Peru N

Projects

Architecture, cloud, and security case studies

Selected work covering system design, delivery decisions, security analysis, and implementation outcomes.

Agentic Kubernetes IaC Security Reviewer architecture diagram
2026-06-23

Agentic Kubernetes IaC Security Reviewer

Combined deterministic security scanning with bounded agent remediation to make infrastructure findings easier to trust and act on.

Built an agent-assisted CLI that turns Kubernetes, Terraform, and Dockerfile scanner output into prioritized security reviews, control-backed explanations, and safely staged remediation artifacts.

Security EngineeringPlatform EngineeringDevSecOpsAI Products

• Turned raw infrastructure scan output into a prioritized review workflow engineers can act on faster.

• Added control-backed explanations that make findings easier to defend in platform and security discussions.

• Reduced remediation risk by staging generated fixes outside the source tree with bounded retry logic.

View case studyRepository
AI PDF Reader architecture diagram
2026-04-17

AI PDF Reader

A private, local-first document AI product with grounded retrieval, desktop packaging, and strong UX.

Built a local-first AI PDF Reader that lets users upload documents, retrieve grounded answers, generate study guides, and run as both a web app and offline desktop experience.

AI EngineeringSoftware ArchitectureLocal-First AISecurity Engineering

• Delivered a product that can run in browser mode or as a desktop app for Windows and macOS.

• Combined PDF parsing, chunking, embeddings, retrieval, and local LLM answers into one polished workflow.

• Improved privacy posture by supporting local GGUF models and offline packaging for sensitive document use cases.

View case studyRepository
Secure Developer Platform and Landing Zone architecture diagram
2025-11-08

Secure Developer Platform and Landing Zone

Turned fragmented cloud onboarding into a governed self-service platform.

Built a secure internal developer platform with standardized landing zones, golden pipelines, observability baselines, and policy controls for multi-team cloud delivery.

Cloud EngineeringLanding ZonesDevSecOpsGovernance

• Cut environment provisioning from weeks to less than one day.

• Improved policy compliance with standardized identity, network, and logging baselines.

• Increased developer confidence through reusable pipeline templates and guardrails.

View case studyRepository
Cloud SOC Analytics Workbench architecture diagram
2025-07-19

Cloud SOC Analytics Workbench

Built a cloud-native security analytics platform for faster investigation and better control visibility.

Designed an analytics workbench for security operations that ingests telemetry, enriches detections, and supports investigation workflows with secure access patterns.

Security EngineeringDetection EngineeringData PipelinesCloud Architecture

• Reduced analyst triage effort by consolidating telemetry and enrichment workflows.

• Improved investigation quality with normalized event context and risk scoring.

• Strengthened access governance for analysts, responders, and platform operators.

View case studyRepository