Building my way into the cloud.
Hands-on projects. Documented decisions. Learning through deployment and recovery.
I'm Jervil Angelo De Leon, a Philippines-based HRIS Technical Support professional building practical experience in cloud infrastructure, serverless applications, security, and automation. I turn real support scenarios and community needs into projects I can deploy, test, and improve.
I'm working toward a Cloud / Infrastructure Engineering role, with a focus on AWS, Terraform, CI/CD, Linux, and reliable operations.
- 🔭 Currently shipping: Opsentra, an AWS incident response platform with audited, approval-gated recovery
- 🌱 Learning: CloudOps, incident management, observability, and least-privilege IAM
- 🛠️ Also building: Silong, a Filipino literary refuge for poetry and stories (Next.js + Supabase)
Monitor. Detect. Respond. Recover. A web app that lets an operations team watch AWS workloads, detect an outage, investigate it, and run an approved, audited recovery, with no terminal and no console hopping. An incident closes only when independent health checks prove the service works again, not when a command reports "Success".
- Event-driven detection: a probe Lambda feeds a CloudWatch alarm → EventBridge → deduplicated incidents with one SNS alert each, plus a reconciler for missed events.
- Guarded remediation: operators request an allowlisted, SHA-256-pinned Systems Manager runbook; an admin approves; it runs exactly once. Roles come from Cognito groups, and every action lands in an append-only audit trail.
- Least privilege, tested: Terraform tests pin every IAM policy, IAM Access Analyzer reports no findings, and a live false-success test proves that a "successful" fix which leaves the service down gets escalated.
- Two modes, never mixed: a public Demo Mode with labelled synthetic data and zero AWS calls, and an authenticated Live AWS Mode that fails closed.
AWS: Lambda · API Gateway · DynamoDB · EventBridge · CloudWatch · SNS · Systems Manager · Cognito · EC2 · S3 · IAM
Tools: Terraform · Python · React · TypeScript · pytest · Vitest · Playwright · GitHub Actions
Try the live demo → · Source code and architecture
A disaster recovery proof of concept for Philippine small businesses. It verifies database backups, stores encrypted copies off-site, and uses Terraform to provision a temporary AWS recovery environment after operator approval.
- Infrastructure as code: Terraform manages standby resources and temporary recovery servers in AWS Singapore.
- CI/CD: GitHub Actions checks application code, backup integrity, Terraform, and the dashboard, and deploys the public demo.
- Measured recovery: a real AWS drill recovered the sample application in 5 min 29 sec, with 26 sec of potential data loss. These are single-run results on synthetic data; off-site uploads currently require an operator session.
AWS: EC2 · S3 · IAM · IAM Identity Center · Systems Manager · CloudWatch · AWS Budgets
Tools: Terraform · Python · FastAPI · PostgreSQL · Docker · React · GitHub Actions
Explore the demo → · Source code · Recovery drill evidence
A live platform that helps Filipino readers discover and list Christian theological books. Sellers submit listings and photos; moderators review them before publication; readers contact sellers directly.
- Serverless backend: Amplify Gen 2 provisions authentication, a GraphQL API, storage, and backend functions.
- Access control: Cognito roles, scoped IAM permissions, and Lambda-controlled moderation protect listings and administrative actions.
- Delivery: GitHub-connected Amplify deployments serve the Next.js application over HTTPS.
AWS: Amplify · Cognito · AppSync · DynamoDB · S3 · Lambda · CloudFront · ACM · IAM · CDK / CloudFormation
Tools: Next.js · TypeScript · Tailwind CSS
Visit Teolohiya.site → · Source code and architecture
Worth it ba sa Pilipinas? Free, open-source calculators that show the arithmetic behind everyday money decisions, using the same figures the PSA, DOE, Pag-IBIG, BIR, and banks publish.
- Eight focused pages: take-home pay (Sweldo), 13th month pay under PD 851, Pag-IBIG MP2, digital bank savings, side-by-side comparison, inflation, and weekly fuel prices.
- Sourced, dated data: every figure shows its source, reference period, and retrieval date. Money is computed with decimal.js and rounded only where a real institution would round.
- Automated data pipeline: a scheduled GitHub Actions workflow refreshes and validates economic data, commits only real changes, and triggers a fresh deploy.
Tools: React 19 · TypeScript · Vite · Tailwind CSS v4 · Vitest · Playwright · GitHub Actions · GitHub Pages
Explore PinansyalPH → · Source code and methodology
| Area | Services | Where I applied them |
|---|---|---|
| Compute and networking | EC2, VPC, Systems Manager | Recovery infrastructure, Opsentra's lab server and approved runbooks, and a hardened Linux/Nginx web server |
| Serverless APIs | Lambda, API Gateway, AppSync | Opsentra's control plane, the HRIS ticketing API, and Teolohiya's listing and moderation workflows |
| Event-driven automation | EventBridge, SNS | Alarm-to-incident routing in Opsentra and critical-ticket alerts |
| Data and storage | S3, DynamoDB | Verified off-site backups, Terraform state, incidents and audit logs, book photos, listings, and support tickets |
| Identity and access | IAM, IAM Identity Center, Cognito, IAM Access Analyzer | Scoped permissions, temporary operator access, role-based approvals, and policy verification |
| Hosting and delivery | Amplify, CloudFront, ACM | Teolohiya hosting, content delivery, and managed HTTPS |
| Monitoring and cost | CloudWatch, AWS Budgets | Health probes, alarms, operations dashboards, recovery logs, and budget notifications |
| Infrastructure as code | Terraform, CDK / CloudFormation | Opsentra and BayanihanDR infrastructure, and Amplify Gen 2 backend resources |
Amplify manages several of Teolohiya's underlying AWS resources. The service list reflects their roles in the deployed application.
| Project | What I built |
|---|---|
| Schedrift | A local-first tool that turns Microsoft Project (.mpp, .xml, .mpx) files into presentation-ready Gantt charts with critical-path analysis and "what if this task slips?" delay simulation. |
| ECCM Liturgy Planning · live | A Sunday order-of-worship planner that reads songs live from the church's song list, warns about recently sung songs, applies special-Sunday rules, and keeps versioned plans. |
| AWS Serverless Ticketing API | An HRIS support API with ticket tracking, critical-ticket notifications, and monitoring using Lambda, API Gateway, DynamoDB, SNS, and CloudWatch. |
| Secure EC2 Web Server | A Linux/Nginx server in a custom VPC with security groups, IAM, and EBS snapshots. |
| HRIS Template Tracker Automation | Completion tracking across business units using Power Automate, Excel, and Power BI. |
| ECCM Church Website · live | A responsive nonprofit website with a custom domain, visitor resources, and SEO essentials. |
2x AWS Certified
2x Oracle Cloud Infrastructure Certified
Additional training includes Cisco networking and cybersecurity, Google IT Support and System Administration, and IT Specialist: Databases.
Explore the projects, architecture decisions, and lessons behind the code.
