Architected an event-driven receipt-processing pipeline across S3, SQS, Lambda, and DynamoDB. Integrated Google Gemini with deterministic OCR/parser fallback, JWT authentication, AWS Secrets Manager, CloudWatch monitoring, retry/DLQ handling, and 8/8 passing backend tests.

Engineered a five-stage Python pipeline that detects language, entry point, dependencies, and port across 11 runtimes, then generates production-ready multi-stage Dockerfiles. GitHub Actions pushes commit-SHA-tagged images to ECR using OIDC, with Trivy blocking HIGH or CRITICAL vulnerabilities.

Built modular Terraform for a three-tier AWS network across two Availability Zones, with public, private application, and private database subnets. Configured an internet-facing ALB, EC2 Auto Scaling, NAT Gateway routes, and private Multi-AZ MySQL RDS with public access disabled.