LearnStack OS · retrieval
Retrieval over a chunked content corpus supports placement assessment, personalized learning paths, and in-lesson prompt tools.
Bhaskar Pandey · Houston, Texas
AI & Automation Solutions Engineer
AI and automation solutions engineer with enterprise network and security engineering experience and a practice of building complete AI-enabled systems.
Selected capabilities
AI & Automation: Prompt engineering · Harness engineering · Graphs & loops · Agent context & memory engineering · MCP server & API creation · Multi-agent orchestration · Advanced knowledge of Anthropic & OpenAI models · Multi-modal agent experience · Custom AI agent deployment · Hermes Agent & n8n · Model & reasoning-effort routing · Structured extraction with schema validation · Human-in-the-loop workflow design · Prompt-injection defense · Grounded retrieval · pgvector · AI-assisted development · Claude Code & Codex
Frontend Design: Next.js App Router · React · TypeScript · Product definition & information architecture · Visual design & user-facing copy · Docusaurus documentation sites · Playwright & Vitest testing
Backend Infrastructure: PostgreSQL · Neon & Supabase · Drizzle ORM & migrations · Upstash Redis · Better Auth · sessions & typed permissions · Vercel · Blob, Workflow, hosting · GitHub Actions CI/CD & secret scanning · Ubuntu Server, systemd & Tailscale · Threat modeling & fail-closed authorization · Enterprise network security · Cisco, Palo Alto, F5 · PCI-DSS & HIPAA compliance · Delivery leadership · client engagements & on-call operations
RAG and MCP delivery
BrainVault · retrieval
A local note vault syncs to Supabase for semantic search using Postgres, pgvector, and OpenAI embeddings. Operational frontmatter is removed before embedding.
AlmoraBots · Python MCP servers
For the in-development bot team, I built and deployed servers for Mason, Parker, and Maya in signed bot packages. Task-bound tools use authenticated product reads; isolated Hermes Agent profiles enforce allowlists and scoped keys. Maya’s maya_content_research returns only approved context for the brand assigned to her task. Consequential writes require product approval. The stack is self-hosted in production; a separate CRM integration is still under development.
LearnStack Article Creator · MCP server
Authored a live Streamable HTTP JSON-RPC endpoint at /api/mcp with seven tools for article creation, rewriting, importing, checking, publishing, scheduling, and authoring options. OAuth scope checks, Origin validation, and idempotent writes protect the endpoint. External OAuth client registration pending.
BrainVault MCP · remote server
Authored and deployed a TypeScript server on Supabase Edge Functions with 11 search, capture, note-management, review, and statistics tools over Postgres and pgvector. OAuth 2.1 supports client consent; row-level security limits each client’s data access.
Legal Document Creator · Serena integration
Configured the Serena MCP server for Codex to navigate and inspect the attorney’s Legal Document Creator codebase.
Experience
Almora Technology
Founder & Solutions EngineerIndependent AI and automation consulting, with discovery, architecture, threat modeling, implementation, and handoff.
AI and automation delivery
- Across engagements, deterministic rules and approved templates govern any output with legal or financial consequence, while the model handles extraction and drafting under human review.
- Mapped a real estate law firm client's manual closing process into a ten-stage automated workflow from secure intake through extraction, classification, conflict detection, attorney review and delivery.
- Built the deterministic form-selection engine, which rejects unknown or conflicting facts and blocks finalization of an incomplete packet rather than guessing.
Security and architecture
- Designed the AI boundary as fail-closed: model output is treated as untrusted, and every extraction run records provider, model, prompt version, schema version and parser version.
- Authored the formal threat model covering prompt injection, cross-tenant exposure, malicious uploads, sensitive logging, hallucinated facts and AI-provider data handling.
Client engagements
- Advised Parcyl.ai / Syndnet Corp on an AI site-intelligence and parcel-data platform, covering product design, product direction, target audience definition and feature prioritization.
- Resolved production failures at DPA Summit that were blocking revenue, fixing SSL certificate failures and restoring a checkout funnel that was unreachable for a subset of users.
World Wide Technology
Senior EngineerClient-facing network and security delivery across requirements, solution design, cutover, and on-call operations.
- Deployed Cisco ISE as TACACS, and built lab-as-a-service environments to emulate customer production for pre-change validation.
- Delivered Palo Alto policy management, F5 VIPRION code upgrades and new builds, Cisco ASA deployments and site-to-site VPN tunnel migrations.
- Executed Nexus data center refreshes, core, distribution and access switch upgrades, and branch office integrations over MPLS, BGP and DMVPN.
- Ran client-facing delivery from requirements definition through cutover, and carried on-call responsibility for network and security outages.
Epicor Software
Senior Network Engineer · Team LeadLed perimeter access control and change management for a global data-center environment.
- Designed the configuration management and change-control process for firewall configurations, then reviewed and approved proposed changes against it.
- Led the team responsible for perimeter access control across more than 60 firewall pairs in 35 locations worldwide, spanning data centers on five continents.
- Owned application delivery on F5 BIG-IP LTM, and advanced Cisco ASA and SonicWALL configurations for site-to-site VPN, SSL and IPsec remote access with RSA two-factor authentication.
- Onboarded new customers by defining VPN and PCI requirements up front to keep environments compliant.
Rackspace
Network Security EngineerCustomer solution design, implementation, compliance-conscious security engineering, and live incident response.
- Built custom network security policies on Cisco ASA and ASA-X to restrict access, protect availability, and hold PCI-DSS compliance for hosted customer environments.
- Implemented application delivery on F5 LTM and Brocade ServerIron ADX, including application-layer packet flow control through iRules and content-switch policies.
- Performed vulnerability assessments, patched to mitigate threats, and mitigated DDoS and other live attacks against customer infrastructure.
- Executed hardware migrations and upgrades inside planned maintenance windows across Rackspace data centers and OpenCloud, and resolved SSL, TLS and certificate validation failures.
San Antonio Water System
Network Systems EngineerSupported routing, switching, wireless, radio networking, and operational monitoring systems.
- Monitored the estate through SolarWinds Orion, Splunk and NetBrain.
- Supported a Cisco routing and switching estate with Cisco WLC indoor wireless.
- Ran an outdoor long-range PTP and PTMP radio network.
Education
B.S., Engineering Science
St. Mary’s University, San Antonio
Graduated with Honors - Received “Dr. Turgut Ozan Engineering Student of the Year” award
Credentials
Google Cloud Generative AI Leader
Certified September 18, 2026
Previously held: Cisco CCNP Routing and Switching, CCNA Security and CCNA; F5 301 CTS LTM, 201 TMOS Administrator and 101 Application Delivery Fundamentals; CompTIA Network+; AWS Certified Cloud Practitioner.