Neehar S Ashok

Teams need isolated, secure environments per tenant without duplicating infrastructure overhead or manual cloud operations.

Engineered a self-service SaaS provisioning platform automating the full tenant workspace lifecycle on AWS (deploy, manage, teardown in under 5 minutes). Implemented multi-tenant isolation via Kubernetes namespaces with NetworkPolicies, hybrid RDS schema/dedicated-DB tiering, and dynamic S3 bucket generation with per-tenant IAM roles. Orchestrated Terraform via GitHub Actions (with tfsec linting) and used DynamoDB state locking plus SQS/Redis queuing to serialize concurrent provisioning requests. Integrated AWS Secrets Manager with the Kubernetes external-secrets operator for runtime secret injection — zero plain-text credentials in git, each tenant's pods run under dedicated IRSA roles. Built an automated Reaper cron job that tags resources with TenantID/expiration and runs terraform destroy on orphaned environments.

Job seekers need a structured way to track applications, interviews, and outcomes across the whole application lifecycle.

Built a full-stack platform with a drag-and-drop Kanban board (Wishlist → Applied → OA/Test → Interview → Offer → Rejected) and a live analytics dashboard. Implemented stateless JWT authentication with Spring Security (BCrypt hashing, per-user data isolation, a custom OncePerRequestFilter protecting all REST endpoints, automatic 401 redirect on token expiry). Built RESTful APIs across Auth, Applications, and Stats controllers with global exception handling (@RestControllerAdvice), JSR-380 validation, and a PATCH /status endpoint driving Kanban drag-and-drop with optimistic UI updates and client-side rollback. Designed a StatsService computing interview/offer rates and a 14-day timeline via JPQL grouped queries, visualized with Recharts. Configured dual database support (H2/MySQL via Spring profiles) with multi-stage Dockerfiles and docker-compose.

Cluster issues often surface too late for teams to react proactively.

Built a FastAPI service using the Kubernetes Python SDK to poll cluster health, using the Anthropic API to summarize issues in plain language and post alerts to Slack, containerized with Docker/Helm.

Manual deployment of Flask apps is slow, inconsistent, and error-prone.

Built a three-stage CI/CD pipeline using GitHub Actions to automate testing, Docker image builds, and deployment to AWS EC2 on every push to main. Configured a multi-stage Dockerfile producing lean, secure production images pushed to Docker Hub, with automated health checks and Docker Compose orchestration for environment parity. Deployed the Flask app behind an Nginx reverse proxy on EC2 with security headers and rate limiting, and wrote pytest unit tests covering all API endpoints as a mandatory pipeline gate blocking deployments on failure.

Teams need a structured way to assign, track, and manage tasks with access controls based on user roles (Admin, Manager, Member).

Built a full-stack task manager application utilizing Node.js and Express for the backend API and React for the interactive client panel. Implemented Role-Based Access Control (RBAC) powered by JSON Web Token (JWT) stateless auth, scoping access controls so Admins manage user profiles, Managers assign/re-route task cards, and Members modify task completion states.

Manually writing cloud templates (like CloudFormation or Terraform configurations) for multi-tier applications is time-consuming and error-prone.

Engineered an infrastructure generator application that maps application topology selections (VPCs, RDS instances, Autoscaling Groups, S3 Buckets) and dynamically generates fully qualified, syntactically verified, security-linted Terraform configuration templates.

Deploying raw, vanilla Linux hosts exposes infrastructure instances to brute-force auth sweeps, open ports intrusion, and OS-level vulnerabilities.

Authored secure, automated configuration templates and hardener shell setups to configure newly spun Linux nodes. Orchestrated SSH authentication rules (key-only, disable root login), configured UFW network controls, set up fail2ban thresholds to ban scanning hosts, and enabled automated security patches.