~/paras-karki · portfolio

Loading portfolio

Skip to content
PK

Full Stack Developer · Toronto, ON

Hi, I'm Paras.

I work with cloud VMs on Azure, Google Cloud and Akamai, GPU servers for AI models, Entra ID, SSH and networking, and CI/CD pipelines.

Currently working on

  • Document extraction with OCR
  • Building AI agent workflows
  • Data normalization and review with LLMs
  • Deploying open-source models on the cloud

7 of 12 are Cloud & Infrastructure work, shown first

Sep 2025 – presentCloud & InfrastructureAI & Agents

Self-hosted GPU servers for AI models

Custom and open-source models served from GPU servers we run, in development and production, instead of paying a metered API per call.

request path

  1. Your appsends a document
  2. Endpointprivate network · authenticated+9 ms
  3. GPU containercustom model · L4+380 ms
  4. ResponseJSON back to the app+12 ms

press send to trace one request

monthly cost · illustrative

Per-call cloud API$1,600
Private GPU, fixed$1,200

Past the break-even point, every extra document on the private GPU is free.

How it was built →
2026IT SupportCloud & Infrastructure

Active Directory administration

Running a Windows domain: users, groups, OUs and Group Policy, plus the tickets help desks handle every day.

example.local · synthetic lab domain

  • ▾ OU=IT

    • usrAlex Chen
    • pcIT-LT-01
    • grpHelpdesk-PasswordReset
  • ▾ OU=Sales

    • usr_Sales Templatetemplate
    • usrJordan Patel
    • pcSAL-LT-07
    • grpSales-Staff
  • ▾ OU=Finance

    • usrPriya Shah
    • usrDana Brown
    • pcFIN-DT-03
    • grpFinance-Share-RW
  • ▾ OU=Warehouse

    • usrSam Kim
    • pcWH-PC-02
    • grpWarehouse-Staff
  • ▾ OU=Disabled Users

    • (empty)

action log · T-1041

  1. ✓Find the user in Active Directory Users and ComputersPS> Get-ADUser p.shah -Properties LockedOut
  2. ✓Account tab → Unlock accountPS> Unlock-ADAccount p.shah
  3. ✓Reset Password…PS> Set-ADAccountPassword p.shah -Reset
  4. ✓Tick "User must change password at next logon"PS> Set-ADUser p.shah -ChangePasswordAtLogon $true

What I told them“You're unlocked. Pick a new password when you sign in.”

How it was built →
Sep 2025 – presentIT SupportCloud & InfrastructureSoftware

User access: Microsoft 365, Entra ID and AWS

Adding users, granting and removing access, and connecting Microsoft Entra ID sign-in to the platform's services.
  • Microsoft 365 accounts

    I add new users to Microsoft 365.

    Microsoft 365 admin

  • Access by group

    Users and groups live in Entra ID; group membership decides what each person can open.

    Microsoft Entra ID

  • One sign-in for every service

    Each service validates the same Entra ID identity through Microsoft Graph instead of keeping its own passwords.

    Microsoft GraphOAuth 2.0 / OIDC

  • Least privilege in AWS

    Each person or service gets an IAM user with only the permissions it needs.

    AWS IAM

  • Removal in one place

    Disable the account once, and access ends everywhere.

How it was built →

Paras Karki · CV

page 1 of 2

Paras Karki: software, AI and IT infrastructure