Everything
Production infrastructure first, then the public Kubernetes and GitOps repositories, then the projects I learned on.
DevOps / platform lead · 2026
Bare server to GitOps-delivered platform: K3s, ArgoCD with prune and self-heal, shared stateful infrastructure, machine-identity secret sync, autoscaling, and hard cloud billing guardrails.
DevOps / platform + backend · 2026
Secrets out of build specs, App-of-Apps restructuring, autoscaling and disruption budgets, and configuration that syncs from a secret store and rolls its own deployment. Plus production incident response.
Platform / infra-ops · 2026
A company's whole self-hosted stack run by one engineer: mail deliverability with SPF/DKIM/DMARC, SSO, notifications, self-hosted CI, TLS, and secrets as the single source of truth.
Container security & infrastructure · 2026
Isolation for untrusted GPU workloads — namespace sharing, sidecar SSH with no daemon in the workload, per-job egress firewalls, capability dropping — then two adversarial pentests and 85 findings closed.
Platform + full-stack · 2026
A multi-tenant video SaaS re-planned from a single VPS onto Kubernetes with ArgoCD, self-hosted secrets and object storage — holding infrastructure cost to the original estimate.
Public repositories
Where I work things out where anyone can read them.
Earlier
Academic and self-taught projects from 2023–24. Kept here because they're honest about the path.