Projects

Technical Projects ๐Ÿš€

Docker Swarm & OCI Kubernetes Testing Platform with Terraform ๐Ÿณโ˜๏ธ

Multi-version Kubernetes/Docker Swarm test orchestration platform provisioned on Oracle Cloud via Terraform. Features Bitbucket Pipelines CI/CD, OCI container registries, and automated Python testing pipelines gating multi-branch product releases.

Stack
Docker SwarmOracle Cloud (OCI)TerraformBitbucket PipelinesOCIRKubernetes TestingPython Test Automation

Full-Stack Enterprise Observability & RMM Agent Infrastructure ๐Ÿ“Š๐Ÿ””

Enterprise-wide observability and RMM monitoring ecosystem featuring OpenTelemetry, Prometheus, PromQL, Grafana, and Netdata. Integrates embedded RMM agents on endpoints for automated metric collecting, log aggregation, and real-time alert triggers via email and webhooks.

Stack
OpenTelemetryPrometheusPromQLGrafanaNetdataRMM AgentsAlert TriggersLog Aggregation

Global Cloud AV / EDR Integration & On-Prem Hybrid Security (Bitdefender GravityZone, SentinelOne & Ubiquiti) ๐Ÿ›ก๏ธ๐Ÿฐ

Enterprise EDR and AV deployment integrating cloud platforms (Bitdefender GravityZone Cloud, SentinelOne) for international endpoints alongside strictly isolated on-premise Bitdefender virtual appliances and Ubiquiti UniFi firewalls for legacy and air-gapped infrastructure.

Stack
Bitdefender GravityZoneSentinelOneUbiquiti UniFiOn-Premise SecurityLegacy & Air-Gapped InfrastructureEDR / AV

Global Fortinet Site-to-Site SD-WAN & Branch Security Architecture ๐Ÿ›ก๏ธ๐ŸŒ

Multi-branch IPsec VPN network connecting global branch offices via FortiGate appliances and FortiCloud. Enforces localized network segmentation and guardrails for on-prem branch services while maintaining global security compliance.

Stack
FortiGateFortiCloudFortiManagerSite-to-Site IPsec VPNSD-WANGlobal Multi-BranchNetwork Guardrails

Defense-Grade On-Prem to GCP Datacenter Migration ๐Ÿ›ก๏ธโ˜๏ธ

Migrated physical server racks running VMware ESXi 6.x to Google Cloud Platform (GCP) for a defense cybersecurity firm. Replicated complex network segmentation with GCP VPCs and firewall policies, modernizing infrastructure before secure hardware decommissioning.

Stack
Google Cloud Platform (GCP)VMware ESXi 6.xLift & Shift MigrationVPC Network SegmentationDatacenter Decommissioning

AI LLM Router & Budget Observability Gateway ๐Ÿค–๐Ÿ“Š

Enterprise multi-provider AI gateway routing between Anthropic, AWS Bedrock, Azure OpenAI, and GCP Vertex AI over an encrypted VPN. Features budget tracking, daily caps, token analytics, and task cost mapping to Jira, backed by AWS RDS and a custom WebGUI.

Stack
AWS RDSAWS BedrockAnthropic APIAzure OpenAIGCP Vertex AIJira APIEncrypted VPNWebGUI

Jira Asset Management Agent with OCR ๐Ÿ“ฆ๐Ÿค–

Conversational AI agent for global IT equipment tracking. Integrates OCR scanning for automatic serial number and invoice ingestion, linking hardware items to personnel records in Jira Assets.

Stack
Jira Assets APIOCR ParsingPythonAI AgentChat Integration

Self-Hosted Enterprise Asset Management & Inventory System (Odoo & MSSQL / IIS) ๐Ÿ“ฆ๐Ÿข

Self-hosted enterprise inventory and asset tracking platform powered by Odoo ERP, synchronized with Microsoft SQL Server (MSSQL) databases and corporate web apps hosted on IIS. Automates lifecycle tracking, stock workflows, and legacy database integration.

Stack
Odoo ERPMicrosoft SQL Server (MSSQL)IIS Web ServerSelf-Hosted InventoryAsset ManagementEnterprise Web Portals

Enterprise Service Aggregation & Centralized Portal Architecture (Dashy & Homer) ๐ŸŒ๐Ÿงญ

Designed and deployed customized enterprise service homepages using Dashy and Homer to consolidate company tools, applications, internal services, and monitoring feeds into a single, unified navigation hub for employees and technical teams.

