Projects

Curated to reinforce governed AI systems, platform engineering, and secure automation

Not every repo earns the same weight. These projects were selected because the source descriptions most directly support AI security, AI infrastructure, AI governance, and consulting credibility.

AI Governance

Governance-First RAG Ingestion Release Platform

Repo

Summary

A modular ingestion control plane that treats RAG ingestion as software delivery instead of a single script.

Problem

Most RAG pipelines hard-wire ingestion, chunking, embedding, and release into an opaque flow with weak auditability and weak rollback behavior.

What Derrick Built

Derrick describes a release lifecycle for ingestion with pluggable stages, policy-driven quality and safety gates, RBAC, audit trails, and promote or rollback semantics.

Why It Matters

This is the clearest direct evidence of AI governance positioning: policy gates, release controls, observability, and auditability around retrieval infrastructure.

RAGRBACEmbeddingsPolicy GatesAudit Trails

LinkedIn Projects export

"Content moves through a release lifecycle (ingest -> validate -> promote -> rollback) ... All actions are observable and auditable."

AI Security

Secure Log Ingestion and Event Routing Pipeline

Repo

Summary

A serverless security pipeline for log ingestion, threat detection, enrichment, and escalation using AWS-native services and secure automation patterns.

Problem

Security telemetry loses value when ingestion, routing, enrichment, and escalation paths are loosely governed or lack fine-grained permissions.

What Derrick Built

The project is described as event-driven and security-focused, with fine-grained IAM, log enrichment, automated alerting, and a Jenkins pipeline integrated with Vault, SonarQube, Snyk, JFrog, and Jira.

Why It Matters

It reinforces secure automation, event-driven controls, and practical security operations rather than abstract AI claims.

AWS LambdaIAMJenkinsVaultSnykJFrogJira

LinkedIn Projects export

"secure, event-driven serverless architecture for log ingestion, threat detection, and security escalation ... fine-grained IAM controls, log enrichment, and automated alerting."

LinkedIn Projects export

"Jenkins pipeline designed to automate secure log ingestion, scanning, and artifact handling, with integrations across Vault, SonarQube, Snyk, JFrog, and Jira."

AI Infrastructure

Enterprise-Ready Kubernetes Lab with RBAC, CI/CD, HPA, and Observability

Repo

Summary

A production-style Kubernetes lab that packages RBAC, multi-namespace design, autoscaling, CI/CD, and observability into a single platform exercise.

Problem

Platform claims are weak when they only show cluster deployment without policy, scaling, release, or observability controls.

What Derrick Built

The project description cites GKE, YAML, Helm, Terraform, fine-grained RBAC, multiple namespaces, HPA, Jenkins and GitHub Actions, plus Prometheus and Grafana dashboards.

Why It Matters

It is strong evidence for platform engineering depth that underpins secure AI infrastructure and governed runtime environments.

GKEKubernetesRBACHelmTerraformPrometheusGrafana

LinkedIn Projects export

"Simulates real-world enterprise infrastructure with fine-grained RBAC, multiple namespaces, Horizontal Pod Autoscaling, CI/CD, and Prometheus/Grafana dashboards."

Cloud Infrastructure

Multi-Cloud Site-to-Site VPN

Repo

Summary

A Terraform-based AWS to GCP HA VPN with BGP for dynamic routing and failover.

Problem

Cross-cloud platforms need resilient network connectivity and explicit routing controls, especially when shared services or AI workloads span providers.

What Derrick Built

The project provisions redundant VPN tunnels, dynamic route advertisement, and modular Terraform for both AWS and GCP sides.

Why It Matters

This supports the cloud and infrastructure side of Derrick's positioning, especially where governed AI systems depend on cross-cloud platform design.

TerraformAWSGCPHA VPNBGP

LinkedIn Projects export

"Creates a Site-to-Site IPSec VPN between AWS and GCP ... Uses BGP for dynamic route advertisement and automatic failover."

Supporting Work

Additional infrastructure projects

Included for breadth, but positioned below the flagship work because they contribute less directly to the target AI security and governance narrative.

Serverless Application

SmartResume Terraform Project

Summary

A serverless application for authenticated resume generation using Cognito, Lambda, DynamoDB, S3, CloudFront, and API Gateway.

Problem

Useful as a proof of practical AWS serverless delivery, though less aligned to AI security or governance than the flagship work.

What Derrick Built

The project provisions the full stack through Terraform with AWS-native authentication and storage components.

Why It Matters

Included as supporting infrastructure evidence, not as a positioning anchor.

TerraformCognitoLambdaDynamoDBS3CloudFront

LinkedIn Projects export

"save skills and job descriptions to DynamoDB, and generate tailored resumes stored in S3."

Observability

Multi-Region Hub-and-Spoke Web Application with Centralized SIEM

Summary

A seven-region AWS Terraform deployment with a centralized Loki and Grafana logging hub connected through Transit Gateway peering.

Problem

Distributed applications need central visibility and network topology that can support multi-region operations.

What Derrick Built

The architecture combines ALBs, ASGs, NAT and internet gateways, Promtail shipping, and centralized SIEM-style logging.

Why It Matters

Strong supporting material for cloud architecture and centralized observability; weaker than the flagship projects for AI-specific positioning.

TerraformAWSTransit GatewayLokiGrafanaPromtail

LinkedIn Projects export

"architecture spans 7 regions in a hub-and-spoke configuration, featuring centralized logging and monitoring with Loki and Grafana."