Skip to content
View ShyamD2's full-sized avatar
🎯
Focusing
🎯
Focusing
117 followers · 247 following
  • India | Open to BLR • HYD • MAA • Remote

Achievements

Achievement: Pull Shark

Achievements

Achievement: Pull Shark

Block or report ShyamD2

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ShyamD2/README.md
Shyam Kumar D Hero Banner

SHYAM KUMAR D

Cloud Infrastructure • DevOps • SRE • Autonomous Cyber-Physical Systems

📍 Madurai, Tamil Nadu, India  |  Open to Relocation (Bengaluru • Hyderabad • Chennai) & Remote

⚡ Designing • Deploying • Securing • Automating Resilient Cloud Infrastructure ⚡

👨‍💻 Identity & Architecture Philosophy

class ShyamKumarD:
    name         = "Shyam Kumar D"
    location     = "Madurai, Tamil Nadu, India 🇮🇳"
    degree       = "B.Sc. Networking (Cloud Computing) — SLCS, Madurai (2027)"
    gpa          = 8.4
    role         = "Cloud Infrastructure & DevOps Engineer / SRE"

    core_specializations = [
        "Three-Source Cloud Drift & GitOps Remediation (DriftWarden)",
        "Autonomous Cyber-Physical Systems (AgentOS Mark VII)",
        "Kubernetes Scheduling & FinOps Optimization (KubeForecast)",
        "AWS Cloud Architecture & Infrastructure as Code (Terraform 1.5+)",
        "Linux OS Internals & Kernel Telemetry (/proc, Systemd, Cron)",
        "Zero-Trust Security & DevSecOps (AST Auditing, CycloneDX SBOM)",
        "Production Reliability Engineering & Chaos Injection",
    ]

    flagship_systems = {
        "DriftWarden": "High-Precision 3-Source AWS Drift & CIS v3.0 Engine (Go 1.24, GitOps HCL, Zero Eval)",
        "Project J.A.R.V.I.S.": "Production Cyber-Physical AgentOS (100/100 Benchmark, 268+ tests)",
        "KubeForecast": "Autonomous EKS Predictive Scheduler (Go 90.35ns latency, 50-66.7% node savings)",
        "Cloud Engineering Journey": "36-Day DevOps Master Plan (Python Automation & Linux Internals)",
        "Personal SRE Portfolio": "Interactive React 18 SRE Cockpit with live incident simulations",
    }

    def philosophy(self):
        return "Ship secure, scalable systems. Automate manual chores. Leave zero downtime."

👋 Recruiter Quick Directory

A fast, zero-friction directory to evaluate my architectural depth, code quality, and cloud deployments across my public repositories:

What You Are Looking For Featured Engineering Proof Primary Technical Stack
🔍 Three-Source Cloud Drift & GitOps DriftWarden (20p Report) — AWS Drift & CIS v3.0 Engine Go 1.24, Terraform 1.5+, AWS SDK v2, CIS Benchmarks, OIDC CI/CD
🛡️ Autonomous Cyber-Physical AgentOS Project J.A.R.V.I.S. — Production Cyber-Physical OS Python FastAPI, Win32 UIA, ONNX, Telegram ReAct, 100/100 Score
🌟 Distributed Systems & FinOps KubeForecast — Autonomous EKS Predictive Scheduler Kubernetes Scheduling Framework, AWS EKS v1.31, Go, 90ns Latency
☁️ DevOps & Linux Mastery Cloud Engineering Journey — 36-Day Master Plan Python Automation, Linux /proc, OverTheWire Bandit 0-10
🌐 Interactive Systems Engineering Personal SRE Portfolio — Live Incident Simulator React 18, TypeScript, Vite, Thanos Engine, Real-time telemetry
🛡️ Cloud Security & SOAR aegis-cloud-security — Multi-Account Threat Detection AWS, EventBridge, Lambda, GuardDuty, Terraform, Automated Containment
⚡ Serverless FinOps Architecture aws-cloud-serverless-url-shortener — Event-Driven App Terraform, API Gateway, Lambda, DynamoDB, SQS, CloudWatch
🔐 Privileged Access Management SecureVault-Campus / cyberark-pam-lab-api Active Directory, PAM Vaulting, Python FastAPI, Docker, pytest
☁️ AWS Core Infrastructure Scalable-AWS-Cloud-Infrastructure — Multi-AZ VPC AWS VPC, Application Load Balancer, EC2 Auto Scaling Groups
🚨 Security Operations Platform incident-response-platform — SecOps Workflow Engine TypeScript, React, Alert Pipelines, Incident Triage Runbooks
📄 Direct Contact & Connect LinkedIn Profile • Email Response SLA: Under 24 Hours

