/platform-engineering

Platforms engineers want to ship on

A good platform makes the safe path the fast path. I build GitOps workflows, Kubernetes foundations and reusable pipelines that let teams ship without needing write access to the cloud.

Architectural invariants

  1. No human writes to production cloud accounts; change arrives through reviewed pull requests.
  2. Clusters stay on supported versions; upgrades are runbooks, not heroics.
  3. Infrastructure modules have hard project and environment boundaries.
  4. The paved road has to be faster than the shortcut, or nobody takes it.

Proof in production

  • Championed Terraform GitOps with Atlantis and ArgoCD: built the demo, won senior buy-in, and moved engineers to read-only cloud access.
  • Led Kubernetes upgrades across three minor versions with runbooks and state backups for every step.
  • Architected modular Terraform repos with environment isolation, versioning and drift-free state migrations.
  • Designed Azure network and AKS foundations with Entra ID, PIM and Key Vault.
  • Led an EC2-to-Kubernetes migration with zero-downtime rollouts.