Who am I?
B. Tech IT student with hands on experience in Linux, Network Engineering, Cloud Computing, Identity and Access Management (IAM).
What I Work With
- Cloud - AWS (EC2, S3, IAM, VPC), deployed a FastAPI + PostgreSQL backend on EC2, familiar with GCP basics
- Linux - daily driver and server OS; headless server administration, SSH hardening, UFW, systemd, Nginx
- Network Engineering - CCNA coursework (ITN/SRWE/ENSA), VLAN design, inter-VLAN routing, pfSense, LAN segmentation, static routing
- Security & IAM - OpenLDAP with LDAPS, SSSD+PAM, least-privilege ACLs; Keycloak with RBAC, OIDC SSO, MFA (TOTP), brute force protection, audit logging, full employee lifecycle; Pi-hole + mkcert for local DNS/HTTPS
- Docker - containerized service deployments, image builds, multi-container setups, GitHub Actions CI/CD
- Python - scripting for automation, web scraping (Selenium), CLI tooling
- Terraform - provisioned AWS infrastructure for a FastAPI + PostgreSQL architecture, including VPC, public/private subnets, ALB, EC2, security groups, and controlled NAT usage
My Labs
Physical Network Engineering Lab
Click here for full series write up | (Tenda AC1200 router, Lenovo ThinkCentre M81 headless server running Pi-hole (custom DNS, ad blocking) with HTTPS via a mkcert local CA)
Other Home Labs
| Lab | GitHub Repo | What it covers |
|---|---|---|
| Keycloak IAM Dev Lab | keycloak-iam-dev-lab | RBAC, OIDC SSO, MFA (TOTP), password policy, brute force protection, audit logging, full employee lifecycle for a fictional org |
| OpenLDAP IAM lab | keycloak-iam-dev-lab | LDAPS, least-privilege ACLs, SSSD+PAM, read-only service account for a fictional org |
| Superior VM Intercommunication | - | VM<—>VM<—>Host<—>Internet Communication |
| Local Mail Server | postfix-dovecot-mailserver-in-openldap-lab | Postfix + Dovecot with LDAP recipient lookup, LDAPS auth via SSSD, IMAPS with mkcert cert |
Certifications
- AWS Cloud Quest: Cloud Practitioner
- Docker Foundations Professional Certificate
- TCS Cybersecurity IAM Developer - Forage virtual internship
- The Basics of Google Cloud Compute
Writing
I write a blog on dev.to
My Projects
| Repo | What it is |
|---|---|
| alumni-connect-terraform | Terraform AWS architecture provisioning (VPC, ALB, EC2 backend, PostgreSQL, security groups, bastion access, controlled NAT usage) |
| openssh-server | Containerized OpenSSH server for secure temporary LAN file transfers - configured via env vars |
| randomised_mac_linux | MAC address randomization on Linux |
| panic-clone | Bulk GitHub repo cloning across multiple users via the GitHub API |
| vscode-privacy | Script to toggle VSCode privacy settings |
| alumni-connect-backend | FastAPI + PostgreSQL backend with SQLAlchemy, featuring role-based user flows (student, alumni, admin), readiness scoring engine, job and mentorship systems, and fully containerized deployment using Docker Compose. |
| forage-virtual-internship-scraping | Python/Selenium scraper for Forage virtual internship content |