// cv.pdf — rendered from cv.typ in CI · figures re-verified against git history on 2026-09-05 Download PDF Engineering graduate (B.E. Computer & Communications Engineering, AUB, 2022–2026) who builds and operates real infrastructure end to end: a self-run Kubernetes cluster on Talos VMs driven entirely by GitOps, cloud-native backends, Ansible/Terraform automation, and a completed adversarial-ML research capstone. Comfortable working independently (mobile → API → database → CI/CD → deployment) and inside other teams' codebases and review processes.
Full evidence-checked inventory (~30 repos) at orski.sh
theWyseKube self-hosted Kubernetes homelab · Talos VMs on Proxmox + FluxCD GitOps
Aug 2025 – present · 727 commits, 91% mine Operate a four-node cluster (k8s v1.33) of Talos Linux VMs, hosted on Proxmox, with no routine manual kubectl apply — every change ships through Git review and FluxCD reconciliation. Ceph RBD storage, HA PostgreSQL via CloudNativePG, SOPS+age encrypted secrets, Traefik/MetalLB with keepalived HA, internal ACME CA. Maintains a written disaster-recovery runbook and has recovered real incidents, with the analyses recorded in the commit history.
FYP — Adversarial ML Platform final-year capstone · faculty-supervised, 3-person team
Sep 2025 – May 2026 Built and evaluated adversarial-robustness defenses (FGSM, PGD, Carlini-Wagner, patch attacks; ResNet18/WideResNet) plus an original "adversarial routing" detector that flags likely-adversarial inputs. ~16.5K lines of PyTorch/Optuna research code; SLURM scripts were written for the university HPC cluster, with the large sweeps run on Colab and a local GPU. Paired with a FastAPI + React/Vite dashboard (~2.5K lines) for live inference, model configuration, and evaluation. Patch-route calibration remained an open item at submission.
ANT — Network Cell Analyzer course project · mobile → API → database → deployment
Mar – Apr 2026 · 25 commits, 92% mine Kotlin/Jetpack Compose Android app streams cellular telemetry to a FastAPI + PostgreSQL backend (JWT/OAuth2, per-IP rate limiting). Runs on PostgreSQL, with a 359-line pytest suite exercised against in-memory SQLite. Ships a CI pipeline producing signed release APKs and Docker images, and a Helm chart for k8s rollout. 4,049 LOC total.
ShopCloud cloud-native e-commerce backend · AWS architecture + EECE503Q capstone
Apr – May 2026 · 50 commits, 88% mine Six Express microservices with polyglot persistence mirroring AWS semantics (Postgres, DynamoDB with TTL, async S3+SES+SQS invoice pipeline), backed by 3,508 lines of Terraform standing up matching ECS/IAM/ECR/DynamoDB infrastructure with OIDC-based GitHub Actions deploy roles. I built the services and most of the Terraform; a teammate built the React frontend and its deploy pipeline. Built in a 5-day sprint.
hpccluster — open-source contributions Ansible automation · multi-author HPC cluster project ↑ mherkazandjian/hpccluster
35 merged / 339 commits · ~+4,900 / −360 lines Designed and built two Ansible roles from scratch — cobbler_pxe (full PXE/DHCP/DNS provisioning, a 228-line design doc, idempotent config patching, and a four-file test suite: one pytest orchestrator plus three Ansible smoke playbooks) and nginx — plus restored a vaultwarden role and authored a PXE-boot-testing automation skill. Thirty-five of my commits are merged into the owner's main branch.
ansible-playground & boxman contributions from-scratch IaC · feature delivery in a foreign codebase ↑ self + mherkazandjian/boxman
14/14 own commits (ansible-playground) Solo-built 11 Ansible roles / 11 playbooks provisioning a complete self-hosted GitLab stack (libvirt/KVM, Docker, Traefik, WireGuard, PXE). Separately, added OCI image support (pull + push) and PXE-boot via a new BareVM provider inside a mentor's Python tool, both merged upstream, with tests and documentation.
Open-source contributorhpccluster, boxman, RCC wiki — Ansible/Python infra projects
2025 – present Regular contributor to a research-computing colleague's multi-author infrastructure repos: designed roles and subsystems from written proposals through to tested, documented, merged code (see Selected Projects).
General FOSS experienceShokoServer and subsidiaries · Jellyfin plugin tinkering
Since mid-2023 Triaged bugs and gave feedback on ShokoServer and related projects; forked and adapted several Jellyfin plugins to personal use cases.
Technical Assistant — InternshipAUB Libraries, Beirut, Lebanon
Aug 2022 – Aug 2023 Archived university data from social media platforms. Researched archiving approaches for Instagram, Facebook and Twitter, then built a Python/Selenium + Java + Go scraping toolkit (packaged as standalone executables) that replaced manual scraping with an automated pipeline.
Assistant Tutor — Internship3Poli Robotics, Tripoli, Lebanon
Summer 2021 Tutored children in using LEGO robotics kits; helped translate technical concepts for a young audience and supported small group projects.
General AssistantJamal Hardware, Tripoli, Lebanon
Summer 2020 Invoice processing and validation, product checking and shipping.
Skills — ranked by evidence
~10 projects Docker / containerisation — present in nearly every infra & backend project ~8 projects Python — FYP research (~16.5K LOC), ANT backend, Ansible tooling, scrapers 6 projects Kubernetes — theWyseKube (production), LifeOS, ANT (Helm), EECE503Q 6 projects Databases — PostgreSQL, DynamoDB, Redis, SQLite, Firestore, Ceph RBD 5 projects Ansible — ~7,500 lines across hpccluster, ansible-playground, hpc-services 5 projects CI/CD — GitHub Actions across ANT, ShopCloud, theWyseKube, ansible-playground 5 projects Auth & secrets — JWT/OAuth2, SOPS+age, Authentik SSO, Vaultwarden 4 projects Terraform / IaC — ~7,000 lines HCL across ShopCloud, EECE503Q, terraform-challenge 4 projects Networking — DNS/DHCP/PXE (Cobbler), WireGuard VPN, Tailscale, Traefik 4 projects Cloud architecture (AWS) — ECS, ALB/ASG, DynamoDB, SQS, IAM/OIDC 3 projects Virtualisation — libvirt/KVM/QEMU across boxman, ansible-playground, hpccluster — FastAPI/Express APIs, React/Vite, Kotlin/Jetpack Compose, GitOps (FluxCD/Helmfile), C/C++, RISC-V & x86 assembly, Verilog
American University of Beirut
B.E. — Computer & Communications Engineering
2022 – 2026
Arabicnative Englishfluent Frenchintermediate
Self-hosted homelab operator since 2021 (dockerized → Proxmox LXC → Talos VMs on Proxmox); 9 substantive university technical projects spanning quantum computing, digital-systems design (Verilog), computer architecture (RISC-V/AVX), databases, RF simulation, and mobile-network protocol analysis — full write-ups at orski.sh.