Summary
I design and run production systems on AWS, serverless first, and I am just as at home in the network beneath them: VPC architecture, site to site VPN, routing, and firewall policy. A growing share of my recent work is containerized, packaging services with Docker and orchestrating them on Kubernetes for freelance clients. Backing that is a B.S. in Cloud & Network Engineering and ten certifications, among them the AWS Solutions Architect and CloudOps Associate credentials with CompTIA Network+ and Security+. What I enjoy is owning a system end to end and keeping it secure and cheap to run, with enough logging that I can tell what it is doing when something breaks.
Projects
Hybrid-Cloud Network Capstonegithub.com/sormin-the-red/BSCNE-AWS-Capstone-Project---E030
On-prem site (GNS3): VyOS router/firewall, three-VLAN segmentation over 802.1Q trunking, screened DMZ, DHCP, and NAT/DNAT—bridged to an AWS VPC over a route-based IPsec Site-to-Site VPN (IKEv2 + NAT-Traversal). Cloud side: tiered public/app/data subnets with Security Groups + NACLs, VGW routing deliberately scoped to one on-prem subnet for least-privilege access—all in Terraform. Validated across eight test cases.
GlazeVault Serverless Backendgithub.com/sormin-the-red/vitrify-backend
Domain-decomposed serverless API: nine bounded-context Lambdas behind one HTTP API, single-table DynamoDB with access-pattern GSIs, Cognito social OAuth and triggers, Bedrock generative-AI integration, Rekognition moderation, CDK infrastructure-as-code.
The Duke Online Real-time multiplayertheduke-online.com·github.com/sormin-the-red/TheDukeOnline
AWS AppSync (GraphQL + WebSocket subscriptions), Cognito, per-time-control Elo ratings, and a WAF + DynamoDB throughput-cap + Budgets guardrail layer. CDK end to end.
mkuntz-site Serverless sitegithub.com/sormin-the-red/mkuntz-site
Keyless GitHub Actions + OIDC continuous deployment of CDK infrastructure; CloudFront edge-cached static reads keep visitor loads off Lambda entirely.