System Capabilities

• Tenant-isolated VPCs and EKS clusters in two regions (region_1, region_2).
• Public and private node groups with configurable capacity and AMIs.
• IRSA wiring for Kubernetes service accounts.
• EBS CSI driver installation per tenant/region via Helm.
• Environment-specific provisioning with tfvars and Makefile workflows.
• Kubernetes manifests for app deployment and secret management.

Technologies Used

• Infrastructure:: Terraform, AWS (VPC, EKS, IAM), Helm, Kubernetes
• Operations: Makefile, environment-specific tfvars
• App Manifests: Kubernetes YAML

My Role

• Designed the multi-tenant, multi-region Terraform architecture with reusable modules.
• Implemented tenant-scoped VPC and EKS provisioning with consistent defaults and overrides.
• Integrated IRSA and storage drivers to enable secure workload identities and persistent volumes.
• Created repeatable, environment-specific workflows for provisioning and Kubernetes deployment.

CodeBase

System Capabilities

• Secure user authentication and authorization workflows.
• User and service provider profile management.
• Search and filtering of service providers with optimized query handling
• Real-time bidirectional communication using WebSockets for negotiation and updates
• Contract lifecycle management with milestone-based payments
• Secure payment processing with automated release upon contract completion

Technologies Used

• Frontend: Angular
• Backend: Django REST Framework, Django Channels
• Data & Messaging: PostgreSQL, Redis
• Infrastructure & DevOps: Docker, Kubernetes, Nginx, GitHub Actions
• Cloud (In Progress): AWS (EKS, networking, IAM) via Terraform

My Role

• Designed and implemented a full-stack system with a focus on reliability, scalability, and clean service boundaries.
• Built secure, RESTful APIs for authentication, contracts, and payment workflows using Django REST Framework.
• Implemented real-time communication using Django Channels and Redis to support live chat and contract updates.
• Designed the data layer using PostgreSQL, focusing on consistency and reliable transactional behavior.
• Containerized frontend and backend services with Docker to ensure repeatable builds and environment consistency.
• Configured Nginx as a reverse proxy to route traffic efficiently between frontend, backend, and Kubernetes services.
• Automated CI/CD pipelines using GitHub Actions to build and publish Docker images for frontend and backend services.
• Deployed and managed containerized workloads using Kubernetes (Minikube) to validate orchestration, scaling behavior, and service communication.

Planned Cloud Architecture

The platform is being prepared for production deployment on AWS using Terraform and Amazon EKS.

The planned architecture includes:

• Infrastructure provisioning with Terraform for reproducible environments.
• Kubernetes (EKS) for container orchestration and service scalability.
• Secure networking with VPCs, subnets, and IAM roles.
• Load balancing and ingress management for external traffic.
• Centralized logging and monitoring (planned) to observe system health and reliability.

Designed to minimize deployment risk, support horizontal scaling, and enable future observability and failure analysis.