Skip to content
View berkeleyo's full-sized avatar

Block or report berkeleyo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
berkeleyo/README.md

Hi, I'm Berkeley 👋

Profile Views Experience Lines of Code


I work on the infrastructure and automation behind complex production systems. Much of that work sits where networking, cloud infrastructure, security and software meet — across distributed, multi-vendor environments where changes need to be controlled, observable and repeatable.

I'm interested in building practical tooling that makes these environments easier to operate: infrastructure validation, deployment pipelines, API integrations and increasingly AI-assisted workflows.

This GitHub is where I develop and document independent implementations of those ideas.

Selected work

A few projects that reflect the problems I like working on. These are public reference implementations, not copies of employer or customer infrastructure.

Project What it explores
Production Cloud Network Platform Azure hub-and-spoke networking, segmented workloads, WAF ingress and offline Terraform validation.
AKS GitOps Kubernetes infrastructure, GitOps-driven configuration, environment promotion and operational runbooks.
Access Governance Request Platform Request and approval workflows, time-bound access and auditable identity operations.
Azure Governance Baseline Policy-as-code, naming and tagging standards, drift reporting and controlled remediation patterns.

These are the current selections; I'll revisit them as I improve and expand the underlying projects.

Engineering interests

Infrastructure & architecture — Multi-region cloud and hybrid environments, network design, secure connectivity, edge services and resilient systems.

Automation & delivery — Infrastructure as code, CI/CD, reusable tooling, API integrations, validation and change management.

Security & operations — Identity and privileged access, policy enforcement, observability, incident investigation and operational reliability.

What I'm exploring — AI-assisted infrastructure operations, developer tooling and ways to make complex systems easier to understand and maintain.

Elsewhere

I'm also building Berrystock Solutions, focused on infrastructure engineering, automation and practical modernisation.

All repositories · Berrystock Solutions

Pinned Loading

  1. azure-aks-gitops azure-aks-gitops Public

    Azure Kubernetes Service GitOps reference deployment and operational guidance.

    PowerShell

  2. enterprise-crm-erp-platform-deployment enterprise-crm-erp-platform-deployment Public

    Enterprise CRM/ERP platform deployment with hardened Linux baseline, NGINX reverse proxy, automated TLS (ACME/Let’s Encrypt), SMTP relay integration, and full operational runbooks. Fully redacted.

    Shell

  3. intune-win32-cloud-printscanapp intune-win32-cloud-printscanapp Public

    Intune Win32 package for Kyocera Cloud Print and Scan.

    PowerShell

  4. logicapp-holiday-flow logicapp-holiday-flow Public

    Logic App and Bicep to auto post holidays and OOO to Teams.

    Bicep

  5. production-cloud-network-platform production-cloud-network-platform Public

    Production-oriented Azure cloud networking platform built with Terraform, focusing on secure routing, ingress, network policy, validation and deployment safety.

    HCL

  6. unifi-controller-cloud-migration unifi-controller-cloud-migration Public

    Production-grade documentation of migrating a UniFi Network Controller from a legacy VPS to Azure with DNS cutover, Ubuntu baseline, version pinning, Entra ID Application Proxy (MFA/CA), and SSH ho…

    PowerShell