Senior Systems Architect who
engineers production data pipelines & enterprise cloud infrastructure
I design and deploy end-to-end distributed systems—ranging from real-time EVM blockchain ingestion engines to zero-trust Google Cloud network governance architectures. Production-grade, latency-aware, and reproducible by design.
Core Engineering Engineering Pillars
Delivering resilient software systems across two core domains: high-throughput financial data pipelines and zero-trust cloud network foundations.
Core capabilities
- Enterprise GCP VPC isolation & IAP tunneling
- Autonomous ingestion (Airflow) with 120s cadence
- EVM hex decoding and USDC normalisation via web3.py
- Partitioned PostgreSQL fact tables for scale
- Isolation Forest ML anomaly scoring & REST APIs
OmniSight Web3 Data Engine
A production-grade intelligence engine built entirely from scratch — no bootcamp, no team, no starter template. Ingests Base Mainnet USDC flows, decodes them into partitioned fact tables, and scores wallet behaviour with a trained ML model exposed via a documented REST API.
System snapshot
- 120s ingestion cadence via Airflow pulling JSON-RPC event logs
- EVM decoder → typed analytics fields (wallet, amount, block)
- Partitioned tables — usdc_transfers_era_47m, era_48m, growing
- RobustScaler + Isolation Forest — trained on 6,079 real wallet profiles
- FastAPI + Nginx + TLS — live at ericdiamason.tech/docs
- Oracle Cloud Infrastructure — always-on, zero cost (Always Free tier)
Business outcomes
- Compliance-grade monitoring for exchanges and institutions
- Real-time alerts for high-value movements ≥$50,000 USD
- ML wallet risk scoring in under 200ms per request
- Full audit trail: block number, tx hash, ingestion timestamp
Market context
The blockchain analytics market is projected to reach $18.7 billion by 2034 (22% CAGR). OmniSight demonstrates production-level capability in the space occupied by Chainalysis, Elliptic, and TRM Labs — built independently, from scratch, on a free cloud tier.
Public API
Live, documented endpoints. Try the wallet risk scorer below in the Live Metrics section.
GET /api/v1/metrics/whale-alerts
GET /api/v1/public/wallet-risk?wallet_address=0x…
View full API docs →
GitHub
Open source. Production code, clean secrets management, documented architecture.
github.com/ericdiamason/omnisight →Enterprise Shared VPC & Zero-Trust Governance Lab
A production-grade Google Cloud network foundation eliminating public compute IP exposure, enforcing identity-based access control, and providing stateful egress management.
Architecture Specifications
- Zero Ingress Exposure: Compute instances provisioned on custom subnet (
10.1.0.0/24) with--no-address(zero public IP allocation). - Control-Plane SSH: Encapsulated SSH access strictly routed through Identity-Aware Proxy (IAP) tunnels (
35.235.240.0/20), bypassing public Bastion hosts. - Managed Outbound Egress: Stateful outbound internet access via Cloud Router and Cloud NAT for secure patching without inbound risk.
- Reproducible IaC: Fully automated provisioning shell script (
deploy.sh) and operational runbooks.
Network Topology Spec
| Component | Resource Name | Target CIDR / Spec |
|---|---|---|
| VPC Network | vpc-shared-prod | Custom Mode (No Default Rules) |
| Private Subnet | sb-prod-uscentral1-app | 10.1.0.0/24 (PGA Enabled) |
| IAP Ingress Firewall | allow-iap-ssh | 35.235.240.0/20 (Port 22) |
| Cloud NAT Gateway | nat-prod-uscentral1 | Auto-allocated IP (Egress only) |
PCA Architecture Focus
Designed to align with Google Cloud Professional Cloud Architect (PCA) security standards. Solves default GCP security flaws where Compute Engine instances inherit public IPs and open firewall rules.
Operational Artifacts
Includes production runbooks, bash automation, and Git standard operating procedures.
deploy.sh (Automated Provisioner)
GIT_WORKFLOW.md (Ops Runbook)
GitHub Repository
Open source repository containing execution scripts and architectural documentation.
github.com/ericdiamason/gcp-network-governance-lab →From ledger to risk score in one coherent pipeline
Eight stages, zero gaps. Every layer is designed, deployed, and maintained by one engineer.
Pipeline
Key design decisions
- Partitioned tables: block-range partitioning for query performance at scale
- RobustScaler: handles extreme whale outliers without discarding signal
- ON CONFLICT idempotency: pipeline is safe to re-run against any block range
- asyncpg pool: persistent connections, async I/O, handles concurrent requests
- Secrets via EnvironmentFile: zero credentials in source code or git history
- Rate-limited public endpoint: open access with abuse protection
Operational facts
- 214,000+ clean records, zero duplicates enforced by DB constraint
- Model version v20260617 — trained on real Base Mainnet data
- API survives server reboots via systemd service
- Log rotation configured — no unbounded disk growth
Real data. Real pipeline. Right now.
Every number below is pulled live from the OmniSight API — no mock data, no static fixtures.
Whale alerts — live feed
—| Block | Tx | Sender | Receiver | Amount (USD) | Ingested |
|---|---|---|---|---|---|
| Loading whale alerts… | |||||
Wallet Risk Explorer
Enter any wallet address to run it through the live Isolation Forest ML model. Powered by real Base Mainnet data.
Teams that benefit from OmniSight & Cloud Systems
I partner with Web3 infrastructure teams, fintech compliance groups, exchanges, and cloud engineering units to deliver enterprise architecture and telemetry systems.
Exchanges & Custodians
Real-time monitoring for large movements, counterparty tracing, and compliance workflows.
Cloud & Security Teams
Zero-trust network foundations, IAM policy enforcement, and IAP administrative access controls.
Fintech & Analytics
Operational dashboards, institutional reporting, and data products built on reliable pipelines.
Let's build something that matters
If you need architecture, data engineering, or cloud infrastructure design, reach out. I consult, partner, and build production systems end-to-end.
Engagements I take
- GCP Zero-Trust Network & IAM Governance design
- Proof-of-concept to production pipelines
- ML risk scoring and model operationalisation
- API design and integration for analytics teams
- Cloud & Web3 data infrastructure from scratch