IaCOpen source
Terraform AWS Reference Architecture
Progressive Terraform examples from a single EC2 instance to a full VPC with private RDS, reusable modules, remote state, CI-validated.
TerraformAWSVPCEC2RDS
Projects
37 projects, runnable open-source reference implementations alongside production work delivered for clients.
37 projects
AI / Cloud OperationsOpen source
AWS DevOps Agents (Bedrock)
A collection of 5 AI-powered agents for cloud operations, DevOps, Cost, Security, Incident, and IaC Review, built on AWS Bedrock with production guardrails.
AWS BedrockLambdaTerraformDynamoDBAPI Gateway
CI/CDOpen source
CI/CD Pipeline Templates
Reusable GitHub Actions workflows, build/test, security scan, build-push-sign (cosign), deploy, with a sample app that uses them.
GitHub ActionsDockercosignTrivyPython
ObservabilityOpen source
Observability Stack
Metrics, logs, and traces as code: Prometheus, Grafana, Loki, Tempo, Alertmanager via Docker Compose, plus Helm values for Kubernetes.
PrometheusGrafanaLokiTempoAlertmanager
KubernetesOpen source
GitOps Kubernetes Platform
ArgoCD app-of-apps delivering a Helm sample app to Kubernetes, with a local kind bootstrap, Git as the single source of truth.
ArgoCDKubernetesHelmGitOpskind
SecurityOpen source
Vault on Kubernetes (HA + Raft)
HashiCorp Vault in HA mode with integrated Raft storage and Kubernetes auth, deployed via Helm, with a secret-injection example.
VaultKubernetesHelmRaftSecrets Management
SecurityOpen source
DevSecOps Starter Kit
Drop-in security tooling, pre-commit, gitleaks, Trivy, tfsec, checkov, hadolint, wired into one CI pipeline.
pre-commitgitleaksTrivytfseccheckov
IaCOpen source
GCP Landing Zone (Terraform)
Production-grade Google Cloud landing zone, resource hierarchy, shared VPC + Cloud NAT, IAM, and org-policy guardrails.
GCPTerraformVPCCloud NATIAM
IaCOpen source
AWS Multi-Account Organization
Control-tower-style AWS foundation, Organizations, OUs, member accounts, Service Control Policies, and central CloudTrail.
AWSTerraformOrganizationsSCPCloudTrail
ObservabilityOpen source
Kubernetes Monitoring Helm Chart
An umbrella Helm chart that ships an app together with its ServiceMonitor and PrometheusRule, observable by default.
KubernetesHelmPrometheusServiceMonitorHPA
PlatformOpen source
Internal Developer Platform (IDP)
A platform-engineering reference, Backstage service catalog, golden-path scaffolder templates, and a paved-road developer experience.
BackstagePlatform EngineeringGolden PathKubernetesGitOps
SREOpen source
SRE Incident-Response Runbooks
Battle-tested runbooks, an SLO/error-budget framework, and blameless postmortem + comms templates for production systems.
SRESLOIncident ResponsePostmortemsReliability
CI/CDOpen source
Dockerized App with Full CI/CD
A containerized Flask app with a complete GitHub Actions pipeline, test, build, Trivy scan, GHCR push, and deploy.
DockerGitHub ActionsTrivyPythonGHCR
CI/CDOpen source
Jenkins CI/CD Pipeline
A Jenkins declarative pipeline that dockerizes an app, runs tests, pushes to a registry, and sends Slack notifications.
JenkinsDockerSlackCI/CDGroovy
CI/CDOpen source
Jenkins → Minikube CI/CD
End-to-end CI/CD: Jenkins (in Docker) builds a Go app, pushes to a local registry, and deploys to Minikube, fully local, no cloud account needed.
JenkinsDockerKubernetesMinikubeGo
IaCOpen source
AWS Static Site (S3 + CloudFront)
Production static hosting on AWS, private S3 + CloudFront (OAC), ACM TLS, and Route 53, fully provisioned with Terraform.
AWSS3CloudFrontACMRoute 53
KubernetesOpen source
Gateway API on GKE
Kubernetes Gateway API on GKE, path and header routing across services, TLS via cert-manager, and a troubleshooting runbook.
GKEKubernetesGateway APIcert-managerGCP
KubernetesOpen source
Node-RED on Kubernetes
Production Node-RED on Kubernetes, PVC-backed flows, a bcrypt-hashed admin password in a Secret, and TLS Ingress.
KubernetesNode-REDSecretsIngressPVC
Cloud PlatformOpen source
Cloud Run + Cloudflare Platform
Reference architecture: a containerized app on Google Cloud Run behind Cloudflare (CDN/WAF/TLS), with Terraform and a Cloud Build CI/CD pipeline.
GCPCloud RunCloudflareCloud BuildTerraform
ServerlessOpen source
AWS Serverless REST API
Lambda + API Gateway + DynamoDB CRUD API, provisioned with Terraform, least-privilege IAM, unit-tested, scale-to-zero.
