work
Case studies
Real problems, framed honestly: the constraints, the decision, and what actually happened.
Replacing enterprise PAM across the whole engineering org
Led the end-to-end replacement of an enterprise privileged-access tool with StrongDM for the entire engineering workforce — owning both the architecture and the delivery, and turning access provisioning into a self-service, GitOps-driven workflow.
Shared CI/CD templates used by 50+ repositories
Built the team's shared GitLab CI templates and CI images — now consumed by 50+ repos — eliminating pipeline duplication, including a Terraform version-agnostic image that lets every repo pin its own version from one shared tag.
A secure AWS platform for a greenfield public-sector programme
Led a team of 8 building a large-scale, secure multi-tenant AWS platform from scratch — the network foundation, an inspected perimeter, and the Kubernetes clusters application teams deployed onto.