🌐 shayan.one — my personal website (source: Astro + Three.js, containerized, CI to ghcr.io, self-hosted on my own Kubernetes cluster)
I design, build, and operate secure multi-cloud and on-premises platforms from the ground up — platforms that let teams securely develop, train, and deploy AI models. My core strengths: scalable architecture, infrastructure automation, network design, platform engineering, and security-by-design, backed by an academic background in IT security.
Architecture of a secure, C5-compliant multi-cloud platform with multiple Kubernetes clusters for AI projects, model development, and model hosting. Fully Infrastructure-as-Code (Terraform) with GitOps (GitLab CI/CD, ArgoCD). Encrypted segmented networks, zero-trust security, Azure AD/RBAC, central secrets management, compliance-grade logging and monitoring.
Multi-Cloud Kubernetes Terraform GitOps ArgoCD Zero Trust C5 Compliance AI/ML Infrastructure
Secure, scalable cloud-native architectures for public and private clients (incl. BA and Infineon). Built a GitOps framework for 17+ teams, a highly available GitLab enterprise environment on OpenShift, and a secure high-availability point-of-sale system. Kubernetes, Istio, and observability integration.
OpenShift GitLab GitOps Istio DevSecOps High Availability
Led projects applying 3D camera technology for object recognition and tracking in large-scale logistics, and predictive analytics from sound/vibration sensors. Worked on the IATA ONE Record NE:ONE program optimizing air-freight data flows; deployed ML models predicting airport demand.
Computer Vision Predictive Analytics Kubeflow MLflow PyTorch Project Management
Founded and ran a tech startup end-to-end: full-stack development, cloud architecture, AI, infrastructure, product, and business development.
Full-Stack Cloud Architecture AI Product Entrepreneurship
Built and maintained frontend and backend applications and internal company software. Owned database processing — structured data capture, data modeling, and performance optimization — plus server administration: patch management, firewall configuration, user and access management, backups, and IT security.
JavaScript/TypeScript Full-Stack SQL Data Modeling Server Administration IT Security
- M.Sc. IT Security — Technical University of Darmstadt (2021–2025)
- B.Sc. Computer Engineering — Technical University of Darmstadt (2017–2021)
Publications
- NetNN: Neural Intrusion Detection System in Programmable Networks — IEEE ISCC 2024 · 🏆 2nd Best Paper Award
- Guaranteeing democracy: unlinkability and anonymity in e-voting (2024) — blockchain + homomorphic encryption + zk-SNARKs
- Smart Contract Data Feed with Secure Multi-Party Computation (2020)
Awards 🏆 2nd Best Paper — IEEE ISCC 2024 · 🥇 ONE Record Hackathon 2022 · 🥇 ONE Record Hackathon 2021 · 🥈 Continental Hackathon 2019
Certifications 📜 CKA: Certified Kubernetes Administrator (2025–2027) · 📜 LFS253: Containers Fundamentals (2024)
| Project | What it is |
|---|---|
| LogicSpec | Open-source, AI-native Application Definition Language — define the logic, generate the software |
| NetNN | DNN-based intrusion detection running in the data plane of programmable switches (P4) — 99% accuracy at line rate, IEEE ISCC 2024 |
| ONE Record | IATA ONE Record dashboard + player — hackathon-winning air-cargo data exchange tooling |
| BitVote | Decentralized e-voting full node in Go — blockchain, homomorphic encryption, zk-SNARKs |
| postgres-backup-s3-minio | PostgreSQL Docker companion for periodic backups to S3/MinIO |
Languages: Python · Java · JS/TS · C/C++ · Go · SQL/NoSQL · Bash · P4 Cloud & Platforms: Azure · AWS · GCP · Kubernetes · OpenShift · AKS DevOps: Terraform · Ansible · Helm · GitOps · ArgoCD · GitLab CI/CD · Prometheus · OpenTelemetry · ELK Security: Zero Trust · RBAC/ABAC · Secrets Management · Trivy · Snyk · Pen Testing · C5 Compliance AI/ML: PyTorch · TensorFlow · LLM/RAG · Kubeflow · MLflow
📍 Germany · 🌐 shayan.one · 📧 shayandavarifard@yahoo.com · Twitter · Telegram
"Build systems that are secure by design, automated by default, and scalable by architecture."