Portfolio
Around Notes - Infrastructure and Compliance
Owned the end-to-end AWS infrastructure and CI/CD pipelines for Around Notes, delivering HIPAA and SOC 2 readiness over the last 6 months.
- HIPAA + SOC 2 readiness baseline with audit-grade logging and encryption controls.
- Repeatable multi-environment delivery using nested CloudFormation and GitHub Actions.
- Resilient request path from DNS to ECS with Multi-AZ data and queueing.
Architecture Overview
A high-level diagram showing the core production flow, telemetry paths, and compliance-focused services.
- Request path: Route 53 routes traffic through ALB to ECS services.
- Data layer: ECS services use Multi-AZ RDS, Redis caching, and SQS queues.
- Controls: IAM + KMS with CloudWatch/CloudTrail for monitoring and auditability.
SRE Focus
- Network: VPC with public/private subnets, NAT gateways, and flow logs.
- Compute: ECS services behind an ALB with autoscaling.
- Data: Multi-AZ RDS, Redis, and SQS for resilient workloads.
- Encryption: KMS-backed encryption for S3 and data stores.
- Identity: Least-privilege IAM with scoped access policies.
- Auditability: CloudTrail retention, GuardDuty, Inspector, and alarms.
- IaC: Nested CloudFormation stacks for repeatable environments.
- CI/CD: GitHub Actions for deploys and infra security checks.
- Ops: DNS automation and safe rotation procedures for services.
Results
The platform now has a compliance-ready baseline and a repeatable delivery path that reduces manual deployment work while improving visibility and incident readiness.
A secure, scalable infrastructure foundation aligned to HIPAA and SOC 2 readiness requirements.
Infrastructure codified in CloudFormation with CI/CD automation and centralized observability.
Project URL
Public marketing site and authenticated app entry point.
Lessons Learned
Building Around Notes from the ground up reinforced the value of modular infrastructure and compliance-first design. Aligning networking, compute, and security controls early made it easier to scale features and meet HIPAA and SOC 2 readiness targets.
Let's connect
Reach out for collaboration, roles, or advisory work.
