← Back to Projects

Project Case Study

Building blamoureux.com as a secure portfolio platform.

This project shows the process of designing, building, deploying, and protecting my personal portfolio as a production-ready platform. The site itself is part of the proof of work: a practical example of frontend development, static-first architecture, protected staging, branch-based deployment, identity-aware access control, protected admin review, downloadable portfolio artifacts, dashboard concepts, secure workflow design, portfolio-safe metrics, and motion used as identity system storytelling.

Stack

Tools used to build, deploy, and protect the portfolio.

Next.jsTailwind CSSTypeScriptGitGitHubCloudflare PagesCloudflare AccessCloudflare DNSCloudflare Web AnalyticsCloudflare FunctionsCloudflare D1Email NotificationsStatic ExportProtected StagingDownloadable Portfolio ArtifactsIdentity Motion System

Architecture Flow

A simple deployment pipeline that supports identity case studies, downloadable artifacts, protected request workflows, dashboard concepts, and motion-based storytelling.

Local development on Mac
Git commits used as checkpoints
GitHub repository as source of truth
Cloudflare Pages static deployment
Cloudflare Access protected staging
Development branch and production branch deployment path
Cloudflare Functions for secure request handling
D1 database for Network request and audit storage
Email notification for submitted requests
Protected admin review route
Public-safe approval workflow before publishing
Custom domain planning for public release
Reusable content model powering project and detail pages
Portfolio case studies connected to the IAM blueprint, toolkit, lab, and dashboards
Portfolio-safe sample metrics designed for aggregate reporting
Downloadable PDF brief served from the static public downloads folder
Identity Constellation homepage section with orbiting access signals
Creative Direction page for comparing visual interaction patterns

Motion Design

The homepage motion now supports the identity story.

The site now uses an Identity Constellation instead of a simple moving banner. The visual connects users, applications, roles, policies, access, and audit signals around an IAM access graph, making the homepage more memorable while still keeping the tone calm and professional.

Soft coastal motion system
Identity Constellation homepage visual
Orbiting access signal animation
Creative Direction comparison page

Portfolio Content System

A project system with structure, metadata, and public boundaries.

The portfolio structure gives the site a clean public system for project write-ups, lab notes, identity thoughts, downloadable artifacts, career reflections, and related work. Reusable page patterns help each area carry category, status, summary, tags, related links, sections, and metadata.

Concept Metrics

The portfolio system also demonstrates metric design.

The portfolio content system models project capture, refinement, publishing, and learning. The dashboard library uses sample numbers to show how project progress, category coverage, related work, publishing cadence, downloadable artifacts, and portfolio-safe engagement signals could become useful metrics.

Secure Workflow Layer

Public submissions are routed through review before publishing.

The Network request workflow turns a public form into a governed intake process. Requests are captured, stored, reviewed through a protected admin path, and only published after approval.

01

Public request form captures submissions

02

Server-side handling validates and stores requests

03

D1 stores request status and audit history

04

Email notification alerts the reviewer

05

Cloudflare Access protects the admin review route

06

Approved content can be published in a public-safe format

Build Milestones

How the platform connects local development, protected staging, secure workflows, and production readiness.

Local foundation

Built the portfolio as a local Next.js application with a custom identity-focused site structure.

Version control

Used Git and GitHub as the source of truth for version control, deployment tracking, and production-ready changes.

Static-first architecture

Configured the application for static export so the public portfolio remains fast, simple to host, and easier to secure.

Cloudflare Pages deployment

Connected the GitHub repository to Cloudflare Pages to support repeatable builds and deployments.

Protected staging

Protected the hosted preview with Cloudflare Access so the site could be reviewed in a real environment before public release.

Branch-based preview and production flow

Used a development and production branch workflow to separate preview review from public release.

Secure request workflow and admin review

Built a public Network request flow with protected admin review, request status tracking, audit history, email notification, and public-safe publishing controls.

Portfolio content system

Built dedicated pages for resume, projects, labs, contact, creative direction, and project case studies to support a broader professional platform.

Portfolio content foundation

Added a structured portfolio content model with reusable page patterns, project detail templates, category lanes, metadata, related links, and public-safe content boundaries.

Portfolio structure and dashboard concepts

Created project case studies and dashboard concepts to show how identity program work, toolkit artifacts, lab validation, workflow signals, and portfolio-safe metrics can be organized clearly.

Downloadable portfolio artifacts

Added a watermarked IAM Program Blueprint portfolio brief that summarizes the operating model, toolkit connection, lab testing approach, and measurement layer.

Homepage motion and identity constellation

Added a motion concepts page, softened the homepage color system, replaced the moving signal banner with an Identity Constellation, and used orbiting access signals to make the homepage feel more like a living identity system.

Key Decisions

Keep the first version static

A static-first site keeps the initial architecture simple, fast, low-maintenance, and easier to secure.

Validate before release

The deployment pipeline, build settings, routing, access control, and mobile experience are validated before public release.

Protect staging with access control

The hosted preview is protected with Cloudflare Access, allowing private review while the environment behaves like a real deployment.

Review before publishing

User-submitted content should not appear publicly without review. The Network workflow keeps submitted requests pending until they are reviewed through a protected admin path.

Show the platform work

The website is not just a container for the portfolio. The platform demonstrates technical decision-making, secure delivery, and documentation discipline.

Treat the portfolio like a product system

The portfolio is designed as more than a resume site. Project pages, lab documentation, downloadable artifacts, dashboards, and secure workflow examples connect practical work to a clear professional story.

Keep metrics public-safe

Analytics and concept metrics are designed around aggregate signals, writing progress, category coverage, related work, and publishing cadence instead of exposing private drafts or personal reader tracking.

Use motion as system storytelling

The homepage motion is intentionally tied to identity concepts. The Identity Constellation shows relationships between users, apps, roles, policies, access, and audit signals instead of using animation as decoration.

IAM Relevance

The staging model reflects identity and access management thinking.

The project uses access control before public exposure. The hosted environment is protected while still allowing real deployment validation. That mirrors a practical IAM pattern: separate staging from public production, limit access during review, validate the release path, and publish only approved content. The same pattern appears across the portfolio structure: rough concepts stay controlled, public pages are intentionally written, downloadable artifacts are watermarked, user-submitted content goes through review, and metrics are based on aggregate or sample signals. The Identity Constellation extends that same message visually by showing access as a relationship between users, apps, roles, policies, access decisions, and audit signals.

Production Readiness

Production readiness is based on validation, review, and controlled release.

Verify static build output
Confirm protected staging behavior
Validate public routes and downloads
Review portfolio-safe wording
Test Network request and admin review flow
Release approved changes to production

Lessons Learned

A simple architecture is easier to secure and explain.
Deployment should be tested before a site becomes public.
Access control matters even for a personal portfolio when the work is still under construction.
Documentation turns a personal website into a technical case study, product system, and proof-of-work artifact.
Design decisions are part of the system, not decoration added at the end.
A portfolio platform can demonstrate structure, content modeling, governance, and metrics thinking.
Public-safe analytics are most useful when they explain decisions without exposing sensitive details.
Public submission workflows need governance, not just forms.
Motion works best when it explains the system instead of distracting from the content.