Home · Work
My Cases in Depth
Six engagements, six outcomes. Each one started with a messy estate and ended with a platform the team enjoys running.
Architecture, Migration · Banking
A regional bank running 60 workloads across three ungoverned AWS accounts. I built a Control Tower landing zone with identity federation and service control policies, then migrated in waves over 14 weeks.
Security, Architecture · Healthcare
A patient-messaging startup that needed HIPAA-grade controls before a funding round. Sealed secrets, private EKS endpoints, full audit trails — and evidence packs the auditors accepted first time.
Migration, DevOps · Retail
A monolith that could only deploy on Sunday nights. I carved out bounded contexts, containerized behind a strangler facade, and introduced GitOps — the team now ships on demand.
Architecture, DevOps · Analytics
Event-driven analytics on managed streaming and warehouse services, with OpenTelemetry tracing end to end and per-team cost dashboards that ended every billing surprise.
DevOps, Security · Fleet IoT
Four hundred vehicle gateways phoning home over mutual TLS. I rolled out a zero-trust service mesh with automated certificate rotation and fleet-wide patching in one maintenance window.
Migration, Architecture · Education
Twenty-five learning apps on aging VMs. A lift-and-optimize to Azure with autoscaling and reserved capacity cut the hosting bill in half within a single quarter.