// ls ~/projects

Projects

A mix of enterprise security engineering work and personal software builds. Write-ups for several of these are on the blog.

Security engineering

NGFW / MIGRATION

Large-scale NGFW migration & greenfield build

Migration and greenfield implementation of next-generation firewalls for a large government entity — policy conversion with Expedition, phased cutovers, and full HLD/LLD documentation.

Palo AltoFortiGateExpedition
NETWORKING

IPv6 rollout for published services

Planned and implemented IPv6 for externally published services, covering addressing plans, firewall policy parity and service validation.

IPv6NGFWDNS
EMAIL SECURITY

Enterprise email security stack

Cisco ESA deployment with AMP, SPF, DKIM, DMARC and email encryption — from architecture through enforcement and tuning.

Cisco ESADMARCAMP
ENDPOINT

Highly available endpoint security

Designed and implemented endpoint protection with high availability and multiple distribution points across server and VDI estates.

EDRHA design

Personal builds

AI / AUTOMATION

AI trading research bot

A personal research project: an agent-driven trading analysis pipeline with decision gates, risk management and trade lifecycle tracking — built with Python, FastAPI and LLM agents.

PythonFastAPILLM agents
WEB / SERVERLESS

dipinonline.com

This site — a hand-built static site with a markdown blog pipeline, animated canvas background and page transitions, served globally from a Cloudflare Worker.

Cloudflare WorkersVanilla JSMarkdown