Healthcare Private Cloud
Zero-trust platform for IoT monitoring & patient video
Patient vitals and live video on a private cloud where every hop is authenticated.
A secure healthcare platform for real-time IoT monitoring and WebRTC patient communication, with identity, gateway and transport security layered end-to-end and fully automated delivery.
What I built
- 01Engineered the platform with Node.js, Express.js and PostgreSQL for real-time IoT monitoring and WebRTC patient communication.
- 02Implemented MQTT-based telemetry ingestion.
- 03Integrated Keycloak, OAuth2, RBAC, JWT, Kong Gateway and mTLS for IAM and service security.
- 04Automated deployment and monitoring with Docker, Terraform, Jenkins, Prometheus and Grafana.
Engineering decisions
Patient data and live video demand trust at every hop.
→ Layered security: mTLS between services, Kong Gateway at the edge, Keycloak-issued OAuth2/JWT tokens and RBAC per role.
Continuous device telemetry.
→ MQTT-based ingestion into Node.js/Express services backed by PostgreSQL.
Environments that are repeatable and observable.
→ Docker images, Terraform-defined infrastructure, Jenkins pipelines, and Prometheus + Grafana monitoring.
Request path · illustrative trace
Trace log
- ·mTLS handshake · client certificate verified
- ·Kong · route matched, gateway policy applied
- ·Keycloak · OAuth2 access token issued
- ·JWT verified · RBAC role check passed
- ·Express service · patient vitals requested
- ·PostgreSQL · query ok → 200
- Node.js
- Express.js
- PostgreSQL
- MQTT
- WebRTC
- Keycloak
- OAuth2
- RBAC
- JWT
- Kong Gateway
- mTLS
- Docker
- Terraform
- Jenkins
- Prometheus
- Grafana