Professional Case Studies

Work

Sanitized, public-safe write-ups of projects I've built and led at work — cloud infrastructure, AI/LLM engineering, full-stack applications, and automation. Internal identifiers, credentials, and anything employer-specific have been intentionally generalized or omitted.

Start Here — Featured

Cloud Infrastructure & SRE

Multi-CDN Failover Architecture

A resilience architecture that removes a single CDN/edge provider as a single point of failure, using DNS-based traffic management to automatically fail over between two independent CDN providers.

2 independent (active + failover)

CDN providers

4 distinct root causes

Edge-case failure modes diagnosed

Azure Front DoorAWS CloudFrontAzure Traffic ManagerAWS Route 53
Read case study
Cloud Infrastructure & SRE

Zero-Trust Private Network Access Platform

A reusable, shared "hub" networking platform so any internal team can privately connect Azure PaaS resources to a corporate VPN, without each team building its own DNS/peering plumbing from scratch.

3-phase: throwaway → low-risk → prod

Rollout model

1, reused org-wide

Shared network hubs built

Azure Private Link / Private EndpointsAzure Private DNS ZonesAzure DNS Private ResolverVNet peering (intra- and cross-subscription)
Read case study
AI / LLM Engineering

Enterprise AI Assistant Platform (RAG)

A production, company-wide AI assistant grounded in internal knowledge, with fine-grained department-scoped access control and full enterprise-identity integration — end to end, from architecture through deployment.

3 (fast, primary, embeddings)

Models orchestrated

Attribute-based, by department

Access control

Retrieval-Augmented Generation (RAG)Vector + semantic hybrid searchMulti-model routing (chat/fast/embeddings)Self-hosted open-source chat UI
Read case study
AI / LLM Engineering

AI Network Audit Agent

An AI agent that adopts a "Principal Network Architect" persona to autonomously audit a Cisco Meraki-managed network via API, producing prioritized, actionable remediation plans with generated topology diagrams.

6 (security, wireless, switching, SD-WAN, monitoring, governance)

Audit domains covered

Finding → Risk → Remediation → Priority

Output format

Persona-driven prompt engineeringStructured output designTool-use/agentic workflowsPython
Read case study
Full-Stack Applications

Sales Territory Mapping & Lead Management App

A full-stack, production web application giving a sales team a fast, visual way to explore territory/account data on an interactive map, plan optimized routes, and capture leads in the field.

0 high-severity issues

Post-remediation security audit

Purged from full git history

Leaked credentials

React 18TypeScriptViteTailwind CSS
Read case study
Systems Programming

macOS Native Cloud Storage Mounter

A native macOS application that mounts a high-performance cloud object storage tier as a real Finder drive, making cloud storage feel like a local disk instead of requiring a CLI or SDK.

4 (UI, File Provider, XPC, Rust core)

Architecture layers

Zero — Keychain only

Plaintext credentials on disk

SwiftSwiftUImacOS File Provider frameworkXPC services
Read case study

All Case Studies

Cloud Infrastructure & SRE

Multi-CDN Failover Architecture

A resilience architecture that removes a single CDN/edge provider as a single point of failure, using DNS-based traffic management to automatically fail over between two independent CDN providers.

2 independent (active + failover)

CDN providers

4 distinct root causes

Edge-case failure modes diagnosed

Azure Front DoorAWS CloudFrontAzure Traffic ManagerAWS Route 53
Read case study
Cloud Infrastructure & SRE

Enterprise Azure IaC Platform

A centralized, reusable Infrastructure-as-Code platform for shared Azure infrastructure — the common platform components every application team depends on, instead of each team reinventing them.

Bicep + Terraform

IaC ecosystems maintained

what-if check before every deploy

Deployment validation

Azure Bicep (primary)Terraform (AWS provider)ARM templatesAzure Front Door
Read case study
Cloud Infrastructure & SRE

Cloud Cost Governance & Resource Hygiene Automation

Read-only reporting tools across Azure and Google Cloud that automatically surface cost-optimization opportunities and abandoned/unused cloud resources.

Azure + Google Cloud

Cloud platforms audited

Zero — fully read-only

Mutating calls made

Azure Cost Management APIAzure Resource GraphAzure AdvisorGoogle Cloud Resource Manager API
Read case study
Cloud Infrastructure & SRE

Zero-Trust Private Network Access Platform

A reusable, shared "hub" networking platform so any internal team can privately connect Azure PaaS resources to a corporate VPN, without each team building its own DNS/peering plumbing from scratch.

3-phase: throwaway → low-risk → prod

Rollout model

1, reused org-wide

Shared network hubs built

Azure Private Link / Private EndpointsAzure Private DNS ZonesAzure DNS Private ResolverVNet peering (intra- and cross-subscription)
Read case study
AI / LLM Engineering

Enterprise AI Assistant Platform (RAG)

A production, company-wide AI assistant grounded in internal knowledge, with fine-grained department-scoped access control and full enterprise-identity integration — end to end, from architecture through deployment.

3 (fast, primary, embeddings)

Models orchestrated

Attribute-based, by department

Access control

Retrieval-Augmented Generation (RAG)Vector + semantic hybrid searchMulti-model routing (chat/fast/embeddings)Self-hosted open-source chat UI
Read case study
AI / LLM Engineering

Enterprise AI Search Deployment

An enterprise AI search and assistant platform surfaced across an organization's Workspace data and a curated internal knowledge base, with agentic actions and a nightly automated ingestion pipeline.

4+ (email, calendar, drive, wiki)

Data sources federated

Nightly, fully automated

Ingestion cadence

Google Cloud Gemini Enterprise (Vertex AI Search / Discovery Engine)Federated Workspace connectorsAgentic actions with per-user OAuthCloud Run (scheduled job)
Read case study