A Cloud Engineer designing and delivering secure, resilient, and scalable infrastructure. I translate complex business requirements into technical solutions, from modernising legacy environments to architecting greenfield Azure deployments. I specialise in design for security, governance, and operational excellence using Infrastructure as Code (IaC) and automation.
Every solution I build prioritises security at the architectural level. I integrate identity protection, RBAC Policies, Network Segmentation, and Threat Detection from the start, avoiding afterthoughts.
My systems are automated, observable, and resilient. I focus on reducing operational friction through clear documentation, versioned infrastructure, and scalable patterns that support long-term reliability.
Bridging the gap between business objectives and technical implementation. I design and deploy solutions that are cost-effective, maintainable, and aligned with long-term strategic goals.
Focus Group
Focus Group
Focus Group
Architected an ephemeral file transfer solution built entirely on the Cloudflare edge. Provides a zero-infrastructure sharing tool combining a Worker, R2 buckets with automatic object expiration, and Cloudflare Access for robust authentication.
Designed a standardised architectural pattern for greenfield Azure deployments to ensure governance and accelerate delivery. Enforces secure hub-spoke topologies and baseline network security using reusable Terraform templates.
Engineered a serverless portal for managing Cloudflare tenants, automating onboarding, and standardising RBAC policies.
Architected an automation pipeline to bridge existing, unmanaged hardware with Intune's Zero-Touch-Provisioning. A lightweight, client-side ingestion script, run as SYSTEM, captures the device's hardware hash and authenticates against the Graph API, programmatically registering the device in Autopilot. This solution enables automated tenant enrollment and re-provisioning (OOBE) for a brownfield device fleet.
Designed a resilient infrastructure to validate enterprise architecture. Incorporates Zero Trust (Cloudflare Tunnels), network segmentation (Sophos HA), and robust storage (OpenZFS) as a proving ground for secure hybrid-cloud patterns.
Designed a security posture reporting tool to solve visibility gaps in Entra ID. A lightweight serverless setup using PowerShell and HTML to aggregate diverse risk signals from the Graph API into a unified metric without third-party platform costs.
I'm always open to discussing cloud architecture, edge security, or new opportunities.