🚀 Featured Flagship Systems

🔍 DriftWarden (AWS Drift Engine)

High-Precision Three-Source AWS Drift Detection, CIS Security & GitOps Engine

  • Three-Source Reconciliation: Simultaneously correlates DESIRED (HCL) ↔ STATE (tfstate) ↔ LIVE (AWS) to eliminate false positives and catch unapplied PR changes, shadow assets, and split-brain drifts.
  • Mechanically Enforced Safety: Core binary strictly executes read-only API calls (Describe*, List*, Get*), verified in CI by automated Go AST static analysis. Strictly quarantines AccessDenied from NotFound.
  • Dual GitOps Remediation: Synthesizes modern Terraform 1.5+ import {} blocks (reconcile.tf) for declarative adoption, alongside defensive zero-eval dry-run shell scripts (revert.sh).
  • CIS v3.0 & FinOps: Built-in evaluation of CIS AWS Foundations Benchmark v3.0, idle monthly cost leak calculator, SHA-256 evidence bundles, and zero-cost reproducible golden demo.
  • Published Specifications: Complete 20-page architectural dossier and benchmark telemetry available in the Project Report (Edition 2026 PDF).

Go 1.24 • AWS SDK v2 • Terraform 1.5+ • CIS v3.0 • GitHub Actions OIDC • Distroless (<25MB)

🌟 KubeForecast (EKS Scheduler)

Autonomous Kubernetes Predictive Scheduling & FinOps Optimization Engine

  • Autonomous Fleet Optimization: Eliminates structural cloud compute waste by predicting node consolidation targets and steering workloads toward safe waterline nodes before fragmentation occurs.
  • Sub-Millisecond Execution: Custom Go Kubernetes Scheduling Framework plugin evaluates candidate nodes in 90.35 nanoseconds (>11 million evaluations/second).
  • Verified Cloud Economics: Demonstrated 50.0% to 66.7% node fleet reduction on live AWS EKS v1.31 hardware ($37,152/yr projected savings on 100-node fleets).
  • Turnkey IaC & Observability: 100% modular Terraform (VPC, EKS, ECR, IAM IRSA, S3) with Helm v3 packaging, 5 Grafana dashboards, and PDB-compliant mutating admission webhooks.

Kubernetes v1.31 • Go • AWS EKS • Terraform • Helm v3 • Prometheus • Grafana

🛡️ Project J.A.R.V.I.S. (AgentOS)

Production-Grade Cyber-Physical Autonomous Operating System (Mark VII)

  • Cyber-Physical Bridge: Unites physical IoT microcontrollers (ESP32 dual relays/lux sensors), native Windows desktop control (Win32 UIAutomation + [0, 1000] Vision Grounding), and AWS cloud mesh.
  • Voice & Interrupt Engine: Local ONNX neural wake-word (openWakeWord), British Neural TTS, and centralized Sub-10ms Recitation Interrupt Service with negative keyword barge-in & clause streaming.
  • Mobile & Remote Gateway: Native Telegram 2.0 ReAct bot with live PC screen streaming (/live) & mobile touch trackpad over Cloudflare tunnels.
  • Empirical Verification: 100/100 Composite Quality Score across 100 benchmark tasks; 268/268 passing pytest suite; 0 High/Critical Bandit AST security vulnerabilities across 25,480 LOC; CycloneDX v1.5 SBOM.

