Production platforms I architected, built, and own end to end.
Where production details are confidential, these are framed by problem type, architecture,
and capability. The two leading platforms — the IoT device-management and OTA control plane and
the unified data-exchange backbone — I designed, built, and own as the sole engineer. The rest
span a manufacturing execution system and workflow engine, a production Bedrock agent platform,
the shared React design system, fleet analytics, ChatOps remediation, and the telemetry and
authentication infrastructure beneath them, where I set the architecture and led delivery.
Flagship platform · sole engineer
AWS IoT + Python + Terraform
IoT Device Management & OTA Platform
The cloud control plane for a fleet of CNC milling machines — provisioning devices, pushing
firmware and configuration over the air, and reconciling what each machine actually runs
against what the cloud intends. Designed, built, and owned end to end.
- Zero-touch X.509 provisioning with least-privilege per-device policies
- Over-the-air firmware and machine-config delivery
- Device-shadow reconciliation: hash-verified config, conflict detection, auto-recovery
Flagship platform · sole engineer
Python + AWS IoT + Terraform
Unified Real-Time Data Exchange Platform
A topic-routed pub/sub backbone ingesting all factory MQTT traffic and fanning out to
webhooks, live WebSocket clients, and a time-series store (Timestream for InfluxDB) — the
ingestion layer the rest of the platform reads from.
- Topic routing and webhook forwarding over AWS IoT Core, Kafka/MSK, and WebSocket APIs
- No-code message transformer with HIPAA-oriented PII hashing
- 1M+ events a day into 100+ DynamoDB tables, minutes to seconds
Platform · architect & lead
Python + AWS + Terraform
Manufacturing Execution System & Workflow Engine
An event-driven MES of 19 serverless microservices that digitized a paper-based production
process — a configurable workflow engine where every step emits structured events, resurfaced
as LLM-generated dashboards and real-time KPIs for plant leadership. I set the architecture
and infrastructure and built the core services, with the team delivering alongside me.
- Ordered steps with state transitions, conditional branching, scripted actions, and inventory side-effects
- HTTP and WebSocket APIs with an IoT-driven Resource Manager: optimization, DynamoDB-stream processing, IoT triggers
- Terraform-provisioned, multi-account promotion, deployed via GitLab CI
Platform · architect & lead
Amazon Bedrock + Node.js + DynamoDB
AI Agent Platform
A production, planner-routed multi-model agent (Claude + Amazon Nova) embedded in the MES,
answering natural-language questions over live production data and guiding staff in-product —
collapsing a week of cross-team investigation per customer concern.
- 10-tool registry: live DynamoDB access, sandboxed code interpreter, NL-to-SQL over Athena, analytics presets, email/SNS/IoT actions
- Human-in-the-loop gating on every write action
- Structures free-text ticket narratives into queryable records
- Builds charts and KPIs on demand instead of fixed dashboards
Frontend platform
React 19 + MUI + Vite
Shared Design System & App Platform
The React 19 / MUI / Vite design system used across the application portfolio — token-driven
light/dark theming, a layout shell, and a reusable component kit (command palette, data grid,
dialogs, status chips, empty states) — so a new app starts from a working, consistent shell
instead of a blank page. Now behind 15+ real-time operational dashboards.
Analytics platform
React + MUI + Entra ID
Fleet Analytics Dashboard
The serverless analytics behind a 3,500+ device fleet dashboard — utilization and idle
detection over a state engine, a unified per-device 360 view, and Zendesk / Pega service-desk
integrations — unifying five sites and nine production lines. Later moved its endpoints off
full-table scans onto precomputed rollups with async backfill.
Ingestion & edge
AWS IoT + MQTT + Kafka consumers
Machine Telemetry & Fault Visibility
The device-side edge of ingestion: getting heterogeneous machines to speak in the first place —
an MQTT topic taxonomy, connectivity and heartbeat monitoring, Kafka consumers, and
normalization of vendor-specific machine output into one common event shape, with faults
routed as they happen. It gave production facilities real-time fault visibility for the
first time.
Platform security
Cognito + Entra ID + RBAC
Authentication & authorization platform
A single reusable Lambda authorizer validating Cognito and Azure AD (Entra) JWTs plus scoped
API keys across HTTP, REST, and WebSocket APIs, with a dynamic RBAC engine rolled out
log-then-enforce to zero mismatches — standardizing secure access across internal
operational applications.
Closed-loop ops
Microsoft Teams + Lambda
ChatOps Remediation
Turned alerts into one-click action: Adaptive Cards that fire into Microsoft Teams on
threshold breaches and failure-rate spikes, with operator buttons calling back into Lambda to
remediate the device directly from chat — no console, no runbook hunt.
Engineering tool
Next.js + React + three.js
3D Mesh QC Viewer
In-browser rendering of dental 3D meshes (STL / PLY / OBJ) with reference-vs-test geometric
deviation heatmaps and PDF / zip export for quality control.