Harikrishnan R

I'm Hari.

I love to build. Scroll down and see how I run things.

9 years UAE IT/Dubai, UAE/ISO 27001 · GSMA-SAS/Entra ID · VMware · FortiGate/AZ-104 in progress

Building

Systems I'm designing

The work I care most about: applying AI to the parts of IT administration that still run on scattered documents, tribal knowledge and manual steps.

IT Operations Hub

Architecture · AI backbone live

An AI-first, self-hosted platform that unifies the tools, documentation, assets and workflows an IT administrator uses into one operating layer. The design inverts the usual stack: instead of a dashboard with AI bolted on, a local LLM is the intelligence layer and the dashboard is a surface on top of it.

Retrieval-augmented generation runs over IT documentation, SOPs and ticket history, so one search box covers documents, assets and infrastructure state. Behind it sit domain-specialist agents scoped to Microsoft 365, networking, Linux, VMware and FortiGate - each with access only to the documentation and APIs relevant to its domain. Self-hosted by design, so internal data never leaves the network.

The AI engine is running today on a local inference node reached over a private tailnet. Knowledge ingestion, universal search, and Azure and Microsoft Graph integration sit in the phased roadmap.

Ollama · Qwen 3 · RAG · Tailscale · Cloudflare Access · Docker · self-hosted

AI CORE Local LLM · RAG · embeddings · retrieval · domain-specialist agents SELF-HOSTED KNOWLEDGE Docs · SOPs · diagrams Email · scripts · tickets INTEGRATIONS GLPI · LibreNMS · Plane M365 · FortiGate · VMware AUTOMATION n8n workflows On/offboarding chains ONE PORTAL Universal search · live infrastructure state · quick actions · mobile

Multi-Agent Delivery Framework

Operational

An AI-assisted delivery framework I built and use daily. Specialist manager personas are routed by keyword, each with its own remit - operations, marketing, documentation - and all of them read and write a git-backed persistent memory, so context survives between sessions instead of being re-explained.

The part I find most useful is the wrap protocol: closing a session automatically produces the release notes, QA checkpoints and audit findings for the work just done. Governance artefacts come out as a by-product of doing the work, rather than as a separate chore that gets skipped. A policy-conflict check runs before anything is implemented, so a request that contradicts a recorded decision gets surfaced instead of silently applied.

Claude Code · git-backed memory · keyword routing · automated release notes & QA checkpoints

SESSION start ROUTER keyword match OPERATIONS MARKETING DOCUMENTATION GIT-BACKED PERSISTENT MEMORY decisions · findings register · tool memory · handover - survives every session /wrap PROTOCOL emits release notes · QA checkpoints · audit findings · written handover

Shipped

Tools I built and run

Real users, real data, real uptime expectations. Each one is a live service I operate rather than a demo - which is where the operational practice below came from.

Kurivattam

Kurivattam

Beta

A Malayalam chit-fund manager for real money groups - members, monthly payments, live auctions and draws, with a public view for members who never log in. Bilingual UI throughout.

Firebase RTDB · PWA · staging-gated releases · nightly encrypted backups

Visit →
Compound

Compound

Beta

A wealth and habit tracker built around the idea that small consistent inputs compound. Offers a cloud-synced account or a device-only mode for people who want no server copy of their finances.

Firebase · Google SSO + device-only mode · PWA

Visit →
Temple Poster Builder

Temple Poster Builder

Live

Template-driven poster generation for temple events and festivals, with Malayalam typography and WhatsApp-ready export. No login and no backend - it runs entirely in the browser.

Vanilla JS · zero backend · Cloudinary · client-side render

Visit →
JobPulse

JobPulse

In progress

A job-hunt tracker built for the Gulf market, where applications vanish into portals with no feedback. Tracks applications, adds streaks and effort scoring to keep a demoralising process measurable.

Firebase · Google SSO · PWA

Visit →
ScoreSync

ScoreSync

Live

A live scoreboard for card games. One person hosts, everyone else watches scores update in real time on their own phone - no accounts, no install.

Firebase RTDB · anonymous auth · realtime sync

Visit →
Tools portal

The Portal

Live

The front door to everything above, with per-tool visibility controlled from a private admin dashboard so a tool can be hidden, opened to beta users, or published without a redeploy.

Vercel · Firebase-driven visibility flags · PWA

Visit →

Practice

How I run things

The tools above are the visible part. This is the part that matters more, and it's the same discipline I apply to production infrastructure at work.

Backup & Recovery

GPG-encrypted nightly snapshots of every production database, written by scheduled CI to an isolated branch, with an automated decrypt-and-parse verification step. Recovery is rehearsed, not assumed: a snapshot has been restored and content-verified field by field against live data.

Release Safety

Staged pipeline of staging deploy, QA checkpoint sign-off, then production promotion behind an approval gate. Semantic versioning and a changelog entry accompany every release, and no change reaches production without sign-off against a promotion checklist.

Blast-Radius Isolation

One isolated backend project per application, so a credential or data exposure in one service cannot reach another. Migrated off a shared backend specifically to remove that shared-fate risk.

Zero-Trust Access

Internal surfaces sit behind identity-aware access with SSO and an email allowlist. Self-hosted nodes publish through outbound-only tunnels, with no inbound ports opened on the origin.

Vulnerability Management

A findings register carries one row per finding with severity, owner and status, tracked through to closure. Static-hosting exposure was audited and deploy-exclusion rules hardened so internal artefacts are never publicly served.

Monitoring & Incidents

A private operations dashboard aggregates platform usage and quota across providers with monthly snapshots. TLS renews automatically on the self-hosted origin. Incidents are recorded with root cause and corrective action, and recurring gaps become protocol changes.

Experience

Where I've done it

Infrastructure, cloud, identity, endpoint, security and compliance - across aviation services and ISO-certified smart-card manufacturing. Full detail in the CV.

MAY 2025 - PRESENT

IT Administrator

UAS International Trip Support · Dubai, DAFZA

End-to-end delivery of infrastructure and cloud initiatives across two geographies, from scoping and supplier engagement to implementation and handover. Hybrid identity on Entra ID and Azure AD Connect, hybrid Exchange, endpoint management and patch automation, monitoring and threat detection, VoIP, and the internal delivery documentation set.

MAR 2024 - APR 2025

IT Administrator

Trasna · Dubai

Infrastructure, security and compliance ownership for smart-card and IoT manufacturing certified to ISO 27001 and GSMA-SAS. Firewall estate across Sophos and FortiGate, VMware lifecycle including vCenter upgrades, enterprise Wi-Fi, and the technical workstream for both certifications including vulnerability assessment cycles and the audit evidence pack.

JUL 2017 - MAR 2024

IT Production Team Leader

Workz · Dubai

Production IT for a SIM and smart-card manufacturing floor running 24/7 under ISO certification. Promoted from Assistant to Team Leader in 2022, leading a production IT team through shift planning, escalation ownership and training. Owned software version control and preventive maintenance on production-critical systems, and wrote the SOP set adopted as the team's standard reference.

Credentials

Education & certifications

AZ-104In progress
Microsoft Certified: Azure Administrator Associate · exam scheduled 2026
AZ-900
Microsoft Certified: Azure Fundamentals · October 2021
CompTIA A+
CompTIA A+ Certified · July 2021
BTechIn progress
Computer Science, Radha Govind University, Jharkhand, India
Diploma
Computer Science Engineering, Government Polytechnic College, Attingal, Kerala · 2014-2017

Writing

Notes from building

Infrastructure decisions, platform tradeoffs and what AI-assisted engineering practice actually looks like day to day.

Read the blog →