TechEarl
Author

Ishan Karunaratne

Systems and network architect and CTO. 20+ years across software, cloud and network architecture, Linux systems, and the bare metal underneath them, with a more recent focus on AI.

Ishan Karunaratne

Ishan Karunaratne(he/him)

Systems and Network Architect · Chief Technology Officer

Hi, I'm Ishan. I'm a systems and network architect and Chief Technology Officer at Rehab Media Group. I've spent more than two decades designing, building, and running production software, Linux systems, and DevOps infrastructure, and lately working AI into the stack. What I write here comes from the full arc of that work, not any single job.

Before any of that I served in the US Army as a Fire Direction Specialist, including a deployment for Operation Iraqi Freedom. Running an office accountable for ninety personnel at twenty-two teaches you things about systems and failure that no amount of production experience quite replicates.

My foundations were laid early, learning system design, relational databases, and programming as a kid before most people meet those ideas. But the thing that really shaped how I build was security. I came up reverse engineering and debugging at the instruction level, fascinated by how systems break, and that lens never left. Every system I've designed since has treated security as a first-order concern, not something bolted on at the end.

These days I split my attention between three things: architecting and running production systems, building DNS Checker, a domain intelligence platform I designed and wrote myself that analyzes 240M+ domains a day, and writing.

TechEarl is the writing side. It's where I work out what I learn as I go, partly to leave a useful trail for other developers, partly as a reference for the next time I trip over the same problem myself. The aim is to write down the things I actually had to figure out under a real deadline, not rehash what's already everywhere.

If you want the shorter version, the career rather than the articles, ishankarunaratne.com is my personal site. It has the full track from the US Army through to CTO, the credentials, and everything else I have built and still run, including DNS Checker, Lipwalk, and the rest.

Areas of expertise

  • System architecture and performance optimization at scale
  • Software design, system analysis, and the full development life cycle
  • Reverse engineering, debugging at the instruction level, and security-first design
  • Full-stack web (Node.js, TypeScript, Next.js, React, PHP)
  • Cloud infrastructure (AWS, GCP, Hetzner, Docker, Coolify)
  • Linux systems administration (RHEL, Debian, Ubuntu, systemd, fail2ban)
  • Databases (PostgreSQL, MySQL, Elasticsearch, ClickHouse, Redis)
  • DevOps and CI/CD pipelines (GitHub Actions, Coolify, Nginx)
  • DNS, networking, and email deliverability (DNSSEC, SPF/DKIM/DMARC, BGP/ASN)
  • AI engineering (LLM applications, RAG, prompt engineering, evals)
  • Engineering leadership: technical strategy, team direction, and delivery
  • WordPress + Advanced Custom Fields at scale, as one tool among many
  • Technical writing and developer documentation

Education and certifications

  • Charles Sturt University, Bachelor's degree, online systems (2008 to 2010)
  • Lecturer, IDM Computer Studies (2010), teaching Java and web development on the Charles Sturt University BIT curriculum
  • CompTIA A+, Network+, and Security+ certifications (2009)
  • Prosoft Certified Internet Webmaster (CIW) Professional (2006)
  • Cisco CCNA coursework (2005)
  • Principal Certified Lotus Professional, IBM Domino R5 Application Development (2002)
  • Diploma in Advanced Programming Techniques, Unix and C, shell scripting (1999)
  • US Army, Fire Direction Specialist 13P, veteran of Operation Iraqi Freedom