Selected Projects

Client work and open-source projects with documented outcomes, technology choices, and results.

Cloud Infrastructure
Production

AWS Production Environment Deployment

Problem

A scaling web application was hosted on a single server with no redundancy, automated backups, or cost controls; one hardware failure away from complete outage.

Solution

Designed a multi-AZ AWS architecture using EC2 Auto Scaling Groups, Application Load Balancer, RDS Multi-AZ, S3 for static assets, and CloudFront for global edge delivery. IaC via Terraform for repeatable deployments.

Outcome

99.95% uptime achieved. Infrastructure costs reduced 35% vs. legacy approach. Recovery time objective reduced from hours to under 5 minutes.

AWS EC2RDSCloudFrontTerraformAuto Scaling
Cybersecurity
Framework

Enterprise Security Audit Framework

Problem

An SME operating in financial services had no documented security posture, undefined incident response procedures, and uncontrolled user access privileges across critical systems.

Solution

Conducted a full security audit aligned to NIST CSF and CIS Controls. Implemented IAM role restructuring, MFA enforcement, network segmentation, and a documented incident response playbook.

Outcome

Critical attack surface reduced by 60%. Organization passed subsequent compliance review. Zero security incidents in the 12 months following implementation.

NIST CSFCIS ControlsIAMIncident Response
AI & Automation
Deployed

AI-Powered Business Workflow Automation

Problem

A service business was spending 20+ hours weekly on manual report generation, client communication drafts, and data entry across disconnected SaaS tools.

Solution

Built an n8n-based automation layer integrating LLM APIs for content generation, webhook triggers for real-time data sync, and a custom Python middleware for business logic processing.

Outcome

Manual workload reduced by 18 hours per week. Turnaround on client deliverables cut from 48 hours to under 2 hours. System runs unattended with zero manual intervention.

n8nLLM APIsPythonWebhooksREST APIs
Telecom
Production

Enterprise VoIP Infrastructure Deployment

Problem

A 50-seat call centre was running on aging PSTN hardware with high per-minute costs, no call recording, and no centralized management of routing or extensions.

Solution

Deployed Asterisk-based PBX with SIP trunking for international DIDs, configured IVR flows, call queues, and agent reporting. Implemented fail-over routing with QoS policies on network layer.

Outcome

Telephony costs reduced by 55%. Call recording and compliance logging enabled. System handles peak loads of 120 concurrent calls without degradation.

AsteriskSIPFreePBXQoSIVR
IoT / Smart Systems
Integrated

Smart Facility Automation System

Problem

A commercial property needed centralized control over HVAC, lighting, access control, and CCTV, all running on separate, incompatible systems with no unified management interface.

Solution

Designed a Home Assistant-based integration layer connecting Z-Wave, Zigbee, and IP-based devices. Built custom automation scripts for scheduled and event-driven control, with a remote management dashboard.

Outcome

Operational costs reduced 28% through scheduling and energy management. All building systems visible and controllable from a single pane. Remote incident response time cut from 2 hours to under 10 minutes.

Home AssistantZ-WaveZigbeePythonMQTT
Backend Development
Live System

Custom PHP/MySQL Business Management Platform

Problem

A logistics company was managing operations across spreadsheets and WhatsApp threads: no audit trail, no reporting, and no integration between billing, dispatch, and client management.

Solution

Built a role-based PHP web application with MySQL, covering client management, job dispatch, invoice generation, payment tracking, and management reporting with export functionality.

Outcome

Full operational visibility achieved. Invoice processing time dropped from 45 minutes to under 3 minutes. Management reporting that previously took a week now runs in seconds.

PHPMySQLREST APIRBACReporting

Public repositories on GitHub. Verified, version-controlled work you can inspect, clone, and run.

Cloud Security
Open Source

AWS Secure Remote Access (Client VPN)

Problem

Remote teams accessing AWS resources over the public internet with no encrypted channel or certificate-based authentication in place.

Solution

Terraform-provisioned AWS Client VPN with mutual TLS using an easy-rsa PKI. CloudWatch logs every connection event. One terraform apply deploys the full stack.

Outcome

Zero-trust encrypted tunnel into the VPC. Mutual certificate auth - no passwords to rotate or leak. Full CloudWatch audit trail of every connection.

TerraformAWS Client VPNmTLSeasy-rsaCloudWatchIaC
AWS / Python
Open Source

AWS Cost Auditor

Problem

AWS bills accumulate quietly. Unattached EBS volumes, idle Elastic IPs, and long-stopped instances charge every month with no default alert.

Solution

Python + boto3 CLI that queries Cost Explorer for monthly service spend, compares month-over-month, and scans for idle resources with a per-item dollar estimate of monthly waste.

Outcome

Full cost snapshot in seconds using read-only IAM permissions. Clean terminal report plus optional CSV export. Works against any AWS account.

Pythonboto3Cost ExplorerEC2CLI
Security / Python
Open Source

AWS Security Lens (CSPM Scanner)

Problem

AWS accounts collect misconfigurations silently - public S3 buckets, wildcard IAM policies, security groups exposing SSH, CloudTrail disabled. None of it triggers an alert by default.

Solution

Python + boto3 CSPM tool running 18 checks across S3, IAM, EC2, and logging. Every finding is severity-ranked (CRITICAL to LOW) with a concrete AWS CLI remediation command. Exports to JSON.

Outcome

Full posture snapshot in one command. Read-only - safe to run in production. JSON export feeds directly into remediation workflows and ticketing systems.

Pythonboto3S3IAMEC2CloudTrail

Have a Project in Mind?

If you need cloud infrastructure, cybersecurity, AI automation, VoIP, or SaaS development delivered remotely, get in touch.