AWS • Terraform • Ansible • PostgreSQL • Patroni • etcd • NLB • Systems Manager

Engineered a private PostgreSQL high-availability platform on AWS using Terraform and Ansible, implementing streaming replication, Patroni-managed leader election and a three-member etcd consensus cluster.

Executed controlled failure scenarios, including complete primary EC2 instance failure, validating automatic replica promotion, quorum retention, NLB connectivity and recovery of the former primary.

Key engineering outcomes:

• Automated PostgreSQL failover without manual promotion.
• Validated database connectivity through a stable internal NLB endpoint.
• Diagnosed and resolved network security-group connectivity failures.
• Documented availability limitations, recovery procedures and architectural trade-offs.
• Verified infrastructure teardown after completing the lab.

AWS ECS Fargate • Terraform • Docker • GitHub Actions • ECR • ALB • Route 53 • CloudWatch

Migrated a legacy Python Flask API from a single EC2 instance to a containerised ECS Fargate platform using private subnets, multi-AZ infrastructure and an Application Load Balancer.

Implemented automated container delivery using GitHub Actions and AWS OIDC, with security scanning, Terraform plan reviews and controlled production deployment approvals.

Key engineering outcomes:

• Containerised and deployed the legacy Flask application to ECS Fargate.
• Implemented secure CI/CD using short-lived AWS credentials.
• Integrated Trivy, Checkov and Gitleaks security scanning.
• Performed a controlled Route 53 DNS cutover from EC2 to ECS.
• Tested rollback to the original EC2 environment.
• Implemented CloudWatch monitoring and controlled infrastructure teardown.

AWS ECS Fargate • Terraform • Docker • GitHub Actions • ECR • ALB • CloudWatch

Built a production-style AWS container platform running ECS Fargate workloads in private subnets, with HTTPS ingress through an Application Load Balancer and infrastructure provisioned using reusable Terraform modules.

Automated application deployments using GitHub Actions and AWS OIDC, enabling repeatable image builds, immutable container tagging and deployment to ECS without long-lived AWS credentials.

Key engineering outcomes:

• Provisioned secure AWS networking and container infrastructure with Terraform.
• Deployed private ECS Fargate workloads behind an HTTPS-enabled ALB.
• Automated container build and deployment workflows.
• Implemented IAM controls, CloudWatch logging and operational health checks.
• Documented networking, security and cost trade-offs.

TypeScript • AWS CDK • Lambda • EventBridge • Cost Explorer • CloudWatch • GitHub Actions

Developed an event-driven AWS cost monitoring solution using TypeScript, AWS CDK and Lambda to retrieve billing information and automatically deliver daily spending reports through Telegram.

Implemented secure credential management, automated infrastructure testing, scheduled execution, operational monitoring and security scanning.

Key engineering outcomes:

• Automated daily AWS cost reporting using EventBridge Scheduler.
• Integrated AWS Cost Explorer with Lambda and Telegram notifications.
• Secured credentials using AWS Systems Manager Parameter Store.
• Implemented CloudWatch alarms, encrypted SNS notifications and failure handling.
• Validated application and infrastructure behaviour using automated tests.
• Integrated Checkov and Gitleaks into CI/CD validation.