Projects
Production systems and lab builds. Each one is written up with the design decisions, the trade-offs, and what I'd do differently at scale.
Production
Firewall Automation & Governance Platform
Centralised, database-driven network access control across a production Linux fleet — policy compiled per host, applied safely, and revoked automatically.
- Python
- iptables / IPSets
- MySQL
- Ansible
- Linux
- Prometheus
GitOps Delivery Platform with Service Mesh
A Kubernetes platform where a git commit is the only deployment mechanism, and releases roll out as canaries under service mesh traffic control.
- Kubernetes
- ArgoCD
- Istio
- Helm
- GitHub Actions
Zero-Trust Secure Supply Chain Platform
Seven independent enforcement layers on Kubernetes — from signed images in CI down to runtime detection — each one verified by attempting to bypass it.
- Kubernetes
- Kyverno
- Cosign
- Istio
- Falco
- OPA
- Terraform