Selected Projects
Client work and open-source projects with documented outcomes, technology choices, and results.
TewaGo
Business Operating System for WhatsApp. A multi-tenant SaaS platform I founded and architected from scratch, providing businesses with a single operational layer covering customer acquisition through to customer conversation: CRM, AI assistants, chatbot workflows, bulk messaging, shared team inbox, advertising campaign management, and AI-generated creative workflows via the Meta Graph API.
Multi-tenant Laravel/PHP backend, MySQL, Node.js, REST APIs, Supabase, systemd services, and PM2 process management
LLM-powered customer conversation, AI sales agents, generative image/video creative, voice agent capabilities, and n8n automation pipelines
Ubuntu/Apache/PHP-FPM production deployment, Cloudflare R2 off-site backup replication, CDN media delivery, disaster recovery procedures
AWS Production Environment Deployment
Problem
A scaling web application was hosted on a single server with no redundancy, automated backups, or cost controls; one hardware failure away from complete outage.
Solution
Designed a multi-AZ AWS architecture using EC2 Auto Scaling Groups, Application Load Balancer, RDS Multi-AZ, S3 for static assets, and CloudFront for global edge delivery. IaC via Terraform for repeatable deployments.
Outcome
99.95% uptime achieved. Infrastructure costs reduced 35% vs. legacy approach. Recovery time objective reduced from hours to under 5 minutes.
Enterprise Security Audit Framework
Problem
An SME operating in financial services had no documented security posture, undefined incident response procedures, and uncontrolled user access privileges across critical systems.
Solution
Conducted a full security audit aligned to NIST CSF and CIS Controls. Implemented IAM role restructuring, MFA enforcement, network segmentation, and a documented incident response playbook.
Outcome
Critical attack surface reduced by 60%. Organization passed subsequent compliance review. Zero security incidents in the 12 months following implementation.
AI-Powered Business Workflow Automation
Problem
A service business was spending 20+ hours weekly on manual report generation, client communication drafts, and data entry across disconnected SaaS tools.
Solution
Built an n8n-based automation layer integrating LLM APIs for content generation, webhook triggers for real-time data sync, and a custom Python middleware for business logic processing.
Outcome
Manual workload reduced by 18 hours per week. Turnaround on client deliverables cut from 48 hours to under 2 hours. System runs unattended with zero manual intervention.
Enterprise VoIP Infrastructure Deployment
Problem
A 50-seat call centre was running on aging PSTN hardware with high per-minute costs, no call recording, and no centralized management of routing or extensions.
Solution
Deployed Asterisk-based PBX with SIP trunking for international DIDs, configured IVR flows, call queues, and agent reporting. Implemented fail-over routing with QoS policies on network layer.
Outcome
Telephony costs reduced by 55%. Call recording and compliance logging enabled. System handles peak loads of 120 concurrent calls without degradation.
Smart Facility Automation System
Problem
A commercial property needed centralized control over HVAC, lighting, access control, and CCTV, all running on separate, incompatible systems with no unified management interface.
Solution
Designed a Home Assistant-based integration layer connecting Z-Wave, Zigbee, and IP-based devices. Built custom automation scripts for scheduled and event-driven control, with a remote management dashboard.
Outcome
Operational costs reduced 28% through scheduling and energy management. All building systems visible and controllable from a single pane. Remote incident response time cut from 2 hours to under 10 minutes.
Custom PHP/MySQL Business Management Platform
Problem
A logistics company was managing operations across spreadsheets and WhatsApp threads: no audit trail, no reporting, and no integration between billing, dispatch, and client management.
Solution
Built a role-based PHP web application with MySQL, covering client management, job dispatch, invoice generation, payment tracking, and management reporting with export functionality.
Outcome
Full operational visibility achieved. Invoice processing time dropped from 45 minutes to under 3 minutes. Management reporting that previously took a week now runs in seconds.
Public repositories on GitHub. Verified, version-controlled work you can inspect, clone, and run.
AWS Secure Remote Access (Client VPN)
Problem
Remote teams accessing AWS resources over the public internet with no encrypted channel or certificate-based authentication in place.
Solution
Terraform-provisioned AWS Client VPN with mutual TLS using an easy-rsa PKI. CloudWatch logs every connection event. One terraform apply deploys the full stack.
Outcome
Zero-trust encrypted tunnel into the VPC. Mutual certificate auth - no passwords to rotate or leak. Full CloudWatch audit trail of every connection.
AWS Cost Auditor
Problem
AWS bills accumulate quietly. Unattached EBS volumes, idle Elastic IPs, and long-stopped instances charge every month with no default alert.
Solution
Python + boto3 CLI that queries Cost Explorer for monthly service spend, compares month-over-month, and scans for idle resources with a per-item dollar estimate of monthly waste.
Outcome
Full cost snapshot in seconds using read-only IAM permissions. Clean terminal report plus optional CSV export. Works against any AWS account.
AWS Security Lens (CSPM Scanner)
Problem
AWS accounts collect misconfigurations silently - public S3 buckets, wildcard IAM policies, security groups exposing SSH, CloudTrail disabled. None of it triggers an alert by default.
Solution
Python + boto3 CSPM tool running 18 checks across S3, IAM, EC2, and logging. Every finding is severity-ranked (CRITICAL to LOW) with a concrete AWS CLI remediation command. Exports to JSON.
Outcome
Full posture snapshot in one command. Read-only - safe to run in production. JSON export feeds directly into remediation workflows and ticketing systems.
Have a Project in Mind?
If you need cloud infrastructure, cybersecurity, AI automation, VoIP, or SaaS development delivered remotely, get in touch.