SSL Certificate Fleet Automation
Designed and deployed Ansible-based SSL automation across ~200 servers and 3 domains. Implemented pre-flight validation, automated rollback on failure, and Slack-integrated deployment reporting. Evaluated Sectigo, AWS ACM, and Let's Encrypt against enterprise compliance requirements; authored end-to-end deployment and rollback runbook adopted as the team standard.
AnsibleSectigo
CloudflareAWS ACMBash
Server & Environment Consolidation
Consolidated dedicated servers onto right-sized OVH Public Cloud nodes, cutting compute cost ~51% and unlocking cloud-native shelve/unshelve capability unavailable on dedicated hardware. Simplified a Kubernetes control plane after diagnosing an etcd quorum misconfiguration, removing a load-balancer dependency and further lowering control-plane cost.
OVH Public CloudKubernetes
TerraformPython
Weekend Cool-Off Automation for Non-Production Infrastructure
Built a Python automation framework to safely stop/start Kubernetes and cloud database resources in dependency-ordered groups, running live, verified delete/recreate cycles against production-equivalent clusters with zero configuration drift. Found and fixed cross-account credential-isolation bugs before either could cause a wrong-environment production action, and delivered independently-verified backup/restore capability as a safety net ahead of live execution.
PythonAWS EKS/RDS/ElastiCache
OVH API
Security Compliance & Vulnerability Scanning Automation
Deployed Wazuh SIEM across Azure VM and Kubernetes environments; integrated Trivy for container image scanning; built automated compliance and vulnerability report generation pipeline. Configured WAF and reverse proxy (Nginx, HAProxy, Traefik) for secure ingress; authored DR plan for cloud-hosted infrastructure.
WazuhTrivyWAF
AzureKubernetesBash
Enterprise Tooling Migration: CI/CD, Security & Monitoring
Led full-stack migration from Jenkins to GitLab CI/CD, Rapid7 to Qualys, and Datadog to SumoLogic across 40+ pipelines with zero production downtime — eliminating three legacy toolchains and their licensing spend while improving deployment velocity and reliability.
GitLab CI/CDQualysSumoLogic
Environment Rehydration Framework
Developed automated AMI generation and multi-environment rebuild framework supporting SQL and MongoDB migrations. Reduced environment provisioning time from 3 hours to under 15 minutes while ensuring configuration consistency across dev, staging, and production.
PythonShellPacker
AWS AMIAnsible
Shakti RISC-V Processor on FPGA
Developed complete SoC system on Nexys A7 FPGA including Linux kernel porting and firmware API design. Implemented custom peripheral interfaces and optimised boot sequences for RISC-V architecture. Semifinalist, Innovate FPGA Design Contest 2021–22.
RISC-VFPGA
VerilogLinux
IoT Billboard Management System
AWS-based automated advertisement scheduling platform with real-time content management, analytics dashboard, and remote display control across distributed networks. Winner — Cypress Bluetooth 5 IoT Contest 2019.
AWSIoT
BLEPython