Skip to main content

DevSecOps Projects Documentation

Welcome to my DevSecOps portfolio! On this page, you'll find an overview of my latest projects in the DevSecOps space. From integrating security practices into CI/CD pipelines to automating compliance and monitoring, I focus on building secure, scalable, and efficient solutions that blend development, security, and operations. Explore my work to see how I apply DevSecOps principles to enhance software delivery while maintaining a strong security posture.

team-collaboration/version-control/githubGithub

Link: Github Profile

If you're interested in discussing any of my projects or exploring potential collaborations, feel free to reach out via

Work — DevSecOps Engineering​

Selected engineering work from my role as a DevSecOps / Platform Engineer:

  • Self-Service Cloud Platform: Full Terraform modularisation of a GCP environment (Cloud Run, Cloud SQL, GCS, IAM) with golden-path workflows, guardrails, and automated test gates. Cut provisioning time from ~4h to under 45min (−80%) and reduced infrastructure support tickets by 40%.

  • Agentic DevOps Runbook Automation: A secure runbook executor with a human-approval layer — an MCP-based remote server integrating GitHub, GCP Cloud Run/Logging, and Terraform state. Every critical action is auditable, reversible, and requires explicit approval. Cut incident response time for known failure classes by ~60%.

  • Per-Student Cloud Sandboxes on AWS: Provisioned isolated, production-like n8n automation sandboxes on AWS burstable EC2 (t3/t4g) with automated lifecycle management — giving 80+ trainees their own environment while keeping compute costs 50% below fixed-size instances.

  • Security Pipeline Integration: SAST (Bandit, Semgrep) and DAST (OWASP ZAP) integrated into GitHub Actions with Docker image hardening before deployment. An automated rollback trigger on SLO breach kept the deployment error rate below 2%.

  • HepaAssist Docs Link: A barrier-free, multi-tenant Progressive Web App for assisted-living facilities — residents track daily mood, staff monitor well-being trends and generate reports. Next.js + Django, containerised, with Web-Push.

  • AI Chatbot Platform Docs Link: A production-ready, multi-tenant AI chatbot platform with appointment-booking capabilities, integrated into this website and visible in the bottom-right corner.

  • Standly: An AI trade-fair-stand designer SaaS for exhibition builders — prompt/RFQ to a buildable, editable, quotable 3D booth. Parametric catalog core with diffusion hero-renders and an RFQ → BOM → quote workflow.

  • CaptureDesk: An Electron desktop app for screen recording built on the Loom Record SDK, with a custom drawing overlay and a lightweight local Express backend.

  • n8n Workflow Workspace: A versioned workspace for n8n automations — personal and per-client — with strict client separation via tags and prefixes, and secrets kept out of git.

  • DevSecOps Blog & Portfolio Live Site | Docs Link: A production-ready DevSecOps knowledge platform built with Docusaurus, showcasing security best practices, automated CI/CD pipelines with GitHub Actions, and comprehensive technical documentation.

Recent Projects​

  • Conduit Pipeline GitHub | Docs Link: This GitHub Actions pipeline automates the process of cloning a repository, building Docker images, and deploying an application to a remote server using Docker Compose.

  • Conduit Container GitHub | Docs Link: This repository includes a Docker Compose setup for deploying a Frontend Application with a Django Backend.

  • Wordpress Container GitHub | Docs Link: This repository includes a Docker Compose setup for quickly launching a WordPress instance with a MariaDB database. It simplifies the process of setting up and maintaining a WordPress site with an underlying database.

  • Minecraft Server GitHub | Docs Link: This repository provides an easy-to-use setup for running a customizable Minecraft server using Docker Compose. Deploy it locally or to a virtual machine (VM) with minimal effort.

  • Truck Signs API GitHub | Docs Link: This project is an online store called "Signs for Trucks," designed to sell pre-designed and customizable vinyl truck signs. It allows customers to purchase vinyls with truck logos, numbers, or custom text, as well as upload and customize their own designs. The backend is built with Django and Django Rest Framework, with payment integration via Stripe and Dockerized for deployment.

  • Baby Tools Shop GitHub | Docs Link: This project contains a Django application designed for managing a baby tools e-commerce store. The project uses Docker to containerize the application and deploy it to a virtual machine (VM).

  • VM Setup GitHub | Docs Link: This project demonstrates how to configure an existing server with nginx, generate and use SSH keys for secure login, disable password-based authentication, use aliases for SSH connections, and manage multiple SSH identities.

  • Python Tools GitHub | Docs Folder: This projects demonstrates how to create Pentesting tools in Python, including scripts and applications designed to identify vulnerabilities and assess the security of systems, networks, or applications. It automates tasks such as network scanning, password cracking, and exploitation, making it essential for ethical hacking and security testing.

  • Juice Shop Challenges GitHub | Docs Folder: This projects contains the documentation of specific OWASP Juice Shop Challenges designed to help users understand and mitigate common web vulnerabilities. Each challenge provides hands-on experience in identifying and exploiting security flaws in a safe and educational environment.