VoIP / Telecom Systems Engineer — architecting, securing, and scaling cloud-based telecom platforms.
I work across the full voice stack: from raw SIP/RTP packets to multi-tenant Cloud PBX orchestration. My focus is building telecom systems that are secure, observable, and built to survive carrier-grade traffic.
SIP Signaling → SBC / NAT Traversal → TLS/SRTP → FreeSWITCH / Asterisk Core → CDR / Billing
↑
PCAP / Wireshark / sngrep / Homer (HEP) — full call-flow visibility
- SIP & media engineering — SIP signaling, RTP media flow design, TLS/SRTP encryption, NAT traversal, SBC logic, SIP trunking, multi-tenant Cloud PBX architecture
- Platform engineering — building and tuning FreeSWITCH and Asterisk deployments for enterprise and carrier-grade call volume, REST API integration, CDR pipelines into relational databases
- Diagnostics — PCAP analysis, Wireshark/tshark, sngrep, Homer/HEP, SIP ladder diagrams, end-to-end failure investigation across distributed, high-availability voice infrastructure
- Automation & development — C programming, performance tuning, telecom automation tooling, Docker-based service deployment, Linux systems administration
- DevOps & IaC — Terraform modules for AWS (VPC/ECS Fargate/RDS), GitHub Actions CI/CD with OIDC-federated deploys, Kubernetes/Helm with autoscaling and PodDisruptionBudgets
| Project | What it shows |
|---|---|
| 🌍 terraform-aws-infra-modules | Reusable Terraform modules for a VPC + ECS Fargate service + RDS Postgres stack — least-privilege security groups, autoscaling, secrets in Secrets Manager |
| 🔁 cicd-pipeline-aws-ecs | GitHub Actions pipeline: lint → test → build/push to ECR → deploy to ECS Fargate via OIDC, with automatic rollback on a failed deploy |
| ⎈ k8s-helm-service-deploy | Production-shaped Helm chart — Deployment, HPA, PodDisruptionBudget, Ingress, locked-down non-root securityContext |
| 🔀 kamailio-sbc-router | A Kamailio-based SIP Session Border Controller: multi-tenant routing, NAT traversal (rtpengine), TLS/SRTP termination, carrier failover via dispatcher module |
| ☎️ freeswitch-cloud-pbx | Multi-tenant FreeSWITCH dialplan + ESL automation layer with a REST API for call origination and a CDR pipeline into PostgreSQL |
| 📞 pjsip-sip-diagnostics | A pjsua2-based SIP test/diagnostic client for validating registration, call setup, and RTP quality against an SBC or trunk — built for the same kind of packet-level troubleshooting Wireshark/sngrep covers |
| 🤖 ai-voice-agent | Real-time conversational AI agent that auto-answers FreeSWITCH calls — speech-to-text → LLM → text-to-speech streamed live into the call |
| 👥 teams-sip-bridge | Bridges Microsoft Teams Direct Routing to an on-prem SIP/FreeSWITCH Cloud PBX core |
| 🛡️ fortinet-voip-firewall | FortiGate config for SIP/RTP — the SIP ALG problem, firewall policy, and voice QoS prioritization |
| 📊 sip-pcap-analyzer | Parses SIP pcap captures into a per-call summary table — Call-ID, status, setup time, duration |
| 🐳 telecom-stack-docker | Containerized telecom stack: Kamailio + FreeSWITCH + PostgreSQL + Homer (HEP) monitoring, spun up with one compose file |
| 🚨 ghost-call-defense | Detection and mitigation for nuisance/ghost SIP calls and scanning traffic at the SBC layer |
| 🔐 cloudflare-tunnel-voip-access | Secure Cloud PBX admin access via named Cloudflare Tunnel + Access (Zero Trust) — no exposed admin ports |
| ☁️ aws-mobile-call-api | Serverless API Gateway + Lambda + DynamoDB backend for a mobile Cloud PBX app |
| 🐍 kazoo-crossbar-client | Python client for 2600Hz's KAZOO platform Crossbar REST API |
| 🧰 linux-voip-ops-toolkit | Trunk health checks, rotating SIP packet capture, system health reports, automated CDR backups |
| 📟 yealink-remote-phonebook | Live, server-generated company directory for Yealink desk phones via Remote Phone Book |
| 📖 voip-troubleshooting-playbook | A structured runbook for diagnosing one-way audio, jitter, registration failures, and dropped calls |
| 🔓 voip-phone-unlock-guide | Vendor-lock removal guide for repurposing owned/decommissioned desk phones across PBX platforms |
| 📢 multicast-paging-system | SIP multicast overhead paging across Yealink, Snom, Grandstream, and Cisco desk phones |
| FreeSWITCH call parking with automatic spoken slot announcement over overhead paging | |
| ⚙️ voip-phone-provisioning-guides | Auto-provisioning guides for Yealink, Cisco, Grandstream, Avaya, and Snom |
See all 22 repos →
- 🛡️ Fortinet NSE 7 — Enterprise Firewall, 7.6 Administrator — verify on Credly
- ☁️ AWS Certified Cloud Practitioner — verify on Credly
- 🌐 CompTIA Network+ ce Certification — verify on Credly
- VoIP Engineer / Telecommunications Technician — Cloud telecom & UCaaS services provider, Canada (2021 – Present). SIP trunking, multi-tenant Cloud PBX support, FreeSWITCH/Asterisk platform engineering, packet-level troubleshooting for carrier-grade voice traffic.
- IT Support Specialist — BECCOS India (2020 – 2021). C programming, TCP/IP networking fundamentals.
- B.E., Electrical and Electronics Engineering — Sant Longowal Institute of Engineering and Technology (2014 – 2018).
FreeSWITCHAsteriskKamailiopjsipSIP/RTPTLS/SRTPWiresharktsharksngrepHomer (HEP)DockerLinuxPostgreSQLCPythonREST APIsCloudflarertpengineKAZOO / Crossbar APIAWS (Lambda, API Gateway, DynamoDB, ECS Fargate, RDS)FortiGate / FortiOSZero Trust (Cloudflare Access)BashGitNginxDNSSIP Multicast PagingAuto-Provisioning (Yealink/Cisco/Grandstream/Avaya/Snom)CDR / Billing PipelinessngrepTCP/IPWindows/Linux InteropTerraformKubernetesHelmGitHub ActionsOIDCHorizontalPodAutoscaler
📫 Open to VoIP/network engineering roles where deep protocol-level skill actually matters.