Hands-on engineering projects across infrastructure, delivery, security and operations.
An AWS delivery lifecycle built around an existing open-source application: Terraform-provisioned EKS, OIDC-authenticated CI/CD, immutable image delivery, monitoring, and validated teardown.
A delivery pipeline built around real release gates: blocking Trivy scanning, non-root hardened workloads, and a Kubernetes NetworkPolicy that restricts database access to the application Pods.
A batch enrichment workflow for device data using OpenAI and Google model APIs, with abstention-focused prompting, structured outputs and programmatic validation.
A static Astro build on Cloudflare Workers, deployed from one validated artifact per commit and served under a Content-Security-Policy derived from what the build actually contains.