// cv.pdf — rendered from cv.typ in CI · figures re-verified against git history on 2026-06-08 Download PDF Engineering graduate (B.E. Computer & Communications Engineering, AUB, 2022–2026) who builds and operates real infrastructure rather than tutorial clones — a self-run bare-metal Kubernetes cluster driven entirely by GitOps, cloud-native backends, Ansible/Terraform automation, and a completed adversarial-ML research capstone. Comfortable working independently end-to-end (mobile → API → database → CI/CD → deployment) and inside other teams' codebases and review processes.
Full evidence-checked inventory (~30 repos) at orski.sh
theWyseKube self-hosted bare-metal Kubernetes homelab · Talos Linux + FluxCD GitOps
Aug 2025 – present · 347 commits, 96% mine Operate a 4-node production cluster (k8s v1.33) with zero manual kubectl apply — every change ships through Git review and FluxCD reconciliation. Ceph RBD storage, HA PostgreSQL via CloudNativePG, SOPS+age encrypted secrets, Traefik/MetalLB with keepalived HA, internal ACME CA. Maintains a written disaster-recovery runbook and has recovered real incidents on the record (e.g. a Ceph OSD_FULL/WAL-corruption event via Barman restore).
FYP — Adversarial ML Platform final-year capstone · faculty-supervised, 2-person team
Sep 2025 – May 2026 · 99 commits, 79% mine Built and evaluated adversarial-robustness defenses (FGSM, PGD, Carlini-Wagner, patch attacks; ResNet18/WideResNet) plus an original "adversarial routing" detector. ~17.5K lines of PyTorch/Optuna research code run as HPC batch sweeps via SLURM, paired with a full-stack FastAPI + React/Vite dashboard for live inference monitoring and experiment management.
ANT — Network Cell Analyzer solo distributed system · mobile → API → database → deployment
Mar – Apr 2026 · 25 commits, 92% mine Kotlin/Jetpack Compose Android app streams cellular telemetry to a FastAPI + PostgreSQL backend (JWT/OAuth2, per-IP rate limiting, dual SQLite/Postgres support). Ships with a 359-line pytest suite, a CI pipeline producing signed release APKs and Docker images, and a Helm chart for k8s rollout. 4,049 LOC total.
ShopCloud cloud-native e-commerce backend · AWS architecture + EECE503Q capstone
Apr – May 2026 · 50 commits, 88% mine Six Express microservices with deliberate polyglot persistence mirroring AWS semantics (Postgres, DynamoDB with TTL, async S3+SES+SQS invoice pipeline), backed by 3,508 lines of Terraform standing up matching ECS/IAM/ECR/DynamoDB infrastructure with OIDC-based GitHub Actions deploy roles. Built in a 5-day sprint.
hpccluster — open-source contributions Ansible automation · multi-author HPC cluster project ↑ mherkazandjian/hpccluster
36 / 260 commits · +4,923 / −361 lines Designed and built two Ansible roles from scratch — cobbler_pxe (full PXE/DHCP/DNS provisioning, design doc, idempotent config patching, pytest suite) and nginx — plus restored a vaultwarden role and authored a PXE-boot-testing automation skill, all reviewed and merged into someone else's codebase.
ansible-playground & boxman contributions from-scratch IaC · feature delivery in a foreign codebase ↑ self + mherkazandjian/boxman
14/14 own commits · +3,693 lines Solo-built 11 Ansible roles / 11 playbooks provisioning a complete self-hosted GitLab stack (libvirt/KVM, Docker, Traefik, WireGuard, PXE). Separately, designed and shipped an OCI image-management subsystem and PXE-boot support inside a mentor's Python tool — design docs first, then implementation, tests, and documentation.
Open-source contributorhpccluster, boxman, RCC wiki — Ansible/Python infra projects
2025 – present Regular contributor to a research-computing colleague's multi-author infrastructure repos: designed roles and subsystems from written proposals through to tested, documented, merged code (see Selected Projects).
General FOSS experienceShokoServer and subsidiaries · Jellyfin plugin tinkering
Since mid-2023 Triaged bugs, gave feedback, and contributed code to ShokoServer and related projects; forked and adapted several Jellyfin plugins to personal use cases.
Technical Assistant — InternshipAUB Libraries, Beirut, Lebanon
Aug 2022 – Aug 2023 Archived university data from social media platforms. Researched archiving approaches for Instagram, Facebook and Twitter, then built a Python/Selenium + Java + Go scraping toolkit (packaged as standalone executables) that replaced manual scraping with an automated pipeline.
Assistant Tutor — Internship3Poli Robotics, Tripoli, Lebanon
Summer 2021 Tutored children in using LEGO robotics kits; helped translate technical concepts for a young audience and supported small group projects.
General AssistantJamal Hardware, Tripoli, Lebanon
Summer 2020 Invoice processing and validation, product checking and shipping.
Skills — ranked by evidence
10/10 Docker / containerisation — present in nearly every infra & backend project 8/10 Python — FYP research (~17.5K LOC), ANT backend, Ansible tooling, scrapers 6/10 Kubernetes — theWyseKube (production), LifeOS, ANT (Helm), EECE503Q 6/10 Databases — PostgreSQL, DynamoDB, Redis, SQLite, Firestore, Ceph RBD 5/10 Ansible — ~7,500 lines across hpccluster, ansible-playground, hpc-services 5/10 CI/CD — GitHub Actions across ANT, ShopCloud, theWyseKube, ansible-playground 5/10 Auth & secrets — JWT/OAuth2, SOPS+age, Authentik SSO, Vaultwarden 4/10 Terraform / IaC — ~7,000 lines HCL across ShopCloud, EECE503Q, terraform-challenge 4/10 Networking — DNS/DHCP/PXE (Cobbler), WireGuard VPN, Tailscale, Traefik 4/10 Cloud architecture (AWS) — ECS, ALB/ASG, DynamoDB, SQS, IAM/OIDC 3/10 Virtualisation — libvirt/KVM/QEMU across boxman, ansible-playground, hpccluster — FastAPI/Express APIs, React/Vite, Kotlin/Jetpack Compose, GitOps (FluxCD/Helmfile), C/C++, RISC-V & x86 assembly, Verilog
American University of Beirut
B.E. — Computer & Communications Engineering
2022 – 2026
Arabicnative Englishfluent Frenchintermediate
Self-hosted homelab operator since 2021 (dockerized → Proxmox LXC → bare-metal k8s); 9 substantive university technical projects spanning quantum computing, digital-systems design (Verilog), computer architecture (RISC-V/AVX), databases, RF simulation, and mobile-network protocol analysis — full write-ups at orski.sh.