Skip to content
View AndreaProzzo21's full-sized avatar
๐ŸŽฏ
Focusing
๐ŸŽฏ
Focusing

Block or report AndreaProzzo21

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please donโ€™t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this userโ€™s behavior. Learn more about reporting abuse.

Report abuse
AndreaProzzo21/README.md

๐Ÿ‘‹ Hi, I'm Andrea Prozzo | Cloud-Native & Automation Engineer

LinkedIn Email

๐ŸŽฏ Overview

I am a Management Engineering graduate currently specializing in Digital Automation Engineering. My passion lies in building the "glue" between the physical world and the cloud. I design and develop systems that securely gather data from Edge and IoT devices, and manage it reliably within scalable, containerized cloud environments. My core focus is on building resilient infrastructures, full-stack observability, and process automation.


โ˜ธ๏ธ The Kubernetes & Cloud-Native Shift

I am currently evolving my stack toward the Cloud-Native ecosystem, focusing on:

  • Orchestration & Autoscaling: Managing K8s resources (Deployments, StatefulSets, Services) and actively exploring Event-Driven Autoscaling with KEDA.
  • Observability: Building full-stack telemetry and centralizing logs using Prometheus, Loki, and Grafana (PLG stack).
  • IaC & Configuration Management: Automating infrastructure and application deployments using a pragmatic mix of Terraform and Ansible.
  • Security: Implementing RBAC, Secret management, and secure API Gateways with JWT & HttpOnly Cookies.

๐Ÿ› ๏ธ Tech Stack

Domain Tools & Technologies
Cloud & Orchestration Kubernetes Docker AWS Terraform
Backend & APIs Python FastAPI Flask
IoT & Edge MQTT Raspberry Pi ESP32
Data & Monitoring InfluxDB PostgreSQL Grafana
Automation n8n GitHub Actions

๐Ÿ“Œ Featured Projects

A centralized Command & Control platform for monitoring telemetry, hardware health, and containerized workloads across distributed edge nodes in industrial or agricultural settings.

  • Full contained Go Agent: Developed a cross-compiled, lightweight telemetry agent in Go leveraging gopsutil. It natively monitors host OS metrics (CPU, Thermal sensors, Swap, Disk I/O) and introspects container runtimes (Docker/K8s) in both bare-metal and cloud VMs.
  • Async FastAPI Backend: Built a scalable backend with FastAPI and SQLAlchemy using stateless JWT authentication. Engineered a bidirectional C&C pipeline that enables seamless, remote JWT rotation (over-the-air) before token expiration, ensuring continuous and secure fleet connectivity with zero manual intervention at the edge.
  • Smart Alert Engine: Engineered an intelligent background notification system for Discord/Slack. It features HTTP 429 Rate-Limit handling, custom payload evaluation, and stateful anti-spam cooldowns tracked securely via PostgreSQL JSON columns.

โ˜ธ๏ธ K8s Cloud Gateway

A secure, self-hosted control plane for managing multi-cluster Kubernetes fleets with zero-trust RBAC and integrated Helm operations.

  • Zero-Trust & Security: Engineered a robust proxy architecture where Kubernetes credentials (ca.crt, Service Account tokens) never reach the client. Sensitive data is encrypted at rest in a SQLite database using AES-128 (Fernet), with sessions secured by HttpOnly JWTs.
  • Advanced Helm Engine: Built a universal package management system capable of processing native .tgz archives, custom .zip uploads, and remote repositories. Features real-time linting, subchart awareness, and one-click rollbacks via FastAPI.
  • Fleet Observation & Audit: Designed a centralized Admin Console to monitor cluster health, node/pod telemetry, and compliance rules across the entire fleet in real-time.
  • Dynamic RBAC Scoping: Implemented profile-based delegation that seamlessly maps team roles to specific K8s permissions. The UI intelligently adapts to the user's authorized scope, ensuring safe resource management without sharing kubeconfig files.
  • Enterprise Onboarding: Developed an interactive, production-ready curl-to-bash bootstrap script for one-minute deployment via Docker Compose, featuring automated cryptographic key generation and smart defaults.

An E2E MLOps pipeline for industrial assets, transitioning from physical simulation to a fully containerized Digital Twin environment.

