Selected work

Multi-Tier AWS Infrastructure

A three-tier AWS environment built for a simulated client, covering the network, compute, and data layers end to end. Public and private subnets separate the load balancer from the application and database tiers, with a NAT Gateway providing outbound access for private resources. An Application Load Balancer distributes incoming traffic across an Auto Scaling Group of EC2 instances, which connect to an RDS database that is never directly internet-accessible.

• VPC with public/private subnet separation
• NAT Gateway for secure outbound access from private subnets
• Application Load Balancer routing to an Auto Scaling Group
• RDS database isolated in a private subnet
• Infrastructure provisioned as code with CloudFormation
• CloudWatch for monitoring and alarms, CloudTrail for audit logging

Cloud Security & Encryption

An applied cryptography project covering encryption, key management, and secure remote access. Implemented Paillier homomorphic encryption, which allows computation directly on encrypted data without decrypting it first, alongside Shamir secret sharing to split sensitive key material so no single party holds the whole secret. Paired this with AWS KMS for encryption at rest and an OpenVPN Access Server for secure remote administration of cloud resources.

• Paillier homomorphic encryption for computation on encrypted data
• Shamir secret sharing to distribute key material across parties
• AWS KMS for managed encryption at rest
• OpenVPN Access Server for secure remote administration

Programming Project 1 — Capstone

My current capstone at RMIT: a software engineering project delivered by a team for a real external client, run to a professional development process rather than a solo assignment. It's still in progress — this entry will be filled in with architecture, scope, and outcomes as the project is delivered.

Taimuri English Language Academy

A student management system built for a real academy client in Quetta, Pakistan. Covers authentication and role-based access control across admin, staff, and student accounts, with a responsive interface built in TailwindCSS on top of a Laravel backend and MySQL database, plus a lightweight module for handling course fees.

• Role-based access control across admin, staff, and student accounts
• Secure authentication and session handling
• Responsive admin and user-facing dashboards
• MySQL-backed data layer for student and course records