cloud architecture, devops, and automation. always building.
I am a software engineer and DevOps consultant passionate about resilient cloud architecture, automated infrastructure, and applied AI. Currently, I am a DevOps Consultant at Glovion Consulting Private Limited, managing on-premise private data center operations, bare-metal virtualization, and dedicated Nepali server infrastructure. Previously at One Cloud Utopia, I led DevOps operations and zero-downtime rollouts across four production platforms on AWS: Zyrona, Outfitmirror, Princika Traders, and MCQtest.
As a 2x AWS Certified Solutions Architect and AWS Community Builder (2026), I specialize in designing multi-AZ VPC topologies, container orchestration with ECS Fargate and Docker, automated GitHub Actions pipelines, and executing systematic FinOps audits that cut monthly AWS bills by ~30%.
I actively author deep-dive technical research covering enterprise network fabrics, serverless architectures, and agentic DevOps. My writing has been recognized on AWS Builder Center, winning the AWS Data 4x4 Technical Challenge.
A structured directory of production cloud deployments, deep-dive publications, open-source repositories, and verified accreditations.
In-depth essays on AWS enterprise network fabrics, Bedrock Generative AI, RDS persistence, and deterministic agentic DevOps.
Real-world infrastructure architectures for Zyrona, Outfitmirror, Princika Traders, and MCQtest with 99.9% uptime SLA.
Senior advisory on multi-AZ VPC architecture, zero-downtime CI/CD automation, FinOps bill reduction, and DevSecOps.
Open-source static security analyzers, asynchronous Bedrock serverless engines, and containerized REST backends.
2x AWS Certified (Solutions Architect & Cloud Practitioner), AWS Community Builder (2026), and IIT Madras AI accreditations.
Managing on-premise data centers at Glovion Consulting, cloud operations at One Cloud Utopia, and backend systems at Karnovation Inc.
Long-form engineering essays and architecture tutorials I have published recently.
Production architectures, failure post-mortems & cloud engineering takeaways.
Developer utilities, security analyzers, and cloud infrastructure systems I maintain in the open.
A lightweight, framework-aware Static Application Security Testing (SAST) tool for Python.
Demonstrating RAG implementation with FastAPI, using Ollama, Chroma, and TinyLlama for local AI model execution.
Multi-tenant backend with real-time GPS ingestion.
Robust E-commerce backend with secure authentication.
Comprehensive stock and billing solution tailored for bookstore operations.
A web application built as part of Harvard University's CS50x course to manage birthdays.
Centralized patient information system streamlining hospital operations.
How I help high-growth startups and enterprise teams build resilient cloud architectures, automate deployments, and eliminate cloud waste.
Design and implement high-availability cloud infrastructure on AWS. Specializing in Multi-AZ VPC network isolation, ECS Fargate serverless containers, zero-downtime rolling deploys, and automated disaster recovery.
Build robust continuous integration and continuous deployment pipelines that eliminate deployment anxiety. Implement multi-stage Docker build caching, automated testing gates, and seamless production rollouts.
Conduct thorough cloud infrastructure audits to identify compute waste, idle resources, and inefficient queries. Right-size workloads and architect efficient persistence layers to drastically reduce monthly AWS expenditure.
Embed enterprise security early into development and deployment cycles. Implement granular least-privilege IAM policies, WAF rate-limiting rules against DDoS/scraping, and automated static application security testing.
Bridge the gap between slow, unpredictable AI models and snappy, responsive web applications. Decouple long-running LLM inference via asynchronous task queues, resilient S3 pre-signed workflows, and grounded vector search.
In-depth architectural breakdowns, failure post-mortems, and engineering essays on AWS, DevOps, and Applied AI.
Discover the top AWS agentic AI trends in 2026 and learn how to build production-ready agents with Bedrock AgentCore, deterministic guardrails, and real code.
An AI agent with broad IAM can hallucinate its way into disaster. I built a fail-closed proxy that scopes permissions to the task, live.
