// PORTFOLIO
Selected Projects
Monolith Migration to AKS
Migration of a monolithic e-commerce application to Azure Kubernetes Service while maintaining business continuity throughout the process. Implementing a blue-green deployment strategy eliminated downtime risk during the transition to the new environment.
Challenge
The client ran a monolithic application on a single server. Increased traffic caused regular performance issues. Migration to a scalable environment was needed without interrupting the shop's operation.
Solution
- Application containerisation (Docker)
- AKS cluster deployment on Microsoft Azure
- Azure DevOps pipeline configuration
- Blue-green deployment implementation
- Database migration to Azure SQL
CI/CD Pipeline for 20 Developers
Deployment of a complete GitLab CI environment with automatic testing, building and deployment to staging and production environments. Integration of SonarQube and Trivy ensured automatic code quality checks and image security scanning.
Challenge
A team of 20 developers worked without a unified deployment process. Deploying took several hours and was prone to human error. There were no automated tests or security scanning.
Solution
- GitLab CI/CD deployment with multi-stage pipeline
- Automated unit and integration tests
- Security image scanning (Trivy)
- Code quality analysis (SonarQube)
- Automatic deployment to staging and production
- Slack notifications after each deployment
Kubernetes Cluster Security Audit
Comprehensive audit of a Kubernetes cluster running in the production environment of a medical facility. Applying CIS Benchmark and Trivy detected and resolved critical vulnerabilities in RBAC configuration and Network Policies.
Challenge
A healthcare client was required to meet compliance requirements for data security. The existing Kubernetes cluster had not been audited since its deployment.
Solution
- Cluster configuration audit per CIS Kubernetes Benchmark
- Container image scanning (Trivy)
- RBAC policy review and remediation
- Network Policies deployment
- Falco configuration for runtime anomaly detection
- Detailed report with CVSS scoring
- Retest after remediation deployment
Server Provisioning Automation
Deployment of Ansible and Terraform for automatic provisioning and configuration of server environments in a manufacturing facility. With infrastructure as code, every new server is configured within minutes, in line with established security standards.
Challenge
The manufacturing plant managed dozens of manually configured Linux servers. Each new deployment took several days and resulted in configuration differences between servers. There was no unified hardening standard.
Solution
- Development of an Ansible role for Linux system hardening
- Terraform for infrastructure provisioning
- Unified configuration templates for all servers
- Automatic security policy enforcement (CIS baseline)
- Deployment pipeline with configuration validation
- Documentation for the client's IT team
// YOUR PROJECT
Have a similar challenge?
Tell us about your project — we'll select the right approach and share experience from similar engagements.
Let's Talk