Python • FastAPI • Win32 UIA • ONNX • AWS Boto3 • Telegram ReAct • SQLite WAL

☁️ Cloud & DevOps Engineering Journey

36-Day DevOps Master Plan & Living Proof-of-Work Journal

  • Phase 1 Complete (Days 1–6): Python Filesystem Automation (file_inspector.py), Safe Line-by-Line Log Error Streaming (log_error_finder.py), Ephemeral Filesystem Pruning (auto_cleanup.py), IP Subnet Classifiers (list_operations.py), O(1) HTTP HashMaps (http_status_counter.py), and IaC Bracket Linters & Buffers.
  • Phase 2A in Progress (Days 7–8): Linux Filesystem Hierarchy & virtual /proc kernel inspector (inspect_proc.py), Linux DAC permissions & security compliance auditor (perm_auditor.py), and OverTheWire Bandit Levels 0–10 wargame solutions.
  • Zero-Fluff Daily Documentation: 59+ consecutive daily engineering logs documenting commands, errors, root causes, and production takeaways.

Python • Linux Internals • Bash • Docker • Kubernetes • Terraform • CI/CD

⚡ Production Cloud, Security & Networking Systems

Project Core Stack Architectural Highlights
🌐 Personal-Portfolio React 18, TypeScript, Vite, TailwindCSS Interactive SRE cockpit with live incident simulations, Thanos engine architectural manipulation, and real-time telemetry widgets.
🛡️ aegis-cloud-security AWS, Terraform, EventBridge, Lambda, GuardDuty, IAM Multi-account threat detection, automated SOAR containment, attack-path analysis, and SEC WORM immutable forensic evidence preservation.
⚡ aws-cloud-serverless-url-shortener Terraform, API Gateway, Lambda, DynamoDB, SQS, CloudWatch Production-style serverless platform with asynchronous analytics, modular IaC, automated security scanning, and FinOps controls.
🔐 SecureVault-Campus Active Directory, Windows Server, Linux, PAM, Docker Enterprise Privileged Access Management lab simulating credential vaulting, session isolation, and role-based access governance.
🚀 cyberark-pam-lab-api Python FastAPI, Pydantic, Docker, pytest, REST REST API backing a PAM lab dashboard with typed safe management, account discovery endpoints, and automated unit testing.
☁️ Scalable-AWS-Cloud-Infrastructure AWS VPC, EC2, ALB, Auto Scaling, Security Groups Multi-AZ infrastructure provisioning public/private subnets, Application Load Balancers, and EC2 Auto Scaling groups (99% uptime, 0 unauthorized access).
🚨 incident-response-platform TypeScript, React, Node.js, REST API SecOps incident management dashboard streamlining alert intake, triage severity matrix, and automated containment runbooks.
🌐 Zero-Downtime Hybrid Cloud VPN AWS + Azure, Site-to-Site IPsec VPN, VPC Peering Architected and verified cross-cloud encrypted tunnel between AWS VPC and Azure VNet with 100% availability during handover.

🛠️ Technical Skills & Toolchain

Category Technologies & Tools
Cloud & Infrastructure
DevOps, IaC & Orchestration
Programming & Systems
OS Internals & Architecture
Networking, Security & Compliance
Observability, FinOps & SRE

💼 Professional Experience

🧾 Billing & Inventory Associate — Sapna Garments, Madurai  |  Sep 2024 – Present (Part-Time)
  • Handled 50+ daily billing transactions (payments, cash reconciliation, POS closing) with 100% accuracy over 18+ months.
  • Supervised stock operations across 5+ product categories; streamlined inventory management, reducing stockouts by 40%.
  • Delivered daily reconciled transaction and stock telemetry reports to management with zero audit discrepancies.
☁️ Cloud Computing & Systems Intern — Reccsar Pvt. Ltd.  |  Apr 2026 – May 2026
  • Analyzed and deployed scalable cloud infrastructure patterns across IaaS, PaaS, and SaaS models on live cloud environments.
  • Implemented network security groups, subnets, and reverse-proxy load balancing architectures to handle high-traffic spikes without single points of failure.
  • Traced the full development-to-deployment lifecycle of containerized web services, establishing CI/CD automation and environment reproducibility.

