About

Engineering repeatable, auditable infrastructure & automation.

I build and operate the internal platforms other teams ship on. Over 25+ years that has meant production work across AWS, Azure, and GCP — Kubernetes, Terraform, and CI/CD at organization scale — with unusual depth in identity and PKI: OIDC federation and workload identity, secrets lifecycle, and certificate/TLS architecture carried over from seven years as a Cisco security and certificates SME. Today I own the Jenkins and GitHub Actions ecosystem behind a manufacturing-scale release process. Before that I built an Azure/AKS platform as Terraform, eliminated long-lived cloud credentials from CI, and wrote the destroy-approval gates that keep a bad plan from taking down production. Across healthcare, finance, manufacturing, and media, the goal has stayed the same: make infrastructure repeatable, auditable, and safer for the next engineer who has to touch it.