume PDF, certificates, release artifacts, monitoring, and rollback support.
🚀 AWS S3 + CloudFront
🔒 HTTPS + custom domain
⚙️ 95 commits
AWS S3
CloudFront
GitLab CI/CD
Custom Domain
HTTPS
Static Site
View architecture & build details
What I built
A production-ready cloud-hosted portfolio with static assets, resume download, certificates, custom domain, and HTTPS delivery.
Workflow
GitLab push → validate → quality checks → build artifact → local link test → S3 sync → CloudFront invalidation → live verification.
Result
A real DevOps portfolio project demonstrating CI/CD automation, AWS static hosting, CDN delivery, production monitoring, and rollback readiness.
GitLab Repo
→
CI/CD
→
S3
→
CloudFront
→
Custom Domain
→
User
● deployed
🦊 GitLab CI/CD Build–Test–Deploy Pipeline
Hands-on GitLab CI/CD learning project focused on DevOps workflows, automated
testing, build artifacts, Docker-based CI environments, quality checks,
environment variables, and deployment practice with Netlify, AWS S3, EC2, SSH, and SCP.
186 commits
1 environment
Build/test/deploy
GitLab CI/CD
Node.js
Vite
Vitest
ESLint
AWS CLI
Netlify
View workflow details
What I built
A GitLab pipeline that installs dependencies, builds the app, runs tests, checks quality, saves artifacts, and practices deployment flows.
Problem solved
Moved from manual project checks to repeatable CI jobs with artifacts, linting, unit tests, secrets, and deployment variables.
Result
Practical CI/CD knowledge covering runners, Docker images in CI, merge requests, Netlify deploys, AWS S3, EC2, SSH, and SCP.
Install
→
Build
→
Test
→
Lint
→
Artifacts
→
Deploy
● published
🐳 Docker Essentials — Containerized App Workflow
Containerized a Python hello-world application and published the latest image to
Docker Hub. The image targets linux/amd64, includes the app file in the image layer,
and runs the container with python app.py.
Docker Hub image
linux/amd64
37.59 MB compressed
Docker
Python
Dockerfile
Image Layers
Container Workflow
View container details
What I built
A small Python app packaged into a Docker image and published under the python-hello-world latest tag.
What I practiced
Docker image publishing, image layers, base image usage, app file copying, and container command execution.
Result
A shareable Docker Hub image that demonstrates a basic containerized application workflow.
App
→
Dockerfile
→
Image
→
Docker Hub
→
Run Container
● completed
📡 IoT Sensor STM32 + LoRa + BME680
Microcontroller-based IoT prototype for smart environmental sensing and long-range
wireless data communication using STM32 NUCLEO-G071RB, BME680 sensor, SX1262 LoRa HAT,
UART, and PuTTY-based CLI commands.
STM32 firmware
BME680 readings
LoRa transmission
STM32
LoRa
BME680
UART
I2C
SPI
PuTTY CLI
View embedded system details
What I built
An STM32-based sensing prototype that reads temperature, humidity, pressure, and gas resistance from BME680.
How it works
Sensor data is accessed through CLI commands such as TEMP, HUM, PRESS, GAS, ALL, and transmitted using LoRa commands.
Result
A final embedded implementation using I2C, SPI, UART CLI control, automatic/manual readout, and LoRa data transmission.
BME680
→
STM32
→
UART CLI
→
LoRa
→
Receiver
● completed
🐧 Network Performance Benchmarking eBPF/XDP
Network performance analysis project using eBPF/XDP concepts to benchmark router
throughput and latency, collect measurements, and support automated analysis with
Python and shell tooling as part of IT Systems Performance Analysis work.
59 commits
Measurements repo
Throughput + latency
eBPF
XDP
Linux
Networking
Python
Shell
View benchmarking details
What I worked on
Benchmarking network behavior with performance-focused Linux networking concepts and measurement data.
Focus area
Router throughput, latency, packet-processing performance, and repeatable measurement collection.
Result
A documented performance-analysis repository with measurement material for IT Systems Performance Analysis.
Traffic
→
Router
→
eBPF/XDP
→
Measurements
→
Analysis