Stack
DashyHomerCentralized Service PortalDashboardsApplication AggregationEnterprise Navigation

Enterprise SaaS & Workspace Administration (Atlassian, M365, Google Workspace, Exchange Cloud, Slack & Teams) โ˜๏ธ๐Ÿ’ผ

Tenant-wide setup, migration, and governance of enterprise SaaS environments including Atlassian, Microsoft 365, and Google Workspace. Managed Exchange Cloud / Google Mail, security policies, conditional access, and corporate messaging via Slack and Microsoft Teams.

Stack
Microsoft 365Google WorkspaceAtlassian SuiteExchange CloudGoogle Workspace MailSlackMicrosoft TeamsSecurity Policies

Fully Managed Enterprise VoIP & Cloud PBX Infrastructure ๐Ÿ“žโš™๏ธ

End-to-end deployment of a managed VoIP telephony platform with virtual numbers, agent extensions, automated IVR, agent call recording, carrier verification compliance, and call management.

Stack
Cloud PBXVoIP TelephonyVirtual Numbers & ExtensionsAgent Call RecordingProvider VerificationIVR & Call QueuesSIP Trunking

Enterprise Hybrid Cloud Infrastructure & Backup Solution โ˜๏ธ๐Ÿฐ

Hybrid architecture bridging Dell PowerEdge Hyper-V clusters (Windows Server 2019/2022) with Azure Cloud, protected by FortiGate firewalls and FortiSwitches. Implemented local backup servers paired with Synology C2 Cloud DR.

Stack
Azure Hybrid CloudWindows Server 2019/2022Hyper-V ClusterFortiGateFortiSwitchSynology C2

Enterprise Conference Room Systems & Hybrid Workspace Audio/Visual (Zoom Rooms & Microsoft Teams Rooms) ๐ŸŽฅ๐ŸŽ™๏ธ

Turnkey deployment of Microsoft Teams Rooms and Zoom Rooms integrated with Exchange / Google Workspace calendars for automated scheduling. Provisioned certified AV hardware solutions including Logitech, Jabra, and Neat systems with custom acoustic tuning, dual-display setups, and centralized management.

Stack
Zoom RoomsMicrosoft Teams RoomsCalendar IntegrationLogitech Rally & TapJabra PanaCastNeat Bar & PadHybrid AV Infrastructure

GPU Cluster for Research, SolidWorks & SageMaker ML Pipeline ๐Ÿ–ฅ๏ธโšก

High-performance Windows Server GPU cluster hosting multi-tenant remote SolidWorks sessions for engineering research. Synchronizes training datasets directly with AWS SageMaker pipelines for distributed ML models.

Stack
Windows Server GPU ClusterRemote SolidWorksAWS SageMakerGPU VirtualizationEncrypted Storage

Automated Linux Testing Environment with Ansible & Jenkins ๐Ÿงโš™๏ธ

On-premise Linux test infrastructure with automated patch management via Ansible and Jenkins CI/CD deployment pipelines. Enforces Zero-Trust VPN policies and automated developer SSH key lifecycle management.

Stack
AnsibleJenkins CI/CDLinuxAutomated PatchingStrict VPN AccessSSH Key Management

Containerized Learning & Examination Platform ๐ŸŽ“๐Ÿณ

Containerized WordPress LMS hosted on Oracle Cloud Infrastructure (OCI). Automatically spins up isolated container environments for engineering exams, complete with progress tracking, WAF security, and CI/CD pipelines.

Stack
Oracle Cloud Infrastructure (OCI)Docker ContainersWordPress LMSCI/CD PipelinesWAF Security

Proxmox HA Cluster ๐Ÿ–ฅ๏ธ๐Ÿ”—

Multi-node Proxmox VE cluster with high availability for core workloads: automatic restart/migration semantics when a node misbehaves, shared operational patterns for VMs and LXCs.

Stack
Proxmox VEHA clusterQEMU/KVMLXCLinux bridgesVLANs

Home DNS & Ad-Blocking โ€“ Pi-hole (HA) & Unbound ๐Ÿ•ณ๏ธ๐Ÿ›ก๏ธ

Self-hosted DNS with high-availability Pi-hole: redundant instances, synchronized filtering policy, and Unbound as the recursive resolver.

Stack
Pi-holeHA / redundancyUnboundDHCPNTPUnraidDocker

Centralized Monitoring & Visualization ๐Ÿ“Š๐Ÿ”ฅ

Deployed Grafana, Prometheus, cAdvisor, Node Exporter, and custom exporters to monitor container health, system performance, service uptime, and bandwidth.

Stack
GrafanaPrometheuscAdvisorNode ExporterCustom exportersDocker