Automated AWS infrastructure provisioning and app deployment using Ansible. Built custom playbooks for VPC setup and EC2 services, with secure, scalable networking.

CI/CD pipeline deploying a Java app on AWS EKS using Terraform, Maven, Docker, Helm, and GitHub Actions with SonarCloud for code quality and staging-to-production promotion.

Terraform-based IaC project provisioning scalable AWS infrastructure with S3 remote state, including network, Beanstalk, Bastion host, RDS, RabbitMQ, and Memcached services.

Automated CI pipeline with Jenkins, Nexus, SonarQube, and Slack on AWS EC2 for code quality, artifact management, security, and real-time notifications.

This project demonstrates a Continuous Delivery (CD) workflow for a Java web application using Jenkins, Docker, AWS ECR, and AWS ECS. It is designed as the second part of a full CI/CD pipeline, building on the Continuous Integration setup from Part 1.

CI/CD deployment on AWS using Elastic Beanstalk, RDS, Bitbucket, S3, CodeBuild, and CodePipeline for scalable, secure, and efficient app delivery.

SaaS/PaaS deployment of vProfile Java app on AWS using Elastic Beanstalk, RDS, ElastiCache, MQ, and CloudFront for scalable, secure, automated microservices.

Hands-on DevOps deployment of vProfile app simulating multi-tier production using AWS, shell scripts, and manual processes, inspired by a Udemy course.

Designed and secured AWS VPC with subnets, Elastic IPs, VPC peering, endpoints, Flow Logs, and CloudWatch to enable private, scalable, and secure cloud networking.

Simulated cloud security threats using AWS GuardDuty by deploying vulnerable infrastructure, exploiting flaws, and analyzing security events for offensive and defensive insights.

Secured AWS RDS by simulating insecure setups, performing SQL injection tests, and applying best practices like security group tweaks, strong auth, and access control.

Enhanced cloud security monitoring using AWS Config, Security Hub, and CloudTrail with CIS framework to assess compliance, detect misconfigs, and analyze security reports.

Secured AWS cloud using IAM by creating custom policies to control user actions on dev and prod EC2 instances, ensuring precise access and tested permissions.

Set up a Windows VM honeypot in Azure with exposed RDP, monitored via Microsoft Sentinel, and visualized attack origins using Sentinel's mapping features.

Integrated SOC tools—Wazuh, Shuffle, VirusTotal, and TheHive—to automate incident detection, analysis, and response for efficient security event handling.

Implemented File Integrity Monitoring with Wazuh to detect and track real-time changes in a public directory, enhancing security visibility and incident response.

This project focuses on conducting a phishing simulation using Gophish to assess security awareness and identify potential vulnerabilities.

Explored basic Splunk commands to analyze DHCP, DNS, and HTTP logs, showcasing Splunk's role in log management and network activity monitoring.