Overview — N1 IT Landscape
N1 IT Landscape · Principal Engineer: Arun Venkataraman
This landscape is N1’s reproduction bible. If every person at N1 lost their memory tomorrow, this set of documents lets them rebuild the company’s entire IT estate from scratch: people, machines, identity, code, CI/CD, cloud, and Kubernetes workloads.
The 60-Second Mental Model
Section titled “The 60-Second Mental Model”N1 builds a HIPAA platform for licensed clinicians who handle patient medical data. A clinician uploads medical records; N1’s pipeline reads every page, extracts clinical facts (biomarkers, genetics, diagnoses, medications), links biomarker readings to global BiomarkerDefinitions, and generates Comprehensive Health Reports (CHRs).
All services run as containerized workloads on two Kubernetes clusters in AWS (us-east-2), reachable from the outside only through Cloudflare Zero Trust.
Landscape Chapters
Section titled “Landscape Chapters”| Chapter | What it covers |
|---|---|
| 01 · People & Organization | Team, locations, team permissions, and production access |
| 02 · Devices & Office Network | Laptops, MDM, and office network infrastructure |
| 03 · Identity & Access | Google IdP, Cloudflare Access + WARP, 2FA, and AWS sign-in |
| 04 · SaaS & Subscriptions | Third-party services, vendors, and subscription tiers |
| 05 · Cloudflare Edge | DNS, WAF, Zero Trust Access, Tunnels, Workers, and R2 |
| 06 · Source Control, CI/CD & SDLC | GitHub repos, build-and-ship pipelines, and release governance |
| 07 · AWS Cloud Infrastructure | EKS, Karpenter, ECR, S3, Aurora PostgreSQL, Valkey, and secrets |
| 08 · Kubernetes Platform | Namespaces, platform controllers, and live cluster workloads |
| 09 · Application Architecture | Request path and the medical-record → CHR generation pipeline |
| 10 · AI & Model Access | LiteLLM gateway, Vertex AI, Amazon Bedrock, and Langfuse tracing |
| 11 · Data, Observability & Tooling | Data stores, SigNoz / OpenTelemetry, internal tools, and secrets |
| 12 · Security & Compliance Setup | Full security posture, controls, and HIPAA compliance setup |
| Network — Infrastructure & VPC | VPCs, subnets, route tables, peering, NAT gateways, and security groups |
| Network — Service-to-Service Map | Microservice call graph, ports, streaming topology, and DB access |
| Bill of Materials & Dependencies | Software version pins and HEAD SHA index across all repos |