CASE STUDIES & SYSTEMS ARCHITECTURE

DEVOPS WORK & CASE STUDIES

Detailed technical breakdowns of cloud infrastructure, serverless architectures, CI/CD automation pipelines, and software systems.

AWS SERVERLESS ARCHITECTURE

SYSTEM TOPOLOGY

Client User

CloudFront

API Gateway

Lambda (6x)

DynamoDB

S3 Bucket

Client User

CloudFront

API Gateway

Lambda (6x)

DynamoDB

S3 Bucket

[STATUS: 180ms P99 Latency]TERRAFORM CONTROLLED (IaC)

CASE STUDYHigh Availability, Auto Scaling & Asynchronous Order Decoupling

DuoKart Multi-Tier Cloud Infrastructure

YEAR 2026

01 / THE PROBLEM

Monolithic e-commerce apps risk downtime during traffic surges, database connection exhaustion, and lost order transactions during unexpected compute instance failures.

02 / MY ROLE & OWNERSHIP

Cloud Infrastructure Engineer (Team of 2): engineered 6-tier modular CloudFormation infrastructure, private Auto Scaling Group, Multi-AZ RDS MySQL, SQS/DLQ asynchronous pipelines, and fault-injection drills.

03 / METHOD & ARCHITECTURE

❯Architected custom VPC across 2 AZs with layered security groups: public subnets (ALB, Bastion, NAT) and private subnets (app instances and RDS).
❯Configured internet-facing ALB forwarding traffic to a private Auto Scaling Group (2-4 EC2s) running Flask/gunicorn managed by systemd.
❯Provisioned Multi-AZ RDS MySQL 8.0 in isolated database subnets with SSM Parameter Store dynamic secret injection at instance boot.
❯Decoupled order processing using SQS Standard with Dead-Letter Queue (3-retry threshold) triggering Python 3.12 Lambda workers for DynamoDB conditional writes (RECEIVED -> PACKING).
❯Implemented split SNS notifications delivering distinct order alerts to store owners and shipping updates to customers.
❯Configured 8 CloudWatch alarms (ALB 5xx, unhealthy hosts, RDS CPU, SQS depth), a centralized operational dashboard, and a $20 budget cap.

04 / MEASURABLE OUTCOMES

✓100% continuous 200 OK responses during kill-1-EC2 fault injection drills (ASG auto-healed in 3.5 minutes while ALB drained connections).
✓Zero lost orders with automatic poison message redrive to DLQ after 3 failures.
✓Private compute security with zero public IPs on app servers and database instances.
✓Strict cost discipline sustained under $25 total spend with automated nightly teardown routines.

TECH DEPLOYED:AWS VPCCloudFormationALBEC2 Auto ScalingRDS MySQL+6 moreSQSLambdaDynamoDBSNSCloudWatchPython

CASE STUDYEvent-Driven Serverless Backend & Automated CI/CD

Serverless Online Voting Platform

YEAR 2025

01 / THE PROBLEM

Paper-based college elections for 500+ students caused manual tallying errors, slow result delivery, and vulnerability to ballot tampering.

02 / MY ROLE & OWNERSHIP

DevOps & Backend Engineer: designed the AWS serverless architecture with Amplify SDK integration, scoped IAM policies, and GitHub Actions automated deployment pipeline.

03 / METHOD & ARCHITECTURE

❯Built React frontend integrated with AWS Amplify SDK for seamless Cognito auth, API Gateway, and S3 access.
❯Implemented Cognito multi-role auth: Student, Admin, and Owner users with granular role-based access.
❯Developed 6 Python Lambda REST microservices behind API Gateway with scoped IAM execution policies on specific DynamoDB table ARNs.
❯Provisioned DynamoDB On-Demand capacity for votes, candidates, and config storage to handle peak concurrent voting bursts without throttling.
❯Configured S3 for ballot audit CSV storage and data export workflows with presigned URL access.
❯Built GitHub Actions CI/CD pipeline reducing deploys from 8 manual steps to zero.

04 / MEASURABLE OUTCOMES

✓500+ active students served with zero downtime during peak voting windows.
✓180ms P99 latency recorded across all REST API endpoints.
✓<0.1% error rate during live operations.
✓Reduced deployment execution time from 12 minutes to 3 minutes via dependency caching.

