Available for new projects

Secure infrastructure.
Shipped by one senior engineer.

Security hardening against AI-driven attacks, Kubernetes and cloud DevOps, and full-stack development. Hands-on work from Nashik, India for teams in Europe and beyond.

  • AWS
  • GCP
  • Azure
  • Kubernetes
  • Terraform
  • Helm
  • Cloudflare
  • Keycloak
  • Next.js
  • Python
  • MongoDB

Services

Three things, done properly.

Pick one, or combine them. Every engagement ends with code and docs your team owns.

Security hardening

Close the gaps automated, AI-driven attacks look for before they find them.

  • Infrastructure and code audits with a prioritised fix list
  • WAF, bot and rate-limit rules at the edge
  • Secrets out of repos and images, rotated and scoped
  • SSO, MFA and zero-trust access for internal tools
  • Kubernetes network policies, RBAC and pod security

DevOps & cloud

Reliable, reproducible platforms on AWS, GCP or Azure that cost what they should.

  • Kubernetes on EKS, GKE and AKS
  • Terraform and Helm, everything in Git
  • CI/CD pipelines with preview and rollback
  • Monitoring, logs and alerts that mean something
  • Right-sizing and cluster consolidation to cut spend

Full-stack development

Product features shipped end to end, from database to UI, ready for production.

  • Next.js and React frontends
  • Node.js and Python (Flask, FastAPI) APIs
  • MongoDB and Postgres data models
  • Docker images and deployment included
  • Auth, background jobs and integrations

Process

Clear steps, no black box.

  1. 01

    Intro call

    30 minutes, free. You describe the setup and the goal; I tell you honestly whether I am the right fit.

  2. 02

    Scope & quote

    A short written plan with deliverables, timeline and a fixed price or day rate. No surprises later.

  3. 03

    Build in short cycles

    Work lands in small, reviewed changes. You see progress every few days, not at the end.

  4. 04

    Handover

    Docs, runbooks and a walkthrough so your team owns it. Optional retainer for ongoing support.

Selected work

Recent engagements.

Client names stay private. Happy to talk through details on a call.

SaaS platform · client in Germany

Hardened a multi-cluster Kubernetes platform

Edge WAF and rate limits, zero-trust access in front of admin tools, one-time-code sign-in, and network policies between services, rolled out without downtime.

  • Kubernetes
  • Cloudflare
  • Keycloak

AI document platform · client in Germany

Cut cloud spend by consolidating clusters

Measured real usage, moved light workloads together and tuned autoscaling so heavy jobs scale up only when needed. Same service, a smaller bill.

  • EKS
  • Helmfile
  • Autoscaling

Operations team · client in Germany

Shipped an internal dashboard end to end

Python API, MongoDB and a modern web UI with secure sign-in, custom views and audit trails, deployed through CI to Kubernetes.

  • Python
  • MongoDB
  • TypeScript

Fintech startup · client in the US

SOC 2-ready AWS foundation

Multi-account AWS with Terraform, SSO, least-privilege IAM, encrypted storage and centralised audit logs, ready for the auditor's checklist.

  • AWS
  • Terraform
  • IAM

E-commerce brand · client in the US

Faster storefront and checkout

Rebuilt the storefront in Next.js with server rendering and edge caching, and moved checkout APIs behind rate limits and bot protection.

  • Next.js
  • Node.js
  • Postgres

Cyber security company · client in Israel

CI/CD with supply-chain checks

Pipelines that build, sign and scan every container image, block known vulnerabilities and deploy to Kubernetes with automatic rollback.

  • GitLab CI
  • Kubernetes
  • Helm

FAQ

Common questions.

Do you work with teams outside India?

Yes, most of my work is for clients in Europe. Working hours overlap well with Central European time, and calls, docs and code reviews are in English.

How do you price work?

Fixed price for well-defined work such as an audit or a migration, or a day rate for ongoing engagements. You get the number in writing before anything starts.

How do you handle access to our systems?

Least privilege, named accounts and MFA, ideally through your SSO. I sign an NDA on request, never copy data out, and hand back all access at the end.

Can you take on a small task?

Yes. A single pipeline, a Terraform module or a security review of one service are all fine. Small jobs are often the best way to start.

What does a security audit include?

A review of edge, network, identity, secrets, CI/CD and application code, with findings ranked by risk and concrete fixes. I can implement the fixes too.

Which clouds and tools do you use?

AWS, GCP and Azure; Kubernetes, Terraform, Helm, GitLab and GitHub CI, Cloudflare, Keycloak, Prometheus and Grafana, plus Next.js, Node, Python, MongoDB and Postgres.

Contact

Tell me about your project.

A few lines are enough. You will hear back within one working day with next steps or honest advice.

Working with
Teams in Europe and worldwide

Your details are only used to reply to you. No newsletters.