AI-Augmented SRE Workflows
Built reusable Claude/Codex skill files at GoGuardian that automated vulnerability analysis and DDoS alert investigation — cutting 60+ minutes of manual security analysis to under 5 minutes per run.
Read more Portfolio
Engineering Projects
Infrastructure automation, platform reliability, and security hardening work from 5+ years of SRE and DevOps.
WealthFolio — Self-Hosted Portfolio Tracker
Production-grade Indian investment portfolio tracker built with Go and React 19. Multi-broker import (Zerodha, Groww, INDMoney), Gmail auto-import, FIFO cost basis, XIRR, TimescaleDB time-series snapshots, and AI market analysis — deployed as a single Docker binary on a Raspberry Pi.
Read moreEKS Cluster Upgrade: v1.23 → v1.28
Blue-green EKS cluster migration from a manually-managed v1.23 cluster to a Terraform-provisioned v1.28 cluster with VPC-only access — achieving zero downtime and 100% IaC coverage.
Read moreCloudFront + WAF DDoS Protection
Redesigned GoGuardian's DDoS defense by placing CloudFront and WAF in front of the ALB — blocking 4 attacks over 2 years with zero production impact, including one attack peaking at 200k requests/second.
Read moreJenkins EC2 to EKS Migration
Migrated Jenkins from always-on EC2 agents to dynamic Kubernetes pods on EKS — cutting CI/CD infrastructure costs by 50% and eliminating agent queue wait times from 20-30 minutes to under 45 seconds.
Read moreKernel Upgrade Automation
Automated kernel and package upgrades across GoGuardian's EC2 fleet using Python and AWS Systems Manager — reducing security vulnerabilities by 80% and cutting the patch cycle from 2-3 days to 4 hours.
Read moreTerraform Infrastructure as Code
Reusable Terraform modules for AWS infrastructure with remote state management, consistent dev/QA/prod parity, and ISO compliance-aligned resource tagging.
Read moreAMI Automation with Packer
Automated Amazon Machine Image creation pipeline using Packer and Ansible — producing hardened, pre-configured AMIs that cut EC2 provisioning time and serve as the foundation for security patch automation.
Read more