TechEarl
Author

Ishan Karunaratne

20+ years across software, Linux systems, DevOps, and infrastructure, with a more recent focus on AI.

Ishan Karunaratne

Ishan Karunaratne(he/him)

Software Systems Architect · Senior Software Engineer · Engineering Leadership

Hi, I'm Ishan. I'm a software systems architect and senior software engineer, and currently a CTO. I've spent more than two decades designing, building, and running production software, Linux systems, and DevOps infrastructure, and lately working AI into the stack. What I write here comes from the full arc of that work, not any single job.

My foundations were laid early, learning system design, relational databases, and programming as a kid before most people meet those ideas. But the thing that really shaped how I build was security. I came up reverse engineering and debugging at the instruction level, fascinated by how systems break, and that lens never left. Every system I've designed since has treated security as a first-order concern, not something bolted on at the end.

These days I split my attention between three things: architecting and running production systems, building DNS Checker, a domain intelligence platform I designed and wrote myself that analyzes 240M+ domains a day, and writing.

TechEarl is the writing side. It's where I work out what I learn as I go, partly to leave a useful trail for other developers, partly as a reference for the next time I trip over the same problem myself. The aim is to write down the things I actually had to figure out under a real deadline, not rehash what's already everywhere.

Areas of expertise

  • System architecture and performance optimization at scale
  • Software design, system analysis, and the full development life cycle
  • Reverse engineering, debugging at the instruction level, and security-first design
  • Full-stack web (Node.js, TypeScript, Next.js, React, PHP)
  • Cloud infrastructure (AWS, GCP, Hetzner, Docker, Coolify)
  • Linux systems administration (RHEL, Debian, Ubuntu, systemd, fail2ban)
  • Databases (PostgreSQL, MySQL, Elasticsearch, ClickHouse, Redis)
  • DevOps and CI/CD pipelines (GitHub Actions, Coolify, Nginx)
  • DNS, networking, and email deliverability (DNSSEC, SPF/DKIM/DMARC, BGP/ASN)
  • AI engineering (LLM applications, RAG, prompt engineering, evals)
  • Engineering leadership: technical strategy, team direction, and delivery
  • WordPress + Advanced Custom Fields at scale, as one tool among many
  • Technical writing and developer documentation

Education and certifications

  • Bachelor's degree, Information Technology (online systems focus)
  • CompTIA A+, Network+, and Security+ certifications (2009)
  • Cisco CCNA coursework (2005)