Projects¶

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Goal: Streamline application deployment and infrastructure management using GitOps methodology.

Key Contributions:

• Developed GitLab CI/CD pipelines to build and push Docker images to AWS ECR.
• Configured ArgoCD to monitor Git repositories for application and infrastructure manifests using Helm Charts.
• Implemented ArgoCD Image Updater for automated image tag synchronization from AWS ECR.
• Automated cluster state synchronization between Git and AWS EKS.

Outcomes:

• Efficient and automated application delivery process.
• Single source of truth for all Kubernetes cluster configurations.
• Enhanced scalability and observability for cloud-native applications.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Goal: Set up a production-ready Kubernetes cluster on Amazon EKS for scalable containerized workloads.

Key Deliverables:

• Infrastructure as Code (IaC): Provisioned EKS cluster, secure VPC, subnets, and security groups using Terraform.
• Node Management: Deployed managed EC2 node groups integrated with the EKS control plane.
• Networking: Configured VPC CNI for efficient pod networking and ALB/NLB for external traffic.
• Security: Implemented IAM roles and granular Kubernetes RBAC policies.
• Scalability: Deployed Cluster Autoscaler and Horizontal Pod Autoscaler (HPA).
• Tooling: Installed Helm, ArgoCD, cert-manager, and Nginx Ingress.

Outcomes:

• Production-grade EKS environment supporting high-availability critical applications.
• Simplified resource management through automated scaling and monitoring.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: GitLab, AWS, Docker, Terraform, Ansible

Key Contributions:

• Deployed a self-hosted GitLab instance on AWS EC2 using Docker containers.
• Automated infrastructure provisioning and server configuration with Terraform and Ansible.
• Designed and implemented CI/CD pipelines to streamline deployment for multiple development teams.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: GitLab CI/CD, Trivy, Docker, Bash

Key Contributions:

• Integrated Trivy security scanner into GitLab CI/CD pipeline stages.
• Automated vulnerability detection and reporting for container images prior to deployment.
• Improved the overall security posture by reducing manual audit overhead.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: AWS (EC2 Spot, ASG), GitLab Runner, Docker, Terraform

Key Contributions:

• Successfully migrated GitLab Runners to AWS EC2 Spot Instances, reducing infrastructure costs by 60-70%.
• Configured Auto Scaling Groups (ASG) to ensure runner availability and scalability.
• Implemented fallback strategies with On-Demand instances to maintain pipeline reliability.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: GitLab CE/EE, Linux Ubuntu, Nginx, PostgreSQL, Docker

Key Contributions:

• Installed and secured a high-availability self-hosted GitLab platform.
• Integrated PostgreSQL backend and Nginx reverse proxy with SSL/TLS.
• Managed repository migration and implemented RBAC/SSO for developer access.
• Automated backup and disaster recovery procedures for data protection.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: Docker, Docker Compose, Nginx, MySQL, PHP-FPM, Let’s Encrypt

Key Contributions:

• Containerized the WordPress stack for improved portability and scalability.
• Optimized PHP-FPM and Nginx caching, resulting in 40% faster response times.
• Automated SSL/TLS certificate management using Let's Encrypt.
• Established CI/CD workflows for development, staging, and production environments.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Technologies: GitLab CI/CD, Fastlane, Kubernetes, SonarQube

Key Contributions:

• Configured on-premises GitLab Runners to support secure banking build environments.
• Automated mobile app (iOS/Android) releases using Fastlane and GitLab CI.
• Integrated SonarQube for continuous code quality and static security analysis (SAST).
• Collaborated in an Agile/Scrum environment to ensure mission-critical platform compliance.

Project Information

Capstone Project: Bangkit Academy 2023 by Google, GoTo, and Traveloka
Role: DevOps & Cloud Lead
Stack: Google Cloud Platform (GCP), Firebase, Cloud Run, GitHub Actions

Key Contributions:

• Orchestrated the cloud environment on GCP to host backend and Machine Learning services.
• Automated deployment pipelines using GitHub Actions for seamless service delivery.
• Managed containerized services on Cloud Run, ensuring scalability for user traffic.
• Authored comprehensive documentation for system design and deployment procedures.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: Linux Centos, Python, Gunicorn, Nginx

Key Contributions:

• Configured production-ready server environments for OCR/ML workloads.
• Deployed Python applications with Gunicorn and Nginx reverse proxy for high performance.
• Created systemd services to ensure process resiliency and auto-restarts.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: Docker Compose, Nginx, PostgreSQL, GitLab CI/CD

Key Contributions:

• Designed microservices architecture for internal company applications using Docker Compose.
• Integrated service orchestration and persistent storage for databases and caching.
• Optimized dev-to-prod workflows through automated GitLab CI/CD pipelines.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: Grafana, Prometheus, Loki, Alertmanager, CloudWatch

Key Contributions:

• Implemented a centralized observability stack for metrics and log aggregation.
• Designed interactive Grafana dashboards for real-time infrastructure visibility.
• Configured proactive alerting via Slack/Email, significantly reducing MTTR.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: AWS CloudWatch, SNS, IAM, CloudWatch Agent

Key Contributions:

• Configured performance monitoring for EC2 instances with detailed custom metrics (Memory/Disk).
• Established real-time alerting using CloudWatch Alarms and SNS.
• Improved incident response times through performance dashboards.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: PostgreSQL, Nginx, Docker, Ubuntu

Key Contributions:

• Deployed and secured a self-hosted Taiga instance for Agile project tracking.
• Configured Nginx reverse proxy with SSL/TLS and managed Dockerized services.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Goal: Deliver real-time notifications for repository and pipeline activities.

