Security Operations
Active projectSecOps — Security Operations
A joined-up security operations capability combining threat detection, vulnerability management, DNS filtering and evidence-led remediation.
View case study →Engineering Portfolio
Projects built to be operated, not just demonstrated.
These case studies show how I approach architecture, implementation, monitoring, security, documentation and ongoing operational support.
CI/CD & Platform Delivery
OperationalJenkins Secure Delivery Pipeline
An end-to-end delivery pipeline that tests, packages, containerises, security-scans, publishes and deploys a Java application to K3s with automated health verification and rollback.
View case study →Network Security
OperationalPi-hole DNS Filtering
A DietPi-hosted Pi-hole and Unbound DNS control with observable blocklist health and Git-owned non-secret operational recovery source.
View case study →Vulnerability Management
LiveGreenbone Vulnerability Management
A managed vulnerability-management workflow that turns Greenbone scan evidence into prioritised, reviewable remediation for the Linux homelab.
View case study →Security Engineering
LiveCrowdSec Security Platform
A production-style threat detection and automated firewall enforcement platform with Prometheus metrics, Grafana dashboards and community threat intelligence.
View case study →Container Platforms
Active projectDocker Engineering Platform
A self-hosted container platform with protected secret delivery, encrypted recovery, reverse proxying, authentication, monitoring, security and automated application deployment.
View case study →Platform Engineering
Stage 2 completeHomelab Container Version Control
A platform-engineering programme governing Docker and Kubernetes images, four-host SOPS and age recovery, critical operational source, validation, drift detection and rollback.
View case study →Kubernetes
Active projectKubernetes Homelab
A practical K3s environment with encrypted datastore Secrets, two-recipient SOPS recovery, container orchestration, load balancing, ingress and Git-based deployment.
View case study →Cloud Engineering
Active projectAWS Cloud Platform
A modular AWS engineering platform built with Terraform, remote state management, networking modules and documented architecture decisions.
View case study →Observability
LiveMonitoring and Observability Platform
Centralised infrastructure monitoring using Prometheus, Grafana, Loki, exporters, dashboards and operational alerting.
View case study →Infrastructure Resilience
Active projectHomelab Disaster Recovery Platform
A practical recovery framework combining Restic, passphrase-encrypted detached SOPS identity recovery, automation, monitoring and independent restoration evidence.
View case study →Specialist Workload
Historical DatasetBirdNET Monitoring
A wildlife detection workload integrated with Docker, audio hardware, custom metrics and Grafana visualisation.
View case study →