Security & compliance
The fundamentals that stop real attacks, with compliance as the evidence rather than the goal.
Expertise
Seven areas I work across, usually several at once. Each page covers what I do, how I approach it and where I have done it.
The fundamentals that stop real attacks, with compliance as the evidence rather than the goal.
Kubernetes platforms, GitOps and CI/CD that let teams ship often while production stays calm.
Colo footprints and Linux fleets, racked, provisioned, hardened and automated end to end.
BGP, SD-WAN, firewalls and VoIP, run through NetBox and automated with Go, Python and Ansible.
GPU nodes, model serving, RAG and MCP integrations, run with real guardrails and observability.
AWS and Azure environments and migrations, defined in Terraform and Ansible.
Prometheus, Grafana, OpenTelemetry and Icinga2, with alerts that mean something.
Architecture reviews, target-state designs and hands-on leadership of engineering teams.
Stack
Hands-on, in production. The same list as my resume.
Open to select consulting, contract and advisory work. Tell me what you are building and where it hurts.