Hello world
First post on the new site — Pelican, Pico CSS, and a Cloudflare Worker.
Infrastructure as Code
Terraform, Terragrunt and Helm for reproducible multi-cloud infrastructure across AWS and GCP.
Internal developer platforms —
and the AI tooling on top of them.
I build the systems other engineers ship on. OS image factories spanning 500+ AWS and 100+ GCP accounts, self-service access control, and autoscaling CI on Kubernetes — plus the agents and CLIs that make those platforms easier to live with.
500+AWS accounts
100+GCP accounts
1,000+EC2 patched / month
1,000+weekly CI jobs
$10K+quarterly savings
What I do
CI/CD Platform Engineering
GitLab and GitHub runner fleets on EKS/GKE handling over 1,000 jobs a week with strict tenant isolation.
Event-Driven Serverless
Lambda, EventBridge, Step Functions and SSM automation. Patch management and workflows built with TDD.
Security & Compliance
OIDC federation, Workload Identity, permission boundaries, SCPs and RCPs. Compliance inherited, not chased.
Cost Optimisation
Image lifecycle analytics and Bedrock token accounting delivering $10K+ in quarterly savings.
Technical Documentation
Architecture decision records, SOPs and runbooks. Platform adoption briefings to 200+ stakeholders.
Currently building
- An autonomous code-review agent that analyses pull requests, suggests refactoring, and asks reviewers targeted questions.
- A documentation hub that strengthens how my team supports its platform services.
- A self-service image-building CLI so any engineer can customise a compliant OS image.
- Open-source Amazon Bedrock tooling focused on AI cost control — model comparison and token accounting.
Recent writing
Incident Runner
Jump the incidents. Space, arrow up, or tap. Your uptime is the score.
0.0s