Platform · Automation · AI-Infrastructure
25+ years in carrier-grade networks, now shipping observable, self-hosted automation and LLM/RAG systems built to run in production — not demos.
Network automation · AI / LLM infrastructure · Observability · Remote / relocation-open
Services
Three areas where I deliver end to end — from the first commit to alerting in production.
Fast, multilingual, self-hostable websites and lightweight admin tooling — from static-first marketing sites to custom portals.
Turn carrier-grade network operations into code: provisioning, config, and health checks that run themselves.
Production retrieval-augmented systems on self-hosted models — private, observable, and built to ship.
Metrics, logs and alerts wired in from day one — so systems are debuggable in production, not just in theory.
How I build
Network tool, data pipeline or RAG service — I build them the same way: ingest the data, store it properly, add intelligence where it earns its place, expose it through a clean API and UI, then wire in alerting and auth from the start.
So the systems I hand over are observable, access-controlled and debuggable in production — shipped software with a clear operational story, not prototypes that fall over the first time something breaks.
Selected work
A sample of self-built systems, abstracted for confidentiality. Each maps onto the pipeline above.
No projects match the selected filters.
A fast, mobile-first multilingual site for a branding agency, with a lightweight self-hosted content editor.
A trilingual website for a children's ballet school in Kyiv, with schedule, gallery and trial-lesson booking.
A job discovery pipeline that scrapes ATS boards and aggregates listings, using an LLM for scoring against legal criteria before presenting results in a web UI.
A closed-access web portal managing resident data, documents, and communications using PHP 8.3 and SQLite. Features include OCR for vehicle license plates and role-based analytics.
A self-hostable web portal for monitoring and controlling hybrid inverters via a secure RBAC system. It integrates with Home Assistant data sources.
A read-only web visualization of SDH and DWDM asset distribution across Ukrainian regions, ingesting data from XLSX exports using Python and FastAPI.
The site you're reading: an Astro (SSR) CV/portfolio in a single Docker container — SQLite datastore, passkey-secured admin, a daily GitHub→local-LLM pipeline that drafts these project cards, and self-hosted, privacy-first analytics.
A self-hosted system for visualizing and analyzing network traffic by ingesting IPFIX/NetFlow v9 data into ClickHouse. Features a web UI built with FastAPI, HTMX, and ECharts.
A web portal for monitoring Eltek power systems, providing SNMP control, system mapping, and proxy gateway access using Python and FastAPI.
An auditor and access control panel for Nginx configurations that computes effective policies and manages safe deployment via a structured pipeline using Python and FastAPI.
A lightweight IDS/IPS front-end that detects attacks and auto-blocks source IPs by announcing them as RTBH via iBGP using ExaBGP. The system integrates CrowdSec, fail2ban, and a custom web UI.
A toolkit for indexing IBM Maximo service request data into Onyx using Python and generating status dashboards with PHP.
CLI tool that scrapes rental listings from OLX.ua and otodim.com.ua, scores them using a local LLM (Ollama), and sends alerts via Telegram.
A single-page application for the Thoth Tarot deck featuring multilingual descriptions, 16 spreads, and SSR support via PHP.
A knowledge base system that ingests and organizes content from multiple sources, featuring an LLM agent for suggestion while maintaining offline search capabilities using Next.js and PostgreSQL.
A PWA for tracking ISP network assets, polling devices via SSH/SNMP, and managing spare parts inventory using FastAPI, Next.js, and PostgreSQL.
A tool utilizing Python and Docker to process Telegram intelligence data. The structure suggests integration with templating engines like Mako.
Stack
About
I'm Andrew Khanoff, a platform and automation engineer. For 25+ years I've designed and operated carrier-grade networks — BGP/MPLS, IS-IS/OSPF, DWDM/SDH across multi-vendor estates — and led IT and systems teams.
Today I spend most of my time turning that operational experience into code: automation, observability and self-hosted AI/LLM infrastructure that small teams can actually own and run.
Contact
The fastest way to start is through Upwork. You can also email me directly or send a message below.