Platform Engineering
11 min readCI/CD standardisation across application teams
Reusable GitHub Actions workflows, Environment-scoped OIDC, and digest promotion so several teams ship without each inventing a private release path.
Notes
Practical notes from cloud architecture, platform engineering, security, and production operations.
Featured
Platform Engineering
8 min readTerraform module patterns for multi-environment cloud estates
Reusable Terraform module boundaries, environment composition, state management, and hand-off patterns for repeatable cloud platforms.
Cloud Architecture
5 min readMulti-Cloud Network Topology Decisions
Why VPC and VNet models diverge more than any other control across AWS, Azure, GCP, and Alibaba Cloud, and how to decide what to standardise versus what to leave provider-native.
Security and Compliance
9 min readRBAC patterns for production cloud environments
Role design, automation identities, access review, and break-glass controls for auditable production access across shared cloud estates.
Security and Compliance
8 min readGolden Image Architecture for Linux Baselines
An operating model for Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and automatable hardening checks across AWS, Azure, and GCP.
All notes
Zero-downtime database migrations with GitHub Actions
Zero-downtime, rollback-safe database migrations with GitHub Actions. Expand, drain, contract: the schema, queue, and config changes a digest rollback cannot undo.
CI/CD standardisation across application teams
Reusable GitHub Actions workflows, Environment-scoped OIDC, and digest promotion so several teams ship without each inventing a private release path.
Terraform module patterns for multi-environment cloud estates
Reusable Terraform module boundaries, environment composition, state management, and hand-off patterns for repeatable cloud platforms.
Why Is My WordPress Admin Slow? A Technical Diagnosis Guide
A systematic approach to diagnosing slow WordPress admin. Covers all common causes: plugin outbound HTTP calls, WP_HTTP_BLOCK_EXTERNAL, Heartbeat API, autoloaded options, WP-Cron, PHP version, OPcache, object cache, and slow database queries.
Multi-Cloud Network Topology Decisions
Why VPC and VNet models diverge more than any other control across AWS, Azure, GCP, and Alibaba Cloud, and how to decide what to standardise versus what to leave provider-native.
RBAC patterns for production cloud environments
Role design, automation identities, access review, and break-glass controls for auditable production access across shared cloud estates.
Golden Image Architecture for Linux Baselines
An operating model for Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and automatable hardening checks across AWS, Azure, and GCP.
Practical multi-cloud cost optimisation
An operating model for right-sizing, reserved capacity, and cost ownership across AWS, Azure, and GCP without compromising production reliability.
Cloud Migration Without Operational Risk
A migration operating model for landing zones, ownership boundaries, IaC baselines, cutover planning, and cost control before workloads move to the target cloud.
Block outgoing URL calls with iptables on Linux
Use iptables string matching to block specific outbound HTTP paths, understand HTTPS limits, and choose safer egress controls when needed.
Get in touch
Start a conversation
Tell me what you are working on.
Start a conversation