open to devops roles

cv
santosh@portfolio: ~
whoami

Hi, I'm Santosh Kafle, DevOps & Backend Engineer

Bridging the gap between reliable infrastructure and clean architecture. Specializing in Docker, CI/CD automation, Linux, Prometheus and Grafana monitoring, Laravel, and NestJS.

Santosh Kafle, DevOps Engineer & Backend Developer, based in Kathmandu, Nepal

Projects

Container Orchestration

Multi-Service Deployment (opens in a new tab)

Five containers orchestrated with Docker Compose: a React frontend, an Express API, MongoDB, Redis, and an Nginx reverse proxy. Only the proxy publishes a port, and healthchecks gate startup on readiness rather than just ordering it.

One exposed port, with 13 of 13 black-box checks passing against the running stack
  • Docker
  • Docker Compose
  • Nginx
  • Express
  • MongoDB
  • Redis

Monitoring & Observability

Prometheus & Grafana Monitoring (opens in a new tab)

Node Exporter, Prometheus, and Grafana running in Docker, tracking CPU, memory, disk, network, and temperature on a Linux host. Grafana is provisioned from version-controlled files, so one compose command brings up a working dashboard.

Config as code, with pinned images, bounded 30-day retention, and loopback-only binds
  • Prometheus
  • Grafana
  • Node Exporter
  • PromQL
  • Docker Compose
  • Linux

E-commerce Platform

zolpastore.com (opens in a new tab)

E-commerce platform with Redis caching, Meilisearch product search, and OAuth authentication. An event-driven architecture keeps search and filtering fast across a large catalog.

Sub-300ms responses for thousands of daily users across a large catalog
  • Laravel
  • Redis
  • Meilisearch
  • PostgreSQL
  • Docker
  • OAuth

E-commerce Platform

ultima.com.np (opens in a new tab)

E-commerce site for Ultima Nepal with optimized backend APIs, GETPAY payment integration, and infrastructure ready for high traffic.

Large existing user base, kept serving through heavy sale traffic
  • PHP
  • Laravel
  • MySQL
  • Docker
  • GETPAY

E-commerce Platform

singingbowlvillagenepal.com (opens in a new tab)

Built on PHP 8.4 and Laravel 12, with a migration from MySQL to PostgreSQL that improved performance and reliability.

70% faster queries after the PostgreSQL migration and index tuning
  • PHP 8.4
  • Laravel 12
  • PostgreSQL
  • GETPAY
  • MySQL Migration

E-commerce Platform

iteam.com.np (opens in a new tab)

Setup and initial-phase backend work: a Docker-based development environment, PostgreSQL provisioning, and early architecture decisions in Laravel.

Set up secure by default, with the project's conventions fixed from the start
  • Laravel
  • PostgreSQL
  • Docker
  • Deployment

Skills

DevOps & Infrastructure

  • Docker
  • Docker Compose
  • Linux
  • Nginx
  • CI/CD
  • GitHub Actions
  • Git
  • Server Administration
  • AWS
  • VPS Deployment
  • Cloudflare / DNS
  • Prometheus
  • Grafana
  • Node Exporter
  • PromQL

Languages

  • PHP
  • JavaScript
  • TypeScript
  • Bash Scripting

Frameworks

  • Laravel
  • NestJS
  • Express.js

Databases & Data

  • PostgreSQL
  • MySQL
  • MongoDB
  • Redis
  • Meilisearch
  • Database Optimization

APIs & Architecture

  • RESTful APIs
  • Microservices
  • Event-driven Architecture
  • Clean Architecture
  • Design Patterns

Security & Reliability

  • OAuth
  • Server Security
  • OWASP Top 10
  • Incident Response

Tools

  • VS Code
  • PhpStorm
  • Bruno
  • Postman
  • DBeaver
  • JetBrains DataGrip
  • Composer
  • Artisan

My Engineering Approach

I work on both sides of the deployment line: the application code and the infrastructure it runs on. On the operations side that means reproducible Docker environments, CI/CD pipelines, Linux server administration, Nginx, and Bash scripting, with configuration kept in version control so an environment can be rebuilt rather than repaired. I treat observability as part of shipping rather than an afterthought, provisioning Prometheus and Grafana entirely from files so what a system is doing is measured instead of assumed. That carries through to when things go wrong. I identified and removed a cryptocurrency miner from a compromised React server-side rendering (SSR) host, rotated every credential, and hardened the server. On the backend I build with Laravel, NestJS, and Express.js, with a strong emphasis on clean architecture, design patterns, and best practices for future scalability.

Key Principles

  • Architect reproducible environments with Docker, automate deployments via CI/CD, and manage Linux infrastructure
  • Practice infrastructure-as-code thinking: version-controlled configs, automated provisioning, and environment parity across dev/staging/production
  • Instrument what I run: metrics, dashboards, and datasources provisioned as code so system behaviour is measured rather than assumed
  • Hands-on server security: incident response, malware removal, credential rotation, and environment hardening
  • Follow best practices, SOLID principles, and design patterns for scalable architecture
  • Build RESTful APIs with robust documentation and versioning
  • Implement comprehensive error handling and logging
  • Prioritize security, authentication, and data validation
  • Optimize database queries and caching strategies across PostgreSQL, MySQL, and MongoDB

Experience

Backend Developer

Quark InfoTech

April 2025 - February 2026

Lalitpur District, Nepal

Backend Developer Intern

Quark InfoTech

January 2025 - March 2025 (3 months)

Lalitpur District, Nepal

Education

Reliance College

Bachelor's of Computer Applications (BCA)

2020 - 2025

Reliance International Academy (+2 Wing)

High School Diploma, Computer Science

2018 - 2019

Contact

Feel free to reach out for project inquiries or collaboration opportunities. I'm based in Kathmandu, Nepal and work with teams remotely.