/platform-engineering
Platforms engineers want to ship on
A good platform makes the safe path the fast path. I build GitOps workflows, Kubernetes foundations and reusable pipelines that let teams ship without needing write access to the cloud.
Architectural invariants
- No human writes to production cloud accounts; change arrives through reviewed pull requests.
- Clusters stay on supported versions; upgrades are runbooks, not heroics.
- Infrastructure modules have hard project and environment boundaries.
- The paved road has to be faster than the shortcut, or nobody takes it.
Proof in production
- Championed Terraform GitOps with Atlantis and ArgoCD: built the demo, won senior buy-in, and moved engineers to read-only cloud access.
- Led Kubernetes upgrades across three minor versions with runbooks and state backups for every step.
- Architected modular Terraform repos with environment isolation, versioning and drift-free state migrations.
- Designed Azure network and AKS foundations with Entra ID, PIM and Key Vault.
- Led an EC2-to-Kubernetes migration with zero-downtime rollouts.