AWSLambdaAPI GatewayDynamoDBTerraform
ServerlessOpen source
AWS Event-Driven Pipeline
Order-fulfilment pipeline, EventBridge routing + Step Functions orchestration + Lambda, with a saga/compensation path. Terraform, tested.
AWSEventBridgeStep FunctionsLambdaTerraform
ObservabilityOpen source
OpenTelemetry Distributed Tracing Demo
End-to-end distributed tracing across gateway → backend → worker with OpenTelemetry, HTTP and async trace-context propagation, exported to Tempo and viewed in Grafana.
OpenTelemetryPythonGrafana TempoOTel CollectorDocker Compose
ObservabilityOpen source
LogSentry, Sensitive Data Detection in Logs
A Cloud Operations tool: monitors every CloudWatch log group in real-time for leaked secrets (AWS keys, passwords, JWTs, tokens), emits custom metrics + alarms, and routes rate-limited alerts via SNS, with a Flask dashboard for triage.
AWSCloudWatchLambdaKinesisDynamoDB
SecurityOpen source
AWS Secure Foundations
Reference Terraform for using core AWS services the right way, Secrets Manager, least-privilege IAM, CodeConnections (no stored tokens), customer-managed KMS, and a one-command account security baseline.
AWSTerraformIAMKMSSecrets Manager
FinOpsOpen source
AWS Instance Scheduler Tag Pipeline
A standalone pipeline for managing schedule tags on non-production AWS resources (EC2, ECS, ASG), with isolated Terraform state, production guards, noop protection, preflight validation, and a hub-and-spoke Lambda scheduler.
AWSTerraformLambdaEC2GitHub Actions
Cloud SecurityOpen source
CloudSentry: AWS Security Watchdog
Zero-cost serverless AWS security auditor that scores your infrastructure 0-100, detects misconfigurations across IAM, networking, compute, storage, and DNS, and generates copy-paste fix commands.
AWSLambdaTerraformDynamoDBS3
Data EngineeringOpen source
PECOS Data Extraction Pipeline
Enterprise-grade AWS Step Functions + PySpark ETL workflow: four parallel Glue jobs processing healthcare provider data with retry logic, notifications, and one-command deployment.
AWS Step FunctionsPySparkAWS GlueS3SNS
IaCOpen source
AWS EKS Cluster (Terraform)
Production-ready Terraform module for provisioning AWS EKS clusters with managed node groups, self-managed nodes, Fargate profiles, IRSA, and cluster addons.
TerraformAWS EKSKubernetesIAMVPC
Configuration ManagementOpen source
Ansible Masterclass (Docker Lab)
Structured Ansible learning lab with Docker-based nodes, four progressive levels of playbooks, roles, dynamic inventory, and a full user manual.
AnsibleDockerDocker ComposeUbuntuSSH
Full-Stack ProductClient work
WeFoundIt, Lost & Found Platform for Cameroon
Founded and built a full-stack lost-and-found platform, launched first as a web app and later extended to the Apple App Store and Google Play. FastAPI backend (450+ endpoints), React web app, Flutter mobile app, live on AWS with mobile money payments and smart matching.
FastAPIPostgreSQLRedisReactFlutter
Cloud PlatformClient work
Multi-Tenant Hosting Platform (5,000+ sites)
Designed and operate a serverless hosting platform on Google Cloud Run, fronted by Cloudflare, 5,000+ sites, global CDN, WAF/DDoS, load-tested to scale further.
GCPCloud RunCloudflareCloud BuildGitHub
KubernetesClient work
Enterprise Kubernetes Platform
Production EKS platform serving 50+ microservices and 1M+ requests/day with GitOps, service mesh, and full observability.
KubernetesAWS EKSHelmArgoCDIstio
CI/CDClient work
CI/CD Pipeline Modernization
Migrated 100+ Jenkins pipelines to GitHub Actions, cutting average build time 60% and lifting deployment frequency 300%.
GitHub ActionsDockerTerraformAWSSonarQube
ObservabilityClient work
Observability Platform Implementation
Full-stack metrics/logs/traces for 100+ services, cutting mean time to detection from 30 minutes to 2.
PrometheusGrafanaLokiTempoOpenTelemetry
SecurityClient work
Security & Compliance Automation
Automated scanning and compliance across 200+ repos, reaching SOC 2 Type II in 3 months.
SnykTrivyGitGuardianAWS Security HubOPA
IaCClient work
Multi-Cloud Infrastructure Automation
Unified AWS + GCP provisioning with reusable Terraform modules and Ansible, cutting provisioning from days to hours.
TerraformAnsibleAWSGCPJenkins
ServerlessClient work
Serverless Architecture Migration
Re-architected a monolith to AWS Lambda + EventBridge, cutting cost 70% and scaling to 10K req/s.
AWS LambdaAPI GatewayDynamoDBEventBridgeStep Functions