Project ledger / 2021—Now14 documented systems

Infrastructurein production.

Projects reconstructed from documented responsibilities and outcomes across private cloud, automation, enterprise systems, and networking.

Each entry connects the engineering work to its operating context, delivery scope, and verified result.

01

Private Cloud · In operation

Multi-Node OpenStack Private Cloud

2025 — Present

A production private-cloud foundation delivering multi-tenant compute, storage, identity, networking, recovery, and self-service operations.

Engineering contribution

  • Architected the multi-node control, compute, storage, and networking topology.
  • Deployed Nova, Neutron with OVN, Keystone, Cinder, Glance, Manila, Horizon, and Masakari.
  • Designed VLAN provider networks, DVR, OVN bridge mappings, and MikroTik edge routing.

Delivered outcome

  • Secure and scalable compute, storage, and networking services.
  • A fully functional multi-tenant cloud ecosystem.
  • OpenStack
  • OVN
  • Ceph
  • Masakari
  • MikroTik

View project ↗

02

Storage · In operation

Distributed Ceph Storage Platform

2025 — Present

Distributed storage for production private-cloud workloads across block, shared-file, and S3-compatible object access patterns.

Engineering contribution

  • Built and managed the distributed Ceph cluster.
  • Integrated RBD with OpenStack block storage and CephFS with shared filesystems.
  • Exposed RGW services for S3-compatible object storage.

Delivered outcome

  • Reliable block, file, and object storage for production workloads.
  • A shared storage layer integrated with the private cloud.
  • Ceph
  • RBD
  • CephFS
  • RGW
  • Cinder
  • Manila

View project ↗

03

IaC & CI/CD · In operation

Cloud Delivery Automation

2025 — Present

A repeatable infrastructure delivery path covering provisioning, configuration, build, test, deployment, and lifecycle management.

Engineering contribution

  • Implemented Infrastructure as Code with Terraform and Ansible.
  • Designed and maintained GitLab CI and Jenkins pipelines.
  • Automated provisioning and configuration workflows for cloud resources.

Delivered outcome

  • Faster and more reliable delivery processes.
  • Repeatable provisioning and lifecycle management.
  • Terraform
  • Ansible
  • GitLab CI
  • Jenkins
  • OpenStack

View project ↗

04

Containers · In operation

Kubernetes on Private Cloud

2025 — Present

Containerized workloads orchestrated on Kubernetes and integrated with OpenStack infrastructure for resilient application delivery.

Engineering contribution

  • Deployed and managed containerized workloads with Kubernetes.
  • Integrated orchestration workflows with the private-cloud platform.
  • Aligned workload operations with cloud networking and storage services.

Delivered outcome

  • Scalable application orchestration.
  • Resilient container workloads on private infrastructure.
  • Kubernetes
  • Docker
  • OpenStack

View project ↗

05

Reliability · In operation

Cloud High Availability & Recovery

2025 — Present

Service and workload resilience spanning load balancing, virtual IP failover, VM recovery, backups, and shared storage.

Engineering contribution

  • Engineered HAProxy and Keepalived patterns for critical services.
  • Automated VM failover and recovery with Masakari.
  • Integrated Cinder Backup with S3 and Manila shared filesystems.

Delivered outcome

  • High availability for critical services.
  • Automated failover, backup, and disaster-recovery paths.
  • HAProxy
  • Keepalived
  • Masakari
  • Cinder Backup
  • S3
  • Manila

View project ↗

06

Observability · In operation

Infrastructure Observability Program

2024 — Present

Unified health, capacity, and alerting signals across enterprise servers, OpenStack services, and Ceph storage.

Engineering contribution

  • Implemented Prometheus and Grafana monitoring across more than 50 servers.
  • Integrated Ceph and OpenStack exporters with proactive alerting.
  • Used monitoring trends for incident response and capacity planning.

Delivered outcome

  • Reduced incident detection time by 40%.
  • Improved infrastructure uptime from 95% to 99.5%.
  • Prometheus
  • Grafana
  • OpenStack Exporter
  • Ceph Exporter
  • Alerting

View project ↗

07

Systems · Delivered

Enterprise Systems Hardening

2022 — 2025

Windows and Linux fleet operations combining automated patching, identity services, core infrastructure, and production support.

Engineering contribution

  • Managed more than 30 Windows and Linux servers supporting over 500 users.
  • Automated patching and maintained DNS, DHCP, NTP, FTP, and email services.
  • Troubleshot server and end-user issues across the environment.