TECH DEPLOYED:ReactAWS AmplifyLambdaAPI GatewayDynamoDB+4 moreCognitoS3IAMGitHub Actions

CASE STUDYInfrastructure as Code & Serverless Migration

Dorm-Dish Multi-Tier AWS Platform

YEAR 2026

01 / THE PROBLEM

Traditional EC2 server hosting incurred continuous monthly costs ($15+/mo) during idle academic breaks while lacking auto-scaling for campus demand spikes.

02 / MY ROLE & OWNERSHIP

Cloud & Backend Engineer: designed CloudFormation stacks, API Gateway integration, Lambda microservices, and CloudFront global CDN distribution.

03 / METHOD & ARCHITECTURE

❯Refactored monolithic backend into serverless microservices with AWS Lambda + API Gateway.
❯Designed DynamoDB multi-table schema (UserProfile, Room, Mess, Bookings, Reviews) with composite primary keys.
❯Integrated Cognito User Pools for multi-role auth across Students, Property Owners, and Admins.
❯Added Google Maps API for geolocation and an automated recommendation engine for verified listings.
❯Configured S3 for cover and document photo storage with presigned URL access.
❯Wrote modular CloudFormation IaC templates for reproducible environment provisioning and teardown.

04 / MEASURABLE OUTCOMES

✓Monthly AWS cost dropped from $15+/mo to $0.00/mo within free tier during idle periods.
✓100% automated infrastructure setup and teardown via CloudFormation CLI.
✓Sub-second global content delivery via CloudFront edge locations.
✓Cold start latency minimized under 350ms with lightweight Python runtime packaging.

TECH DEPLOYED:LambdaAPI GatewayDynamoDBS3CloudFront+4 moreCloudFormationCognitoGoogle Maps APIPython

CASE STUDYDaemon Supervision, Network Diagnostics & POSIX Security Audit

Linux SysAdmin Automation Toolkit

YEAR 2026

01 / THE PROBLEM

Linux server administrators spend hours weekly diagnosing crashed background services, investigating network socket drops, hunting runaway processes, and auditing insecure file permissions.

02 / MY ROLE & OWNERSHIP

Linux Systems Developer: authored modular POSIX-compliant Bash automation scripts with ShellCheck CI linting, self-documenting CLI flags, and webhook alerting.

03 / METHOD & ARCHITECTURE

❯Developed monitor-service.sh with systemd status inspection, automatic daemon restart upon failure, and Slack webhook alert dispatching.
❯Built network-check.sh for rapid diagnostic scans of DNS resolution latency, listening TCP/UDP sockets, and firewall packet drops.
❯Created setup-permissions.sh to audit filesystem trees, identifying unauthorized SUID/SGID binaries and world-writable files.
❯Engineered process-manager.sh to monitor top memory and CPU consumers with graduated termination signals (SIGTERM escalating to SIGKILL).
❯Enforced production safety standards with --dry-run execution previews, standardized POSIX exit codes, and ShellCheck AST linting in GitHub Actions.

04 / MEASURABLE OUTCOMES

✓Sub-30-second root cause diagnosis for crashed systemd units and broken network sockets.
✓Zero false-positive script executions via strict error handling (set -euo pipefail) and dry-run validation.
✓Automated security auditing of system filesystems, flagging risky permission bits in under 2 minutes.
✓100% clean ShellCheck compliance enforced continuously via GitHub Actions CI pipeline.

TECH DEPLOYED:BashLinux (Ubuntu/Debian)systemdPOSIX ShellNetworking+2 moreShellCheckGitHub Actions

CONTINUOUS SYSTEMS DISCIPLINE

ENGINEERING PRACTICE LAB

Hands-on curriculum repository documenting deliberate practice across Linux internals, containerization, Infrastructure as Code, and cluster orchestration.

CASE STUDYHands-on Curriculum: Linux, Git, Docker, CI/CD, Terraform & Kubernetes

100 Days of DevOps Practice Lab

YEAR 2026

01 / THE PROBLEM

Junior candidates frequently rely on high-level web console tutorials, leaving major gaps in Linux kernel primitives, container runtime isolation, stateful IaC workflows, and cluster failure modes.

02 / MY ROLE & OWNERSHIP

DevOps Engineer & Author: architected and executed a structured 6-phase engineering curriculum with reproducible configuration files, automated CI test harnesses, and infrastructure blueprints.

