Projects
Food Delivery Platform - DevSecOps
A production-grade Food Delivery web application designed to showcase comprehensive expertise in modern DevSecOps practices. The project demonstrates an end-to-end CI/CD lifecycle using Jenkins, deeply integrated with strict security scanning via OWASP Dependency-Check, SonarQube for code analysis, and Trivy for container vulnerability detection. It leverages ArgoCD to facilitate a robust GitOps workflow, automating the deployment of containerized microservices onto a managed AWS EKS cluster. To ensure high reliability, the platform includes a complete observability stack configured via Helm, utilizing Prometheus for metrics and Grafana for visual dashboards, alongside automated Jenkins SMTP email alerts.
3-Tier Notes App
A production-grade, containerized 3-tier application designed to demonstrate advanced DevOps practices including multi-stage build optimizations, intelligent reverse-proxy routing, automated static asset management, and rigorous container isolation. The architecture completely decouples the frontend (React served by Nginx), the backend (Django REST Framework served by Gunicorn), and the database (MySQL) into separate microservices. By utilizing Nginx as a unified entry point and static web server, it eliminates the need for an active Node.js server in production, drastically reducing memory consumption and attacking surfaces.
EC2 Instance Launcher
A clean, production-style Bash script that automates the process of launching an AWS EC2 instance using the AWS CLI. It acts as a lightweight alternative to IaC tools for simple deployments, featuring modular functions, automatic AWS CLI installation, credential validation, strict error handling, and environment-based configuration (.env).
Linux Automations Toolkit
A comprehensive interactive bash script designed for DevOps engineering tasks. It simplifies user management, system monitoring, and automated backups on Linux systems through an easy-to-use menu-driven interface. Features include creating/deleting users, displaying essential system metrics, automating timestamped directory backups, and keeping a comprehensive audit trail via structured activity logging.
3-Tier Admin Dashboard
A comprehensive, full-stack 3-Tier Admin Dashboard built natively with React, Node.js, Express, and MongoDB, meticulously designed to demonstrate modern web development and DevOps practices. At its core, the system features a robust Role-Based Access Control (RBAC) engine that provisions fine-grained access permissions across three distinct tiers (Super Admin, Admin, and User), ensuring that only high-level personnel can alter security roles. The entire application is containerized into a sophisticated 4-container architecture orchestrating the frontend, backend, database, and a centralized Nginx ingress proxy over an isolated virtual bridge network. By leveraging strict multi-stage Docker builds and secure HttpOnly cookie authentication, this project showcases a highly optimized, resilient, and enterprise-ready application environment.
Immich Docker Deployment
A minimal, automated Bash script that deploys the Immich self-hosted photo and video backup solution using official release files. It streamlines the installation process by creating the necessary directories, downloading the required Docker Compose configurations, and initializing the stack. The project also includes a comprehensive uninstallation script that safely tears down the stack, removes stray containers, cleans up volumes, and ensures a pristine system state.
Skills
Languages
Version Control & Collaboration
Containerisation & Orchestration
Cloud & AWS
CI/CD & Automations
Observability & Monitoring
Security
Infrastructure as Code (IaC) & Configuration Management
Operating Systems, Servers & Virtualization
Networking
Hardware & Troubleshooting
Experience
Software Developer Trainee - Apprenticeship
- Completed an apprenticeship focusing on understanding and learning enterprise-level software development and cloud computing practices in a structured training.
- Gained hands-on exposure to AWS Serverless, Lambda, Cloudtrail, React.js, MongoDB, and used data engineering tools like PySpark, learning how data-driven systems are designed and operated.
Systems Administrator
- Architected and managed a hybrid on-premises and AWS cloud infrastructure for the firm, to maintain 100% control and security of the sensitive banking and customer data on-premise using Proxmox, and TrueNAS servers, while using AWS for heavy workloads, achieving 99.7% infrastructure uptime.
- Engineered fault-tolerant and redundant servers, and implemented RAID configurations for data redundancy, and redundant power systems, and achieved 0% data loss, and 99% seamless workflow.
- Administered Docker containers with persistent datasets, and managed security groups, firewalls, Cloudflare Domains/DNS/Tunnels, and 24/7 monitoring. implemented ticketing systems, and project-tracking platforms and achieved 50% better and faster workflow, and reduced bottlenecks.
Software Developer Intern
- Developed cloud-native applications using Next.js, implementing authentication, client-side rendering, and bare-metal grid management application reducing page load times by 35%, improving scalability.
- Worked closely with senior engineers to architect backend features and enhance landing pages, UI components, to achieve 100% responsive pages with efficiency and contributed to technical documentations for reliable development.
Certifications
Ethical Hacker
Comprehensive understanding of legal and compliance requirements, vulnerability assessments, and mitigation strategies.
AWS Certified Solution Architect Associate
AWS Cloud concepts, security, architecture, and deployment.
Self-hosted infrastructure - Homelab Server
This portfolio and other services are powered by my custom home server setup running on Proxmox, with Docker containers and Tailscale/Cloudflare Tunnels for secure remote access from anywhere.
server architecture
how my home server infrastructure powers this portfolio and other services
Public Traffic
Browser requestsRemote Admin
Tailscale clientCloudflare
DNS - CDN - DDoS protectionTailscale VPN
WireGuard mesh - zero-configNetworking Layer
Routing - Firewalls - VLANsBare-metal
AMD Ryzen - 32GB ECC RAM - ZFS RAID - UPSProxmox VE
Bare-metal hypervisor - VM & LXC managementVirtual Machines (VMs)
Guest Operating SystemsUbuntu Server
Linux EnvironmentHome Assistant OS
Smart Home AutomationmacOS
Virtual Mac EnvironmentWindows Server
Active Directory & ServicesTrueNAS Core/Scale
NAS & App EcosystemTrueNAS Services
n8n - Immich - Nextcloud - Vaultwarden + MoreLXC - Docker Engine
Containerised ServicesThis Portfolio
Next.js / ReactDocker Containers
Prometheus - Grafana - Uptime Kuma + MoreAdguard Home
Adblocking & DNSlive services
currently running on my home server infrastructure
Portfolio Website
This website
Nginx Proxy Manager
Reverse proxy for managin...
AdGuard Home
Network-wide ad blocking
Uptime Kuma
Service monitoring
Prometheus
Time-series database & m...
Grafana
Monitoring & analytics das...
Home Assistant
Smart home automation
Vaultwarden
Self-hosted password ma...
Authentik SSO
Identity provider & SSO
Nextcloud
Self-hosted file sharing
Immich
Self-hosted photo manag...
Docker Portainer
Container management int...
n8n
Workflow automation platf...
Tailscale
Secure remote access
WireGuard
Fast & secure VPN
Coolify
Self-hosted PaaS platform
CloudPanel
Server management panel
Code Server
VS Code in the browser
Paperless-ngx
Document management s...
DocMost
Collaborative wiki & docs
Syncthing
Continuous file sync
Stremio
Video streaming platform
Jellyfin
Free software media system
Ollama
Local AI & LLM platform
Education
B.E. - Computer Science and Engineering
Contact
Get in touch
I'm currently open to new opportunities. Whether it's a project, a role, or just a chat — I'd love to connect.