All Projects
Every pipeline, network and automation project, from production systems to work in progress.
Multi-Platform Mobile App Release Pipeline — Android, iOS & Microsoft Store
Multi-stage Azure DevOps CI/CD releasing seven mobile app variants across four stores, with signed builds promoted through platform-specific release tracks on a single version code. Android and iOS live in production; Microsoft Store automation in progress.
Enterprise CI/CD Pipeline Modernization
End-to-end Azure DevOps CI/CD pipelines for 80+ .NET, .NET Core, and Vue.js repositories: trunk-based branching, a Product Library release process, and module-level patch delivery to production.
Azure Container Apps Terraform Stack
A Terraform-provisioned Azure Container Apps environment running backend, frontend, and an internal-only Redis service, wrapped in a CI/CD pipeline that builds, promotes, and deploys every release without manual deployment commands.
DevOps-MCP-Server
An MCP (Model Context Protocol) server that centralizes an organization's AI coding standards, skills, instructions, and policies, so any connected AI agent (Claude, ChatGPT, Gemini, etc.) generates output that follows those standards from the first prompt. Hosted centrally with authentication, published open source on GitHub, and auto-indexed by mcpmarket.com.
Ansible-Based Azure Server Configuration & Hardening
Post-provisioning configuration and security hardening of a 3-server Windows cluster (WEB, Job, and DB roles), fully automated with Ansible and triggered through an Azure Release Pipeline, replacing 3-4 hours of hands-on, interactive manual setup with a single unattended release.
Azure Windows VM Terraform Stack
A reusable, modular Terraform stack that stamps out consistent 3-server Azure environments, web, job, and a SQL Server database server, from a single map variable, replacing a manual Azure portal deployment wizard with per-server NIC-level security and per-deployment state isolation.
PI Branch-Out & Artifact Shipping Automation
Two Python tools automating both ends of the PI release cycle across 80+ repositories: one creates branches and triggers builds automatically, the other promotes QA-verified artifacts from release-candidate to stable in Product Library, replacing manual, per-repository work that was slow and easy to get wrong at scale.
Hub-and-Spoke Cloud Network & Multi-Cloud VPN
A hub-and-spoke redesign of the organization's enterprise cloud network on Azure, replacing redundant per-VNet VPN gateways with a single shared hub gateway, cross-tenant spoke onboarding, and Site-to-Site VPN connectivity to both on-premises and Huawei Cloud.
On-Premises Network Segmentation & Security Hardening
A ground-up redesign of the organization's on-premises network, from a single flat network terminating at the firewall into a segmented, VLAN-based architecture with a hardened management router, firewall zone policies, MAC-restricted device onboarding, and full Wi-Fi integration.
FortiGate NGFW Enterprise Firewall Implementation
A complete, from-scratch configuration of a new FortiGate NGFW as the organization's network edge, replacing an end-of-life firewall: re-established VLAN segmentation across two floors, Wi-Fi, and an isolated server room, plus SD-WAN, multi-site Site-to-Site VPN, and SSO-integrated remote access.
Microsoft Entra Domain Services for Cloud Infrastructure
Centralized identity and patch management for cloud Windows servers via Entra Domain Services — office credentials everywhere.