05 / PROJECTS
Placement Operator
IN PROD — CAREEMProduction-grade Go Kubernetes controller automating declarative pod placement, node-pool consolidation, and PDB-aware workload rotation across 14 production EKS clusters. Enables blue/green bulk migrations and graceful node draining with zero downtime.
Go / controller-runtime / Kubernetes / AWS EKS
HashiCorp Vault Secrets Platform
BEYONDAIHighly-available Vault across 3 AWS availability zones using DynamoDB/S3 backends and AWS KMS auto-unsealing, with AD SAML + Kubernetes Service Account auth. Eliminated static secrets and established full auditability across prod and non-prod.
HashiCorp Vault / Terraform / AWS KMS / SAML / Kubernetes
Multi-Environment GitOps (ArgoCD)
BEYONDAIReplaced hardcoded Jenkins deployment scripts with declarative ArgoCD pipelines across Dev, QA, UAT, and Prod. Automated sync, diff tracking, single-click rollbacks, and eliminated configuration drift.
ArgoCD / GitOps / Kubernetes / Git
MLOps Platform on EKS
BEYONDAICloud-native platform for data scientists to build, train, and deploy models at scale, integrating Kubeflow and MLflow with standardized CI/CD for experimentation and automated artifact tracking.
AWS EKS / Kubeflow / MLflow / KServe
Confidential Compute (Intel SGX)
BEYONDAIEncrypted memory enclaves using Intel SGX chipsets, Gramine, and Kubernetes across Azure and private on-premises, enabling secure processing of AI algorithms, sensitive client data, and PII.
Intel SGX / Gramine / Kubernetes / Azure
JOSA Cloud Initiative
JOSASelf-managed, open-source DigitalOcean Kubernetes cloud hosting Keycloak SSO, Mailu mail, Nextcloud, Jitsi, Monica CRM, and security tools — all delivered via ArgoCD and CircleCI.
Kubernetes / DigitalOcean / Keycloak / ArgoCD / CircleCI
josa.ngo Web Platform
JOSAHigh-performance, secure digital platform built on Nuxt.js 3 (SSG/SSR) and a Strapi headless CMS, running in Docker on Kubernetes with zero-downtime automated delivery.
Nuxt.js 3 / Strapi / Docker / Kubernetes