Building Resilient Cloud Infrastructure, Hardened CI/CD Pipelines & Secure Architectures
Hands-on engineering across AWS, Kubernetes, Terraform, Go, Python, and Cloud & Network Security.
Production-grade tools, automated security pipelines, and cloud native architectures.
Declarative Kubernetes infrastructure deployed via Terraform on AWS. Features ArgoCD ApplicationSets for multi-environment syncing, External Secrets Operator (ESO) syncing with AWS Secrets Manager, and Trivy automated container vulnerability gating.
A privacy-first digital safety platform built with Next.js App Router and React Server Components for zero client-side tracking. Features automated markdown content delivery, strict TypeScript type safety, and localized moderation workflows.
A full-stack subscription and recurring expense management platform engineered with a high-performance Go (Gin) REST API, React 18 frontend, PostgreSQL Row Level Security (RLS) policies, and automated email notification jobs.
Zero-long-lived-credentials CI/CD architecture replacing static AWS IAM keys with OpenID Connect (OIDC) identity federation in GitHub Actions, combined with automated Trivy vulnerability scanning and security regression checks.
Scaling worker nodes in Kubernetes has historically relied on the Kubernetes Cluster Autoscaler. While Cluster...
As Kubernetes clusters scale to hundreds of microservices and thousands of active pods, traditional networking...
Few things improve the developer feedback loop like ephemeral preview environments. Being able to open...
How to eliminate exposed bastion hosts and secure hybrid cloud environments using Tailscale subnet routers, Linux kernel tuning, and least-privilege ACL policies.
How I set up self-hosted Umami analytics with PostgreSQL and built a unified Homepage dashboard to monitor my local homelab services.
How I engineered a high-performance Go proxy to intercept LLM tool-calling payloads, mitigate prompt injections, and block destructive cloud operations in real time.
An engineering post-mortem on auditing generative AI applications, categorizing prompt injection vectors, and enforcing defensive guardrails.
An architectural deep-dive into building Digital Amannah, a privacy-focused platform utilizing Next.js, static generation, and automated content delivery.
A technical guide on how to design and execute a highly concurrent stress test for container build engines using Go, benchmarking concurrency limits, and tracking error rates.
A walkthrough of building SubTrackr, a subscription tracker featuring a React/Vite frontend, Go/Gin API, and PostgreSQL secured with Row Level Security.
A deep dive into Pythia, an open-source research CLI designed for automated LLM safety auditing, prompt-injection testing, and vulnerability evaluation.
A guide to resolving AppArmor permission issues when running FUSE-based or specialized container runtimes on Ubuntu 24.04 nodes in Azure Batch.
A deep dive into a subtle networking bug where Network Load Balancers (NLB) kill long-running container image pulls during automated build processes.