Key Contributions:

• Integrated GitLab webhooks with Mattermost for instant team feedback on CI/CD events.
• Automated notifications for Merge Requests, issues, and pipeline failures.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Goal: Establish proactive cloud billing governance.

Key Contributions:

• Integrated AWS CloudWatch billing alarms with SNS and Mattermost webhooks.
• Provided real-time visibility into usage thresholds and cost spikes.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Tooling: Uptime Kuma, Docker, Nginx, Mattermost

Key Contributions:

• Deployed Uptime Kuma to track availability and latency for critical company services.
• Configured real-time incident alerting via Mattermost and Email.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: AWS CLI, AMI, S3 Sync, IAM Roles

Key Contributions:

• Planned and executed secure cross-account transfers of EC2 resources and S3 data.
• Managed cross-account IAM permissions and verified data integrity post-migration.

Project Information

Role: DevOps Engineer @ PT. IDstar Cipta Teknologi
Stack: Google Cloud Platform (GCP), Compute Engine, Cloud Storage

Key Contributions:

• Successfully migrated OCR workloads from on-premises to GCP instances.
• Configured network security and firewalls within the GCP environment.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Goal: Centralize company collaboration and user management.

Key Contributions:

• Deployed Google Workspace Admin Console and migrated user accounts/emails.
• Configured DNS authentication (SPF, DKIM, DMARC) for secure email delivery.
• Established role-based access control and 2FA security policies.

Project Information

Context: Sekolah DevOps Cilsy Batch #14
Technologies: AWS (EC2, RDS, S3), Terraform, Ansible

Key Contributions:

• Designed and executed migration of on-premises workloads to AWS infrastructure.
• Automated provisioning using Infrastructure as Code (Terraform) and configuration with Ansible.
• Configured VPC networking and security groups for cloud compliance.

Project Information

Context: Sekolah DevOps Cilsy Batch #14
Stack: Kubernetes, Docker, Helm, Nginx Ingress

Key Contributions:

• Orchestrated microservices deployment on a production-like Kubernetes cluster.
• Implemented Nginx Ingress Controller for traffic routing and load balancing.

Project Information

Context: Sekolah DevOps Cilsy Batch #14
Stack: Linux, Nginx, PostgreSQL, Docker, Proxmox

Key Contributions:

• Built a robust on-premises infrastructure using virtualization for web hosting.
• Configured web servers and database environments for secure internal application access.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Goal: Implement reliable connectivity for a new office location.

Key Contributions:

• Designed and installed comprehensive LAN infrastructure using Cisco and Mikrotik.
• Deployed structured cabling (Cat6) and managed Wi-Fi coverage with Ubiquiti.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Stack: Proxmox VE, Linux, MySQL, Backup Solutions

Key Contributions:

• Virtualized legacy physical servers using Proxmox VE to improve resource utilization.
• Established automated backup and snapshot policies for critical HR data.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Stack: Proxmox VE, ZFS Storage, KVM/LXC

Key Contributions:

• Deployed Proxmox VE as the primary enterprise virtualization platform.
• Configured ZFS storage pools for high-performance virtual disks.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Stack: Mikrotik RouterOS, QoS/HTB, Traffic Shaping

Key Contributions:

• Analyzed traffic patterns and prioritized business-critical bandwidth (VoIP/Video).
• Reduced network latency by optimizing traffic markings and queue disciplines.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Stack: Fortigate 30E, FortiOS, VPN, IPS/IDS

Key Contributions:

• Deployed Fortigate firewall for advanced threat protection and secure remote access.
• Configured IPSec/SSL VPN and web filtering policies to secure the office network.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Managed hardware migration of core routers with zero service downtime.
• Migrated complex firewall, NAT, and VPN configurations to newer Mikrotik models.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Successfully migrated enterprise email from Zimbra to Google Workspace.
• Managed DNS reconfiguration and data transfer for over 100+ users.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa
Stack: Zabbix, SNMP, MySQL, Grafana

Key Contributions:

• Deployed comprehensive monitoring for servers and network appliances.
• Configured real-time alerts for service outages and performance bottlenecks.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Established secure site-to-site and remote access VPN tunnels.
• Configured RADIUS authentication for centralized user access control.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Optimized throughput by fine-tuning firewall rules and connection tracking.
• Achieved measurable improvements in latencies for critical business apps.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Upgraded core network backbone with high-performance Mikrotik hardware.
• Implemented BGP/OSPF routing for network redundancy and failover.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Modernized analog surveillance to a high-definition IP-based CCTV system.
• Managed NVR storage configurations and network segmentation for video traffic.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Designed and installed audio-visual systems for corporate meeting rooms.
• Integrated dedicated QoS for Zoom and Microsoft Teams reliability.

Project Information

Role: IT Support & Network Engineer @ PT. Unicorn Tosan Perkasa

Key Contributions:

• Performed deep-dive optimization of router configurations.
• Enhanced network security posture through hardened firewall rules.

Project Information

Context: Junior Network Engineer Internship
Tooling: Cisco Packet Tracer, Subnetting

Key Contributions:

• Designed Local Area Network (LAN) topologies and IP addressing schemes for small businesses.
• Documented equipment requirements and VLAN segmentation strategies.