Featured Engineering Projects
Real enterprise-style multi-tier lab architectures built step-by-step during NTMS live cohorts.
Enterprise Hub & Spoke Network Architecture
Production-grade multi-tenant network topology with centralized firewall inspection
Design and build a central Hub VNet containing an Azure Firewall and VPN Gateway, peered to isolated Spoke VNets. Implement custom Route Tables (UDR) to route all inter-spoke and outbound internet traffic through central threat inspection.
Secure Auto-Scaling Web Application Platform
High-availability application tier protected by Application Gateway WAF
Deploy an end-to-end multi-tier web application protected by Azure Application Gateway with Web Application Firewall (WAF v2). Route traffic to auto-scaling Virtual Machine Scale Sets deployed in private subnets, backed by Key Vault secrets and Log Analytics monitoring.
Hybrid Cloud Infrastructure & AD Synchronization
Seamless on-premises datacenter extension into Azure cloud workloads
Simulate an enterprise on-premises network connected via Site-to-Site IPsec VPN to an Azure Hub VNet. Configure Entra Connect identity synchronization, hybrid Azure Storage Sync, and Azure Site Recovery VM replication.
Automated Azure IaC & Security Scanning Pipeline
Zero-touch multi-environment infrastructure delivery with Terraform & Azure DevOps
Create a modular Terraform repository with remote state storage in Azure Blob Storage. Construct an Azure DevOps CI/CD pipeline performing automated formatting, static code analysis (checkov/tfsec), terraform plan generation, and manual gate approval before terraform apply.
Cloud Threat Detection & Automated Incident Response
Enterprise SOC automation with Microsoft Sentinel SIEM and Logic Apps
Ingest security logs across Azure Firewall, Entra ID, and virtual machines into Microsoft Sentinel. Write custom Kusto Query Language (KQL) detection rules for suspicious logons and trigger automated remediation playbooks.
Built by NTMS Learners
Multi-Region Azure Hub & Spoke Network
Deployed a central Hub VNet with Azure Firewall IDPS routing traffic across peered Spoke subnets, with all database access isolated via Private Endpoints.
Automated Multi-Env Terraform IaC Pipeline
Created modular Terraform IaC templates validated by automated Checkov security scans and deployed through Azure DevOps pipeline approval gates.
Private AKS Cluster with ArgoCD GitOps
Provisioned a private Azure Kubernetes Service cluster configured with automated SSL certificate renewal via Cert-Manager and GitOps continuous delivery.