Projects

A self-service web dashboard to manage PostgreSQL roles and permissions across multiple servers — just connect any PostgreSQL instance and manage it through the UI, no manual SQL needed. Features time-bound access, automatic permission revocation via cron, table-level grant controls, AES-256-GCM credential encryption, and a full grant history with attribution. Deployed on Kubernetes.

Migrated existing CI/CD pipelines to a fully GitOps-driven architecture using GCP Cloud Build and ArgoCD. The pipeline runs a Gitleaks secret scan before every build — any detected leak halts the pipeline entirely. On a clean scan, Docker images are built and pushed to GCP Artifact Registry, then the ArgoCD GitOps manifest repo is automatically updated with the new image tag, triggering ArgoCD to sync and deploy to Kubernetes. Build logs are archived to GCS for every run.

Migrated entire production infrastructure from GCP's default VPC to a custom VPC architecture with full environment segregation. Each environment (dev, staging, prod) runs in its own isolated subnet with dedicated GKE clusters, custom firewall rules, and controlled ingress/egress. Built a set of reusable Terraform modules that abstract the full networking and cluster setup — spinning up a new environment-ready application host takes minutes instead of days.

Designed and implemented a centralized CI/CD platform supporting 200+ development teams with automated testing, security scanning, and deployment.

Built a real-time analytics platform processing 1TB+ daily data with sub-second query response times and 99.9% data accuracy.