Engineering portfolio
What I’m building, what’s shipped, and the evidence behind it. Explore the repositories for architecture, technical decisions, and release history.
Every PR passes five blocking security gates; every merged image is signed, SBOM-attested, and verifiable.
10 CI jobs · 25 custom Semgrep rules · 8 ADRs · $0 to run
A Terraform-built AWS foundation: multi-account structure, preventive guardrails, and centralized security logging.
Multi-account · preventive + detective controls · fully teardown-able
A Go-based backend platform for reliable order and payment processing, featuring concurrency control, transactional consistency, event-driven workflows, idempotency, and failure recovery.
Flagship backend build · distributed systems · PostgreSQL internals · performance engineering
A production-grade Kubernetes platform on EKS with GitOps delivery, policy enforcement, and runtime security.
Flagship build · doubles as CKA/CKS hands-on prep
Cloud detection engineering: GuardDuty findings routed through EventBridge to Lambda remediations and Slack alerts.
Detection-as-code · automated response · full finding lifecycle