Work / 6 case studies
Problems solved, step by step.
Selected work from 10+ years in cloud and infrastructure. Clients and employers stay anonymous. The problem, the approach and the result are what matter here.
- 01 / Product company AWS · Google Cloud · Terraform · Ansible
Google Cloud to AWS, zero downtime
- Challenge
Every production and staging workload had to move from Google Cloud to AWS while the product stayed live.
- Approach
Designed the target environment on AWS, codified it in Terraform and Ansible, and cut over one environment at a time.
- Result
All workloads on AWS with zero downtime during the move.
- Challenge
- 02 / Product company SonarQube · Wazuh · Vaultwarden · Jenkins · GitHub Actions
A self-hosted DevSecOps platform
- Challenge
Code quality, threat detection and credentials were handled differently by every team.
- Approach
Rolled out SonarQube, Wazuh SIEM and Vaultwarden, wired into CI/CD on Jenkins and GitHub Actions.
- Result
One shared stack for code quality, threat detection and secrets, and repeatable deployments.
- Challenge
- 03 / Enterprise clients Security Command Center · Cloud Armor · WAF · SIEM · Zero trust
Security hardening for PCI DSS
- Challenge
Cloud platforms had to meet PCI DSS and local regulatory requirements.
- Approach
Hardened the security posture with SCC, SIEM, SOAR, WAF, Cloud Armor and zero trust access.
- Result
PCI DSS and local regulatory compliance achieved.
- Challenge
- 04 / Enterprise clients Terraform · Ansible · CloudFormation · Cloud Build
Multi-cloud automation
- Challenge
Public, private, hybrid and multi-cloud estates on GCP, AWS and Azure were being built by hand.
- Approach
Automated network, compute and virtualization layers with Terraform, Ansible, CloudFormation and Deployment Manager.
- Result
Infrastructure that can be rebuilt from code, with each migration planned, carried out and validated.
- Challenge
- 05 / Data team Python · Gemini · OpenAI · OCR
An AI-powered public data lake
- Challenge
Indonesian public datasets were scattered across PDFs and portals and collected by hand.
- Approach
Built Python scrapers with Gemini and OpenAI for PDF extraction and OCR, feeding a structured data lake.
- Result
Manual collection replaced, with near-real-time access to the datasets.
- Challenge
- 06 / Product company Terraform · Ansible
Environments without drift
- Challenge
Development, staging and production had drifted apart through manual changes.
- Approach
Standardized provisioning in Terraform and Ansible, so every environment is built the same way.
- Result
Less manual configuration and no more environment drift.
- Challenge
Toolbox
The tools behind the case studies, grouped by area.
What I work with.
| Cloud platforms | Google Cloud, AWS, Azure, Oracle Cloud, Alibaba Cloud, Hetzner |
|---|---|
| DevOps & IaC | Terraform, Ansible, Docker, Jenkins, GitHub Actions, CI/CD pipelines |
| AI & data | Amazon Bedrock, Vertex AI, web scraping, OCR, data lakes |
| Security | Zero trust access, SCC, Cloud Armor, WAF, Wazuh (SIEM), SonarQube, Vaultwarden |
| Containers | Kubernetes (GKE), Docker, Podman, Packer |
| Monitoring | Prometheus, Grafana, New Relic, Cloud Operations Suite, Zabbix, Nagios |
| Web apps | Python (FastAPI, Django, Flask), PHP (Laravel), JavaScript, PostgreSQL, Git |
| Mobile apps | Native Android (phone, Android Auto, Android TV), Flutter, Dart |
| Infrastructure | Linux, Windows, networking, virtualization (ESXi, Proxmox) |