Building Resilient Cloud Infrastructure, Hardened CI/CD Pipelines & Secure Architectures
Hands-on engineering across AWS, Kubernetes, Terraform, Go, Python, and Cloud & Network Security.
Production-grade tools, automated security pipelines, and cloud native architectures.
Declarative Kubernetes infrastructure deployed via Terraform on AWS. Features ArgoCD ApplicationSets for multi-environment syncing, External Secrets Operator (ESO) syncing with AWS Secrets Manager, and Trivy automated container vulnerability gating.
A privacy-first digital safety platform built with Next.js App Router and React Server Components for zero client-side tracking. Features automated markdown content delivery, strict TypeScript type safety, and localized moderation workflows.
A full-stack subscription and recurring expense management platform engineered with a high-performance Go (Gin) REST API, React 18 frontend, PostgreSQL Row Level Security (RLS) policies, and automated email notification jobs.
Zero-long-lived-credentials CI/CD architecture replacing static AWS IAM keys with OpenID Connect (OIDC) identity federation in GitHub Actions, combined with automated Trivy vulnerability scanning and security regression checks.
Why I Replaced Third-Party Analytics with Self-Hosted Umami
As autonomous AI agents and Large Language Models (LLMs) gain tool-calling capabilities—executing database queries, triggering...
Transforming an Old Laptop into a Silent Linux Server & Private AI Homelab
In my post about building an EKS cluster, I mentioned that Kustomize “saved my sanity.” That wasn’t an exaggeration. Before I adopted it, managing Kubernetes configurations for different environments (dev,...
I used to look at small Terraform PRs and think, “this is tiny, it will be fine.” A few incidents taught me that tiny infrastructure changes can still cause big...
Bug Bounties as a Hobby: What Keeps Me Consistent
I recently worked on two pipelines that solved real delivery problems:
Grafana Migration: From On-Prem to Cloud
Earning My TCM Security Practical Junior Penetration Tester Certification
Hack The Box: TwoMillion (Easy)
Terraform Modules: Azure and GCP, My Way
GitHub Actions Security Hardening: What I Actually Use
When I first started working with ArgoCD ApplicationSets, I thought it would be straightforward. You make changes in GitHub, push them, and ArgoCD syncs everything automatically. What could be simpler?...