selected work

Things I've shipped.

A curated set of projects where I had a meaningful engineering role. Each one had a real problem, real constraints, and real users depending on it.

2025–Present

Industrial Process Analytics Platform

live

A polyglot microservices platform that schedules, executes, and monitors real-time analytics across industrial process equipment — now queryable by AI agents in plain language.

GoPythongRPCKubernetesTerraformNATS JetStreamTimescaleDBLLM Agents (MCP)
read case study

2022–Present

Serverless Data Hub Platform

live

A fully serverless AWS data platform for a world-leading airline — 500+ Lambdas and hundreds of distributed Glue jobs processing millions of records a day.

AWS LambdaAWS GlueMSK (Kafka)SQSRDSAthenaOpenSearchPythonNode.js
read case study

2021–Present

Internal Developer Portal

live

A cloud-native, low-code internal developer platform that lets engineering teams design, deploy, and own their services without wrestling with the underlying infrastructure.

KubernetesMulti-cloudCI/CDGitOpsLow-CodeMicroservicesDeveloper Experience
read case study

2023

GitOps CI/CD Pipeline for Kubernetes

live

A fully automated, end-to-end GitOps pipeline that takes a microservices platform from commit to running on Kubernetes — with testing, security, and quality gates built into every step.

Azure DevOpsArgoCDGitOpsKubernetesAKSCI/CDDevSecOps
read case study

2023

Azure Cloud Security Hardening

live

End-to-end security hardening of an Azure environment — management group hierarchy, policy-driven guardrails, and least-privilege RBAC built to Azure Landing Zone architecture.

AzureAzure PolicyRBACLanding ZoneManagement GroupsCloud Security
read case study

2024

Kubernetes Security Hardening

live

Took an AKS platform with effectively zero security controls and hardened it end to end — cluster, network, service mesh, workload, and observability layers included.

KubernetesAKSLinkerdmTLSNetwork PoliciesPod SecurityRBAC
read case study

Want to work together? Let's talk →