// Solutions Architecture · Cloud · AI

Building systems
that scale and
endure.

16+ years designing microservices, event-driven and cloud-native platforms for regulated enterprises in banking, retail, telecommunications and the public sector. From API and integration platforms and cloud modernisation to generative and agentic AI, RAG and vector search, I build secure, compliant, production‑ready systems, and lead the teams that deliver them.

# kamran zafar — stack snapshot

[cloud]
platforms = AWS · Azure · GCP
infra-as-code = Terraform · CloudFormation
containers = Docker · Kubernetes
multi-cloud = Halyx · portable cloud APIs

[ai + data]
models = Ollama · OpenAI · Anthropic
vector-db = OpenSearch · k-NN · RAG
persistence = Postgres · MongoDB · Oracle
streaming = Kafka · MQ · Debezium · CDC

[core]
languages = Java · Kotlin · Python
frameworks = Spring Boot · Spring AI · MCP
security = KMS · IAM · OPA · mutual-TLS
$

What I do

Areas of expertise

🔄

Data & Streaming

Real‑time replication, CDC and streaming pipelines, ETL/ELT and data lakes across relational, NoSQL and vector stores, keeping distributed systems in sync for analytics and AI workloads.

PostgresMongoDBOracleDynamoDBElasticsearchDebeziumKafkaTemporal
🔐

Security

Security by design for regulated environments: identity, encryption and policy enforced at every layer, aligned with ISM and OWASP, and built to pass the audit as well as the attack.

OPAmTLSSSOJWTKMSIAMOWASPISM
⚙️

DevSecOps & Platform Engineering

Secure, automated infrastructure and delivery pipelines across AWS, Azure and GCP, with platform standards and observability that make releases predictable and production calm.

JenkinsHarnessTerraformKubernetesSplunkAppDynamicsGrafanaPrometheus
🎯

Technical Leadership

Providing technical leadership, team mentorship, and architectural direction across major enterprise transformations in banking, retail, telecommunications and the public sector.

Architecture GovernanceConsultingMentoringAgile

Career

Where I've worked

Over 16 years I have worked with large enterprises in banking, financial services, retail, telecommunications and the public sector, helping them move faster, operate more securely, and unlock the value in their data. That has meant cloud migrations that retired costly on‑premises infrastructure while hardening security, microservice and event‑driven platforms that let product teams ship independently, and data pipelines that turned siloed records into real‑time assets the business could act on. I have stepped into programmes where the architecture was at risk and stabilised them, establishing the cloud foundations, security models and engineering practices that let cross‑functional squads deliver with confidence. More recently I have helped teams move into AI‑powered capabilities: intelligent document search, agentic workflows, and real‑time replication feeding analytics and AI workloads. The measure of success has always been whether the client's team is stronger, and their systems more resilient, long after the work is done.

Live Projects

What I'm building

Live

Qur’an AI

quranai.au ↗

Ask a question and get a cited, verified answer from the Qur’an, tafsir, and hadith — Sunni and Shia sources, balanced side by side. The model answers only from retrieved sources, each checked against the original text.

Live

LucidFlow

lucidflow.com.au ↗

Your notes, already organised. Capture raw thoughts by text or voice and AI sorts them into tasks, decisions, risks, and follow-ups — with team collaboration, Jira integration, and progress reporting.

Open Source

Halyx

halyx.dev ↗

One Java API for storage, NoSQL, messaging, events, Kafka streams, SQL, caches, parameters, and secrets across AWS, Azure, and Google Cloud. Runs in-process with a Spring Boot starter, passwordless cloud IAM auth, and a conformance kit that verifies every provider.

Writing

From the blog

Feature Toggles in Java, Without the If-Else

Why the usual if-else feature toggle turns into debt, what a clean toggle design looks like in Java, and how Flipjack moves the decision out of your code.

Read article →

The AI That Isn’t Allowed to Remember

Building a Qur’an and Hadith research tool where the LLM answers only from retrieved, verified sources — and two production failures that shaped the pipeline.

Read article →

Building an Intelligent Document Indexing & Search System with OpenSearch Vector DB, and Ollama AI

How to tackle meaning-based search across large organisational document repositories using local LLMs and vector embeddings.

Read article →

Real-Time Data Replication Using Change Data Capture (CDC) with Debezium and Kafka

A practical walkthrough of implementing real-time data sync across distributed systems — essential for analytics and AI pipelines.

Read article →

Securing Hazelcast (tcp) traffic with Stunnel

Encrypting cluster traffic for open-source Hazelcast where native TLS support isn't available — a practical security pattern.

Read article →

More on the blog →

Java, cloud architecture, AI & data pipelines, distributed systems, security, and open source.

Open Source

Projects on GitHub

Open source contributions published under business-friendly licences — most available at github.com/kamranzafar.

Flipjack

Lightweight runtime feature toggles for Java and Spring Boot, without the if‑else in your code.

Docman AI

AI-enabled document management system and RAG (Retrieval-Augmented Generation) knowledge base.

Piprayer

Automated Adhan player for Raspberry Pi. Integrates with Bluetooth speakers including Amazon Echo.

Android Apps

A selection of mobile applications available on the Play Store.

Blog Code Samples

Working code for every technical post — Kafka/CDC pipelines, OpenSearch vector search, Docker, Spring Boot, and more.

// Let's talk

Get in touch

Whether it's cloud architecture, an AI or data pipeline project, or a consulting engagement — I'd love to hear from you.