A hands-on Terraform walkthrough of Route 53, CloudFront, Global Accelerator, ALB/NLB, WAF, Shield, and PrivateLink organized around three distinct traffic patterns, not one blended chain.
Building an isolated, ephemeral AI code-execution sandbox with AWS Lambda MicroVMs and Firecracker to safely execute untrusted generative AI output without host contamination.
AWS pipeline: Apache Pig on EMR (Graviton, Tez) handles ETL; Amazon Bedrock enriches and structures data before model training.
How we kept 15-year-old Apache Pig scripts alive on AWS with EMR, cut costs by a third, and automated deploys with GitHub Actions and OIDC.
Stop manual code reviews! Build a serverless AI pipeline with AWS Bedrock, CodeBuild & CDK that automatically audits PRs and posts fixes.
How to stop treating deployments as a stressful event and turn them into a predictable, automated workflow using AWS Developer Tools.
Building a Safe, Closed-Loop Cloud Operations Control Plane on AWS to detect anomalies and apply remediations without human intervention.
Deep dive into sub-millisecond networking, confidential compute with Nitro Enclaves, distributed Aurora Limitless shards, and cross-region Application Recovery Controller.
Architecting a Zero-Trust Enterprise RAG Gateway on AWS enforcing fine-grained Cedar authorization policies, multi-tenant vector isolation, and Amazon Bedrock models with Terraform.
An autonomous developer onboarding agent on AWS that inspects AST trees, parses dependency maps, and generates tailored architectural walk-throughs for new codebases.
Mastering AWS Networking for Security & Cost Wins in 2026: eliminating unnecessary NAT gateway charges and cross-AZ data fees while elevating VPC isolation and PrivateLink.
Diagnosing and tuning AWS Managed Rules to stop false positives from breaking production checkout flows while maintaining defense-in-depth against SQLi and XSS.
Building a Governed Multi-Account AWS Landing Zone with Organizations, Control Tower, and CDK for automated account vending, SCP guardrails, and centralized logging.
What AWS Could Mean for Healthcare in Sudurpaschim: exploring hybrid cloud topologies, edge compute, and satellite backhauls to deliver telemedicine to remote districts in Nepal.
Amazon Quick Desktop as the Planning Layer for AI-Assisted Development: structuring AI development workflows with project blueprints before letting agents touch source code.
Designing for a World Where Humans Can Be Bought: zero-trust systems leveraging cryptographic provenance, multi-party consensus, and append-only audit ledgers.
The Hype vs. What Actually Ships: a pragmatic teardown of automated cloud migration tools, real-world database replication gotchas, and cutover strategies.
Why AWS Kiro Might Quietly Kill Your Team's Cursor Subscription: native cloud telemetry integration, AWS API orchestration, and deterministic spec-driven code authoring.
Why Your Serverless Architecture Becomes Monolithic Without You Noticing: how shared databases, synchronous Lambda chains, and coupled EventBridge schemas recreate distributed monoliths.
The Engineering Ecosystem behind AI Biomechanics & Gym Operations: processing edge video streams, calculating joint angles, and generating adaptive workout corrections.
Why Your AI Agent Is the New Insider Threat: autonomous agents with write permissions representing unpredictable vectors for privilege escalation, and how to stop them.
Our RAG app returned confident, fluent, completely wrong answers, and no error ever fired. Here's the full autopsy: what killed it, why, and how to fix it before it happens to you. Featured in AWS Data 4x4 — recognized alongside AWS Community picks for databases and analytics.
Build Deterministic AI Infrastructure with AWS Blocks: explore why AI-generated Infrastructure as Code needs deterministic composition, type-safe backend capabilities, and policy-aware validation.
How to Stop Runaway Amazon Bedrock Agent Loops Before They Drain Your Wallet: how recursive tool calling blows up token budgets overnight, and automated AWS Budgets + Lambda circuit breakers.