Delivered outcome

  • Achieved 99.8% infrastructure uptime.
  • Reduced security vulnerabilities by 60% through automated patching.
  • Windows Server
  • Linux
  • DNS
  • DHCP
  • NTP

View project ↗

08

Enterprise Platform · Delivered

Identity & Virtualization Modernization

2022 — 2025

Coordinated upgrades across multi-domain Active Directory, VMware virtualization, and HPE server management.

Engineering contribution

  • Upgraded Domain Controllers and Read-Only Domain Controllers across multiple domains.
  • Executed VMware ESXi host and vCenter upgrades.
  • Updated HPE iLO firmware for stronger remote management and security.

Delivered outcome

  • Improved compatibility, stability, and security across identity services.
  • Modernized virtualization and hardware-management platforms with minimized downtime.
  • Active Directory
  • RODC
  • VMware ESXi
  • vCenter
  • HPE iLO

View project ↗

09

Networking · Delivered

Enterprise Network Modernization

2021 — 2022

A secure switching and segmentation rollout backed by monitoring, documentation, and large-scale user support.

Engineering contribution

  • Configured and deployed more than 25 Cisco switches with spanning tree.
  • Implemented VLAN segmentation, ACLs, firewall rules, and port security.
  • Documented topology, addressing, core services, and security rules.

Delivered outcome

  • Reduced network latency by 30%.
  • Supported reliable connectivity and troubleshooting for more than 1,000 users.
  • Cisco
  • STP
  • VLAN
  • ACL
  • Firewall
  • Port Security

View project ↗

10

Communications · Delivered

PBX & Call-Center Platform

2022 — 2025

Voice infrastructure covering PBX architecture, call routing, operational reporting, and call-center workflows.

Engineering contribution

  • Deployed and configured the PBX architecture and call routing.
  • Built a call center with comprehensive reporting.
  • Operated voice services alongside network and systems infrastructure.

Delivered outcome

  • Reduced average wait time by 3 seconds.
  • Added reporting visibility for call-center operations.
  • Asterisk
  • PBX
  • VoIP
  • Call Routing
  • Reporting

View project ↗

11

Platform Migration · In operation

Internal Services Cloud Migration

2025 — Present

Internal DNS, monitoring, backup, and communication services migrated into the private-cloud operating model.

Engineering contribution

  • Migrated PowerDNS and PowerDNS-Admin into the cloud platform.
  • Integrated monitoring, backup, and communication systems.
  • Aligned service operation with cloud availability and recovery patterns.

Delivered outcome

  • Consolidated internal services on the private-cloud platform.
  • Integrated service operations with cloud monitoring and recovery.
  • PowerDNS
  • PowerDNS-Admin
  • OpenStack
  • Monitoring
  • Backup

View project ↗

12

Cloud Platform · In operation

Enterprise Cloud Streaming Platform

2025 — Present

An enterprise-grade cloud streaming platform built for secure and scalable delivery of data and media services.

Engineering contribution

  • Built and deployed the streaming platform on private-cloud infrastructure.
  • Integrated the platform with the surrounding cloud operating environment.
  • Designed the service around secure and scalable delivery requirements.

Delivered outcome

  • Established a cloud-hosted delivery platform for data and media services.
  • Extended the private cloud with a production streaming workload.
  • Private Cloud
  • Cloud Streaming
  • OpenStack

View project ↗

13

Core Services · Delivered

Core Network Services Modernization

2022 — 2025

Foundational network services upgraded and maintained on current stable releases for stronger reliability and security compliance.

Engineering contribution

  • Upgraded and maintained NTP, DHCP, DNS, and FTP services.
  • Validated service operation after platform changes.
  • Supported troubleshooting across the dependent server and network environment.

Delivered outcome

  • Improved core-service reliability.
  • Strengthened security compliance through supported stable versions.
  • NTP
  • DHCP
  • DNS
  • FTP
  • Linux
  • Windows Server

View project ↗

14

Cloud Networking · In operation

OpenStack Cloud Network Architecture

2025 — Present

A private-cloud network fabric connecting isolated tenant workloads to provider networks and external routes.

Engineering contribution

  • Designed Neutron and OVN network topology for the private cloud.
  • Configured VLAN provider networks, DVR, and OVN bridge mappings.
  • Integrated MikroTik routing for tenant and provider connectivity.

Delivered outcome

  • Established secure and scalable tenant connectivity.
  • Created predictable paths between tenant, provider, and edge networks.
  • OpenStack Neutron
  • OVN
  • VLAN
  • DVR
  • MikroTik

View project ↗

Cloud Infrastructure Projects | Ali Karamali