01 / 10ENGINEERING

SYSTEM BOOT

SHREYA
BARANWAL

Backend · Cloud · DevOps · AI Infrastructure

I build systems that survive beyond the happy path.

02 / 10 · SKILLS

Skills that
connect.

The core stack behind the systems in this portfolio — hover a node to trace how it connects.

BackendDevOpsObservabilityDatabasesAI / LLMEngineering Concepts

03 / 10 · PROJECTS

Systems in
motion.

(01)01 / 04

GPO — Global Platform Orchestrator

A production-pattern Internal Developer Platform, built from scratch in Go.

Deployment orchestration, GitOps, progressive delivery, observability, and policy-as-code. Every integration — ArgoCD, Flagger, Linkerd, Kyverno, Vault, Grafana — was installed, configured, broken, debugged, and fixed by hand.

Go 1.21Kubernetes (Kind)ArgoCDFlaggerLinkerdKyvernoGrafanaNext.js

Deployed on Vercel · MIT License

VERIFIED SYSTEM

ARCHITECTURE

DEPLOYMENT

OBSERVABILITY

SECURITY

AUTOMATION

VIEW PROJECT

(02)02 / 04

Nexus

A secure execution runtime for AI-generated code

Sandboxed execution, policy enforcement, distributed coordination, usage-based billing, and full observability — built and proven end-to-end.

Go 1.22+Next.js 15DockerPostgreSQL 16Redis 7KubernetesStripe

18 tests passing

VERIFIED SYSTEM

ARCHITECTURE

DEPLOYMENT

OBSERVABILITY

SECURITY

AUTOMATION

VIEW PROJECT

(03)03 / 04

ATLAS-OPS

Cloud Incident Detection & Automated Remediation System

Detect infrastructure anomalies, evaluate policy, and execute recovery — with minimal human intervention.

Go 1.21AWSDynamoDBSQSTerraformReact Dashboard

14 stars

Architecture→Observability→Anomaly Detection→Automated Remediation→Result

VERIFIED SYSTEM

ARCHITECTURE

DEPLOYMENT

OBSERVABILITY

SECURITY

AUTOMATION

VIEW PROJECT

(04)04 / 04

PR Herder

The Slack agent that tames the open-source pull-request firehose.

Triage incoming PRs, route reviews to the right people, catch flaky CI, and approve or request changes — without ever leaving Slack. Built for the Slack Agent Builder Challenge.

Go 1.25PostgreSQL 16Slack Block KitGitHub MCP ServerOllama (local LLM)DockerKubernetes

VERIFIED SYSTEM

ARCHITECTURE

DEPLOYMENT

OBSERVABILITY

SECURITY

AUTOMATION

VIEW PROJECT

01/ 04

04 / 10 · CLOUD INFRASTRUCTURE

Hands-on with AWS.
Built across the stack.

Infrastructure, compute, networking, containers, observability, messaging, databases, and managed AI — explored through hands-on projects and deployments.

Identity & Networking

Compute & Scaling

Containers

Data

Messaging & Events

Observability & Operations

Infrastructure as Code

AI / ML

CI/CD & Deployment

REAL FLOWS IN PRODUCTION

Monitored compute

→→→

Container deployment

→→→

Cloud-native CI/CD pipeline

→→→→→→→Users

Click any service to see where it's actually been used.

05 / 10 · PROJECT TOPOLOGIES

Real systems.
Real architecture.

Three shipped projects, inspected node by node — the actual services, languages, and evidence behind each one.

GPO — Global Platform Orchestrator

Click any node to see its real role, evidence, and status.

06 / 10 · WRITING + ENGINEERING NOTES

Writing +
engineering notes.

Long-form thinking and dated notes from building, breaking, and observing systems.

WRITING

HASHNODE hashnode.com/@shreyabaranwalMEDIUM medium.com/@shreyabaranwal517

07 / 10 · OPEN SOURCE

Systems are
collective.

Contribution is a path through repositories, issues, pull requests, and communities — measured, not assumed.

mindersec/minderMerged · #6729

Add fallback support for REST data source handler

Wired up unused fallback / expected_status fields on RestDataSource, with table-driven tests via httptest. Also traced a failing CI security scan to an unrelated grpc CVE. Approved by two maintainers.

VIEW ON GITHUB

cozystack/cozystackMerged · #3084

fix(gateway): pin identical allowedRoutes.kinds on port 443 listeners

Fixed a production bug where Cilium was silently dropping HTTPRoutes due to divergent listener kinds on port 443 — went through detailed review rounds and added full regression test coverage across three cert modes.

VIEW ON GITHUB

kubernetes/kubernetesPR opened · +110 / −0 · 11 comments

test: add e2e coverage for OOMKilled misclassification with stale counter

Also opened the underlying issue — pods evicted/drained were being reported as terminated.reason=OOMKilled with exitCode 143 despite no real memory pressure. First issue filed on Kubernetes core.

VIEW ON GITHUB

jaegertracing/jaeger-ui34 comments · +10,078 / −15,319

chore: migrate from npm to pnpm

Also reviewed 2 other pull requests in this repo.

VIEW ON GITHUB

knative/func8 comments · +92 / −10

fix(invoke): validate extension format and remove dead branch

Addressed review follow-ups from a prior PR (#3347) — removed an unreachable second branch in cloudevent validation and returns an error on malformed --extension input.

VIEW ON GITHUB

ALSO CONTRIBUTED TO

knative/func kubernetes/kops zerodha/dungbeetle ollama/ollama bitfield/script

08 / 10 · CREDENTIALS