Designing a Global Enterprise Network Fabric: The Kiro Fabric Architecture. Building a resilient multi-region infrastructure using AWS Direct Connect (BFD-tuned), Transit Gateway, and Global Accelerator.
Part 2: Hands-On with AWS Kiro, AgentCore, and Transform. A practical tutorial breaking down how to write deterministic EARS specifications in AWS Kiro and manage persistent session state.
How AWS Kiro, AgentCore, and Transform Are Reshaping DevOps in 2026. Replacing unreliable natural language prompting with deterministic engineering guardrails using AWS frameworks.
The Rise of AI Agents on AWS: From Chatbots to Autonomous Systems. Explore how to build production-grade autonomous agent architectures on AWS with Amazon Bedrock.
Architecting the Far West: A Roadmap for Sudurpaschim as Nepal’s Regional AWS Cloud Hub. A technical blueprint for edge computing, local micro data centers, and regional connectivity in Nepal.
The contemporary backend engineering landscape is characterized by a fundamental shift away from manual infrastructure management toward automated, code-driven ecosystems.
An architectural deep dive into Amazon Relational Database Service (RDS), networking principles, and the Least Privilege security model for mission-critical persistence.
An in-depth analysis of the most impactful announcements from AWS re:Invent 2025 and their implications for enterprise cloud engineering.
Deploying a modern web application is not just about pushing code to the cloud; it's about leveraging the cloud's capabilities to deliver a seamless user experience with edge security.
Formal engineering qualifications certified and independently verified by Amazon Web Services, IIT Madras, and LeetCode.
Amazon Web Services
Expires Jan 5, 2029
Amazon Web Services
Expires Oct 13, 2028
Amazon Web Services
Issued Sep 25, 2025
Amazon Web Services
Issued Sep 28, 2025
Amazon Web Services
Hands-on Labs
NPTEL (IIT Madras)
Cloud Computing & ML
LeetCode
Problem Solving
Engineering leadership, cloud consulting contracts, and multi-service production outcomes.
Engineering resilient infrastructure within Glovion's dedicated private data centers in Nepal. Ensuring low-latency network performance, strict data residency compliance, automated self-hosted deployments, and continuous system reliability on local bare-metal and virtualized servers.
Core engineering toolchains, AWS services, and operational frameworks utilized in production environments.
Production architectural primitives
Delivery pipelines & containerization
High-throughput asynchronous services
Cloud optimization & security governance
An engineering philosophy centered on automation, failure domain isolation, and lean cloud economics.
I believe great cloud architecture is about reducing accidental complexity. In an ecosystem where spinning up managed cloud services is trivial, the actual engineering craft lies in designing deterministic systems that don't fail unexpectedly under traffic spikes or burn through budgets unchecked.
Currently, I am working as a DevOps Consultant at Glovion Consulting Private Limited, managing and modernizing their private on-premise data center operations and dedicated Nepali server infrastructure. My focus spans bare-metal system architecture, virtualized compute pools (KVM), local traffic routing with Nginx & HAProxy, self-hosted automated CI/CD runners, and strict sovereign data residency compliance.
Previously, I served as a DevOps Consultant at One Cloud Utopia, where I took end-to-end ownership of cloud operations for four production applications—including e-commerce platforms (Zyrona), AI virtual try-on engines using Amazon Bedrock (Outfitmirror), inventory monorepos (Princika Traders), and high-concurrency online test engines (MCQtest). Earlier, at Karnovation Inc, I engineered high-throughput async backends in FastAPI and optimized OAuth2 authentication latency by ~95% using Redis JWKS caching.
As an AWS Community Builder (2026), I actively contribute back to the software community. I author in-depth architectural breakdowns covering multi-region enterprise network fabrics, deterministic agentic DevOps frameworks, and database persistence internals across AWS Builder Center (34+ articles), Dev.to, and Medium—winning recognition including the AWS Data 4x4 Technical Challenge.