  • Digital Twin Engine: Developed high-fidelity Python simulators modeling ISO 10816 vibration standards and non-linear degradation curves with a built-in Chaos Engine for stress testing.
  • Distributed Microservices: Engineered a decoupled architecture using MQTT (Mosquitto), FastAPI, and InfluxDB 2.x for real-time telemetry processing (100+ concurrent assets).
  • MLOps Workflow: Designed an offline-to-online pipeline where Random Forest models are trained on historical InfluxDB data and hot-loaded into AWS-hosted inference services for real-time diagnostics.
  • IaC & DevOps: Automated the entire AWS (EC2) ecosystem provisioning using Terraform.

โ˜๏ธ AWS IoT Industrial Hub

A multi-site industrial data platform leveraging AWS IoT Core for secure, event-driven telemetry ingestion.

  • Event-Driven Processing: Implemented an AWS Lambda Multiplexer to intercept MQTT streams, evaluate dynamic thresholds, and trigger automated SNS alerts.
  • Industrial Security: Enforced X.509 certificate authentication and mTLS encryption for every simulated device, ensuring strict topic isolation and identity management via Terraform.
  • Full-Stack Monitoring: Orchestrated a Dockerized analytics stack on EC2 featuring InfluxDB for time-series persistence and Grafana for real-time factory dashboards.

A full-stack ecosystem bridging ESP32 edge devices with a modular Python monolith and AI-powered interfaces.

  • Edge Layer: Wrote robust C++ firmware for ESP32 with JSON-based protocols for bidirectional telemetry and remote actuator control (Servos/Fans).
  • Conversational UI: Developed a Telegram Bot integrated with n8n and private Webhooks, allowing remote system orchestration and LLM-powered status queries.
  • Modular Monolith: Built a scalable backend with FastAPI and Pydantic, featuring role-based Bearer Token security and InfluxDB integration.

๐Ÿค– AI & Automation Showreel (n8n & LLMs)

Beyond structured projects, I maintain a continuous laboratory of autonomous workflows using n8n:

  • AI Orchestration: Integrating LLMs (OpenAI/Anthropic) with STT (Speech-to-Text) and TTS (Text-to-Speech) for voice-controlled automation.
  • API Mashups: Custom integrations between Telegram, Google Services, and third-party SaaS to automate data processing and alerting.
  • Smart Agents: Building event-driven agents that monitor web sources and generate AI-summarized insights directly to private channels.

๐ŸŒฑ Currently Learning & Improving

  • Advanced K8s Networking: Deep diving into Service Meshes and advanced Ingress controllers.
  • GitOps: Implementing CI/CD pipelines for automated infrastructure deployments.
  • SRE Principles: Focus on scalability, reliability, and monitoring of distributed systems.

Pinned Loading

  1. k8s-cloud-gateway k8s-cloud-gateway Public

    A secure multi-tenant Kubernetes & Helm gateway. Abstracting cluster credentials through a stateless JWT proxy with server-side RBAC injection.

    Python

  2. my-k8s-journey my-k8s-journey Public

    Questa repository nasce per documentare il mio percorso di apprendimento di Kubernetes (K8s), partendo dai concetti fondamentali fino alla progettazione di architetture complesse per il dominio deiโ€ฆ

    Python

  3. AWS-IoTCore-Industrial-Hub AWS-IoTCore-Industrial-Hub Public

    Industrial IoT platform using AWS IoT Core, Lambda & Terraform. Features multi-site simulation with Docker, X.509 security, real-time monitoring via InfluxDB/Grafana and automated alerting with SNS.

    Python

  4. Edge-Cloud-PdM-Pipeline Edge-Cloud-PdM-Pipeline Public

    A cloud-native Predictive Maintenance (PdM) ecosystem featuring a Python-based Digital Twin, an AWS MLOps pipeline, and real-time Random Forest inference. Engineered with a decoupled microservices โ€ฆ

    Python

  5. ai-meeting-api ai-meeting-api Public

    AI Meeting Summarizer | Trasforma automaticamente trascrizioni caotiche (Teams/Meet ecc) in report esecutivi PDF strutturati. Architettura asincrona basata su FastAPI, n8n e AI Agents. Include un'iโ€ฆ

    HTML

  6. End-to-End-IoT-Platform End-to-End-IoT-Platform Public

    Forked from 362990/IoT_Project

    A modular IoT orchestration platform featuring an ESP32-based hardware layer and a Python FastAPI backend. Implements real-time telemetry ingestion via MQTT, InfluxDB persistence, and an automated โ€ฆ

    Python