🎖️ Certifications & Technical Achievements

Milestone Status / Verification Significance
DriftWarden Verification ⚡ 100% Invariant Guarantee Mechanically enforced read-only AWS SDK calls via Go AST static analysis; 20-package test suite passing with 0 race conditions; SHA-256 evidence manifests
Project J.A.R.V.I.S. Benchmark 🏆 100/100 Composite Score 100/100 benchmark tasks passing, 5 domain SLAs met, 268+ automated unit/integration tests passing
KubeForecast Verification ⚡ 90.35 ns/op Scoring Evaluated on live AWS EKS v1.31; achieved 50.0% to 66.7% node fleet reduction
Bandit AST Security Analysis 🛡️ Zero Defect (0 High / 0 Med) 25,480 lines of production code scanned with zero security defects
36-Day DevOps Master Plan ⚡ Phase 1 Complete (6/6 Days) Python automation toolchain & core data structures (LeetCode #1929, #217, #20)
OverTheWire Bandit Wargames 🎯 Levels 0–10 Solved Hands-on Linux CLI mastery: SSH non-standard ports, string parsing, permissions, Base64
AWS CCP (CLF-C02) ☁️ In Progress Final mock exam stage (scoring 75%+ across consecutive mock sessions)
Zero-Downtime Hybrid VPN 🚀 100% Availability Architected and configured AWS + Azure IPSec Site-to-Site VPN with zero operational downtime
Deloitte Cybersecurity Simulation 🛡️ Completed (Forage) Evaluated enterprise authorization models and authored incident response runbooks across 5 threat scenarios
Deloitte Data Analytics Simulation 📊 Completed (Forage) Identified 3 factory machine root causes from 6 months of data, forecasting a 20% reliability gain
TCM Security Linux & Programming 100 🐧 Certified (2025) Core Linux system fundamentals and software design principles

🎓 Education & Currently Learning

B.Sc. Networking (Cloud Computing)
Subbalakshmi Lakshmipathy College of Science (SLCS), Madurai, Tamil Nadu

  • Cumulative GPA: 8.4 / 10.0
  • Timeline: 2024 – Expected May 2027
  • Core Coursework: Cloud Virtualization, Advanced Computer Networks, TCP/IP & Routing, Operating Systems Architecture, Linux System Administration, Information Security & Cryptography.

📚 Currently Deep-Diving

✅ AWS Certified Cloud Practitioner (CLF-C02) — Final mock exam prep stage
🔧 HashiCorp Terraform 1.5+ & OpenTofu — Enterprise Modular IaC & Import Blocks
⚡ Systems Programming & AST Analysis in Go — Concurrency, Static Analyzers, Compiler Pipelines
🔐 Cloud Security Posture Management (CSPM) & Zero-Trust AWS IAM Architectures

📊 GitHub Analytics & Activity

Shyam Kumar's GitHub Stats Top Languages

GitHub Streak Stats

🐍 GitHub Contribution Snake

github contribution snake animation

"Ship secure, scalable infra. Automate chores. Monitor everything. Leave no downtime."
— Shyam Kumar D · Madurai, Tamil Nadu 🇮🇳

Pinned Loading

  1. driftwarden driftwarden Public

    High-precision three-source AWS drift detection, CIS benchmark security compliance, and GitOps remediation engine.

    Go 1

  2. KubeForecast KubeForecast Public

    Autonomous Kubernetes Predictive Scheduling & FinOps Cost Optimization Engine. Eliminates structural cloud compute waste via dynamic waterline bin-packing and custom Go scheduler framework plugins.…

    HTML 1

  3. aegis-cloud-security aegis-cloud-security Public

    Autonomous Multi-Account Cloud Threat Detection, Active SOAR Containment & SEC WORM Digital Forensics Platform on AWS

    Python 2

  4. project-jarvis project-jarvis Public

    Autonomous Cyber-Physical AgentOS uniting Physical IoT (ESP32), Windows OS Desktop Automation (Win32), and AWS Cloud (IaC) with a mathematical 0% false-success invariant.

    Python 1

  5. aws-cloud-serverless-url-shortener aws-cloud-serverless-url-shortener Public

    Built a production-ready serverless URL shortener and analytics platform on AWS, implementing scalable event-driven architecture, infrastructure as code, CI/CD, monitoring, and cost optimization.

    Python 1 1

  6. Scalable-AWS-Cloud-Infrastructure-Deployment Scalable-AWS-Cloud-Infrastructure-Deployment Public

    Built a scalable AWS cloud infrastructure using VPC, EC2, Load Balancer, and Auto Scaling to simulate a secure, highly available real-world cloud deployment environment.

    HCL 1