03 / METHOD & ARCHITECTURE

❯Phase 01 (Linux Systems): authored modular Bash scripts for systemd daemon supervision, POSIX permission audits, process signals (SIGTERM/SIGKILL), and socket diagnostics.
❯Phase 02 (Git Automation): established trunk-based development workflows, rebase conventions, commit linting hooks, and branch protection policies.
❯Phase 03 (Container Runtimes): engineered multi-stage Docker builds, non-root user execution, cgroups/namespaces isolation, and Docker Compose network segmentation.
❯Phase 04 (CI/CD Pipelines): built GitHub Actions workflows for automated ShellCheck linting, test execution, container image security scanning, and deployment gates.
❯Phase 05 (AWS & Terraform): developed modular HCL configurations for custom VPCs, S3 remote state storage with DynamoDB state locking, and least-privilege IAM policies.
❯Phase 06 (Kubernetes Clusters): deployed Pods, ReplicaSets, ClusterIP/NodePort Services, Ingress controllers, ConfigMaps, and probed rolling update strategies.

04 / MEASURABLE OUTCOMES

✓6 structured curriculum phases covering operating systems fundamentals through production cluster orchestration.
✓Over 50+ self-contained, reproducible lab configurations and shell automation scripts.
✓100% reproducible environments using pure code configurations without manual AWS console intervention.
✓Continuous verifiable proof of hands-on daily systems discipline and automation practice.

TECH DEPLOYED:LinuxBashGitDockerGitHub Actions+3 moreTerraform (HCL)AWSKubernetes

CLIENT RUNTIMES & PACKAGED UTILITIES

SOFTWARE & DATA TOOLS

Focused offline-first applications, data extraction models, and local developer utilities.

CASE STUDYOffline-First Bank Analyzer & Financial Health Scoring

Statement Dashboard PWA

YEAR 2026

01 / THE PROBLEM

Users hesitated to upload sensitive PDF/CSV bank statements to cloud servers due to privacy concerns and third-party data collection risks.

02 / MY ROLE & OWNERSHIP

Full-Stack Engineer: engineered client-side PDF parsing using pdf.js, local WebStorage persistence, and offline PWA service workers.

03 / METHOD & ARCHITECTURE

❯Integrated React 19 + TypeScript + Vite for client-side local execution.
❯Built offline PDF/CSV parsing pipeline with zero server transmission.
❯Implemented recurring payment pattern detection algorithms running entirely in-browser.

04 / MEASURABLE OUTCOMES

✓100% offline security: zero bytes of user data leave the client device.
✓Sub-500ms statement parsing speed for 50+ page PDFs.
✓Complete financial health scoring engine running in local Web Workers.

TECH DEPLOYED:React 19TypeScriptViteTailwindshadcn/ui+2 moreRechartspdf.js

CASE STUDYDeterministic 8-Gate Technical Resume Linter & Keyword Engine

ATS Resume Architect

YEAR 2026

01 / THE PROBLEM

Job seekers rely on generic AI rewrite tools that hallucinate unearned claims, inject corporate buzzwords, and fail standard Applicant Tracking System (ATS) parsing rules.

02 / MY ROLE & OWNERSHIP

Systems Tooling Developer: built a deterministic CLI and agent skill with 8 structural audit gates, zero-buzzword enforcement dictionaries, and metric extraction rules.

03 / METHOD & ARCHITECTURE

❯Engineered deterministic 8-gate linting engine validating action-verb starters, quantified metrics, technology pairings, and length bounds.
❯Implemented strict anti-buzzword filter blocking 50+ banned corporate filler terms and generic throat-clearing openers.
❯Built 4-axis semantic audit analyzing role alignment, engineering depth, measurable impact, and ATS readability.
❯Added codebase metric mining logic to automatically convert raw git diffs and commit histories into quantified achievement bullets.

04 / MEASURABLE OUTCOMES

✓100% deterministic rule evaluations with zero AI hallucinations or fabricated claims.
✓Identifies and eliminates 100% of recognized corporate filler terms before candidate submission.
✓Zero external API dependencies: sub-second local python CLI execution.

TECH DEPLOYED:PythonAST ParsingCLI ArchitectureRegex EngineOpen-Source Skill