I build the platforms product teams rely on to move fast and stay safe. Cloud, security, and AI infrastructure at production scale.
Fifteen-plus years building the platforms engineering organizations rely on to ship. Full-stack ownership across Kubernetes, cloud infrastructure, security and compliance, CI/CD, observability, cost, and AI infrastructure. My focus is the parts other teams shouldn't have to think about: reliability, guardrails, and paved paths so product engineers can move fast without stepping on landmines.
Kubernetes operator that brings GitOps discipline to Cloudflare edge security. WAF rules, rate limits, and bot detection are declared as Kubernetes resources alongside application code, same pull request review, same audit trail, same rollback story as the rest of the platform. Replaces click-ops in the Cloudflare dashboard with a controller that reconciles desired state.
An AI assistant with scoped read-only access to Grafana metrics, logs, and traces. Sits inside team chat, answers "what changed at 14:02?" style questions, pulls dashboards, and speeds up incident triage. Runs on a shared LLM subscription rather than per-token API billing, predictable cost, no per-query anxiety.
Self-hosted multi-agent platform running specialist assistants for personal ops, engineering, coaching, legal, tax, and more. Each has persistent memory, its own tool policy, and access only to what it needs. Backed by a pgvector store for RAG, cron-driven heartbeats for proactive check-ins, and Mattermost for a shared inbox across agents.
Multi-service AI workload runtime on Amazon ECS. Per-service EFS access points for isolated persistent state, IAM task and execution role separation, and an ECR image pipeline. Runs subscription-backed LLM agents in production alongside per-token API workloads without leaking state between them.
Cross-repo end-to-end test orchestration for polyglot microservice architectures. Coordinates test flows across independently-deployed services owned by different teams, attributes failures back to the right team, and keeps integration coverage honest as engineering orgs scale past 50-500 people.
Led the PCI DSS migration from 3.x to 4.x for a fintech payments platform. Scope reduction, control gap analysis, evidence collection, and QSA coordination. Rewired application, network, and CI/CD boundaries to meet the new authenticated-scanning, script-integrity, and access-review requirements.
Fully automated production deployments for a global payouts platform, built before AI was a tool. Ansible for configuration and rollout, Python for orchestration, automated health checks and rollback. Turned releases into a button and gave on-call a fighting chance during peak traffic.
Small-cell rollout and integration for the UEFA Euro 2012 tournament co-hosted by Poland and Ukraine. Capacity augmentation for stadiums and fan zones during mass-event traffic surges. Backhaul, provisioning, and OSS integration with the core network.
