Experience

Hybrid AWS/GCP delivery for global clients: high-availability platforms, GitOps CI/CD, DevSecOps controls, SLI/SLO standards, and AI-assisted operations.

• Architected high-availability hybrid infrastructure across AWS and GCP, delivering 35% latency reduction for globally distributed end-users through AWS load-balancing and CDN optimisation.
• Led modernisation of CI/CD delivery to GitHub Actions and Argo CD, achieving 99.9% deployment success rate across AWS production and staging environments — eliminating all manual release interventions.
• Designed DevSecOps control framework aligned to GDPR and financial services standards; integrated Trivy and Checkov into AWS pipelines reducing critical vulnerability exposure by 50%.
• Architected self-healing Kubernetes platform on EKS with custom Prometheus/Grafana alerting and automated remediation playbooks, reducing infrastructure MTTR by 40%.
• Introduced AI-assisted incident triage and log analysis tooling, cutting root cause identification time by 25% and freeing senior engineering capacity for platform improvement work.
• Defined SLI/SLO frameworks and observability standards adopted across all client AWS delivery teams.

Owned regulated financial services platforms on AWS: EKS, Istio, Terraform module library, observability tied to business SLAs, policy-as-code, FinOps, and mentoring.

• Designed and owned multi-node Amazon EKS clusters with Istio service mesh, secure networking, and autoscaling policies; sustaining 99.95% uptime across regulated financial services workloads.
• Authored and maintained Terraform module library for multi-environment AWS deployments (VPC, ALB, IAM, Auto Scaling), enabling blue/green delivery with zero-downtime rollout and automated rollback.
• Drove observability baseline (Prometheus, Grafana, CloudWatch) reducing MTTR from 45 minutes to under 15 minutes; defined SLIs/SLOs mapped directly to business SLAs.
• Led policy-as-code implementation using Checkov, OPA, and AWS Config delivering continuous PCI-DSS compliance validation across all infrastructure changes.
• Built FinOps dashboards using Lambda and Cost Explorer APIs, identifying and eliminating waste to reduce operational expenditure by 30%.
• Mentored mid-level engineers on AWS IaC best practices, PR review processes, and incident response discipline.

Infrastructure and security guidance for humanitarian cloud estates: Terraform and GitHub Actions standardisation, GDPR-aligned controls, and operational visibility.

• Advised on Terraform standardisation and GitHub Actions automation to achieve repeatable, auditable cloud deployments aligned to GDPR and humanitarian data-protection standards.
• Strengthened observability and data-protection frameworks, improving platform visibility in high-stakes humanitarian operational contexts.
• Contributed risk assessments, infrastructure documentation, and security control guidance for cloud deployments supporting emergency response missions.

Modular Terraform platforms, CI/CD, centralised monitoring, and hardened Linux production estates across AWS.

• Replaced ad-hoc deployment processes with modular Terraform platform components and CI/CD pipelines, reducing manual provisioning effort by 60% and eliminating configuration drift across all environments.
• Delivered centralised monitoring, log pipelines, and golden-signal alerting improving service visibility and incident detection speed by 45%.
• Standardised incident response runbooks and on-call workflows, cutting MTTR by 40% and establishing consistent recovery patterns across services.
• Hardened Linux-based production environments, resolving persistent OS-level, networking, and resource-utilisation issues to reduce incident recurrence.

Sole senior technical ownership on AWS/GCP architecture, landing zones, GitOps, DevSecOps in regulated contexts, and FinOps outcomes for fintech and enterprise.

• Designed AWS multi-account landing zones and GCP project hierarchies with consistent IAM, VPC architecture, and governance models for fintech and enterprise clients.
• Authored Terraform and Argo CD frameworks reducing environment provisioning time by 60% across AWS client platforms.
• Delivered DevSecOps pipelines with Checkov, Trivy, and Snyk integrated into AWS CodePipeline and GitHub Actions meeting PCI-DSS and GDPR requirements with drift detection and automated rollback.
• Introduced FinOps cost optimisation workflows (Savings Plans, rightsizing, Cost Explorer dashboards) saving clients £3,000–£5,000/month while maintaining or improving availability.
• Operated as sole senior technical decision-maker on AWS architecture, vendor selection, and risk trade-off analysis.