Directory

All projects

Each entry documents the problem, the architecture I chose and what changed as a result. Source code and evidence are on GitHub.

Amazon Web Services

7 case studies
012026 / Deployed

Cloud Security Framework — CivicNexus

Hardened layered security for a Smart City Operations Platform

AWSVPC DesignSecurity GroupsNACLsPrivate SubnetsBastion HostIAM & RBACMFAAWS CognitoKMS / EBS EncryptionCloudTrailCloudWatchMongoDB Replica SetsISO/IEC 27001ISO/IEC 27005Risk AssessmentDefence in DepthSecurity Governance
Business value

For smart-city operators responsible for sensitive citizen, personnel and IoT data, this framework replaces public exposure and ad-hoc controls with an auditable security model. In the project assessment, two Critical risks scored 9 were reduced to Low, while a three-node database design improved planned service resilience.

Read case study →
022026 / Deployed

Machine Learning Predictive Modeling Pipeline

Stroke prediction and credit-card customer segmentation, end to end

PythonScikit-LearnPandasNumPyMatplotlibSeabornSciPyJupyterLogistic RegressionRandom ForestK-MeansHierarchical ClusteringPCAGridSearchCVK-Fold Cross-ValidationFeature EngineeringData Visualisation
Business value

For clinical screening and financial analytics teams, this pipeline turns imbalanced, unstructured datasets into decision-ready risk and customer insights. In benchmark testing, tuning lifted stroke recall from 0% in the misleading high-accuracy baseline to 80%, while segmentation produced four actionable customer groups.

Read case study →
032026 / Deployed

Enterprise Network — TechBridge

Two-site enterprise network with HSRP redundancy, VLANs and IPSec site-to-site VPN

Cisco IOSPacket TracerTwo-Tier Collapsed CoreOSPFStatic RoutingHSRPVLAN SegmentationInter-VLAN RoutingSTPVLSM / FLSMDHCPDHCP Relay (IP Helper)NAT / PATACLsDMZGRE over IPSec VPNSSHWPA2-PSK Wireless
Business value

For a growing two-site business, this design removes single points of failure, fragmented addressing and insecure inter-site traffic. It provides capacity for 50% headcount growth without re-addressing, uses gateway redundancy to minimise downtime, and passed 18 end-to-end validation tests.

Read case study →
042026 / Deployed

Sterling Digital Cloud Migration

Multi-tier AWS migration with AD, ALB, ASG and automated bootstrapping

AWS VPCEC2ALBASGRDSDynamoDBEFSS3Simple ADSSSD
Business value

For a regulated digital-services team, this architecture replaces manually managed, single-instance infrastructure with a secure and scalable AWS operating model. Multi-AZ services and a 2–4 instance Auto Scaling range improve continuity and resource utilisation, while central identity and reusable bootstrapping reduce repeat configuration effort and access risk.

Read case study →
052026 / Completed

Amazon QuickSight — S3 Data Visualisation

Turning a raw 8,807-row S3 dataset into an interactive BI dashboard

Amazon QuickSightAmazon S3SPICEmanifest.jsonBusiness IntelligenceData Analysis
Business value

For content and commercial analysts, this dashboard removes the need to download raw files or write one-off queries before answering routine catalogue questions. It converted 8,807 records into six decision-ready visuals in roughly two hours, creating a faster and repeatable path from source data to insight.

Read case study →
062026 / Completed

Amazon Lex — Banking Chatbot with Custom Slots

A conversational banking bot: intents, custom slots and verified balance checks

Amazon LexNLUIntents & SlotsIAMConversation DesignSpeech Recognition
Business value

For retail banking service teams and customers, this prototype shifts repetitive greeting and balance enquiries toward secure self-service. It demonstrates automated handling across two core intents, captures account context, and introduces date-of-birth verification before sensitive information is returned.

Read case study →
072026 / Completed

AWS KMS — Encrypting a DynamoDB Database

Customer-managed keys, encryption at rest and proving unauthorised access fails

AWS KMSAmazon DynamoDBAWS IAMKey PoliciesEncryption at RestLeast Privilege
Business value

For teams managing sensitive or regulated records, this control gives the organisation direct authority over who can decrypt its database rather than relying only on provider-owned keys. The test proved unauthorised reads were blocked and limited approved access to five explicit cryptographic actions, reducing data-exposure and audit risk.

Read case study →