Platform Engineering
8 min readTerraform module patterns for multi-environment cloud estates
Reusable Terraform module boundaries, environment composition, state management, and hand-off patterns for repeatable cloud platforms.
Notes
Practical notes from cloud architecture, platform engineering, security, and production operations.
Featured
Cloud Architecture
5 min readMulti-Cloud Network Topology Decisions
Why VPC and VNet models diverge more than any other control across AWS, Azure, GCP, and Alibaba Cloud, and how to decide what to standardise versus what to leave provider-native.
Security and Compliance
9 min readRBAC patterns for production cloud environments
Role design, automation identities, access review, and break-glass controls for auditable production access across shared cloud estates.
Security and Compliance
8 min readGolden Image Architecture for Linux Baselines
An operating model for Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and automatable hardening checks across AWS, Azure, and GCP.
All notes
Terraform module patterns for multi-environment cloud estates
Reusable Terraform module boundaries, environment composition, state management, and hand-off patterns for repeatable cloud platforms.
Why Is My WordPress Admin Slow? A Technical Diagnosis Guide
A systematic approach to diagnosing slow WordPress admin. Covers all common causes: plugin outbound HTTP calls, WP_HTTP_BLOCK_EXTERNAL, Heartbeat API, autoloaded options, WP-Cron, PHP version, OPcache, object cache, and slow database queries.
Multi-Cloud Network Topology Decisions
Why VPC and VNet models diverge more than any other control across AWS, Azure, GCP, and Alibaba Cloud, and how to decide what to standardise versus what to leave provider-native.
RBAC patterns for production cloud environments
Role design, automation identities, access review, and break-glass controls for auditable production access across shared cloud estates.
Golden Image Architecture for Linux Baselines
An operating model for Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and automatable hardening checks across AWS, Azure, and GCP.
Practical multi-cloud cost optimisation
An operating model for right-sizing, reserved capacity, and cost ownership across AWS, Azure, and GCP without compromising production reliability.
Cloud Migration Without Operational Risk
A migration operating model for landing zones, ownership boundaries, IaC baselines, cutover planning, and cost control before workloads move to the target cloud.
Block outgoing URL calls with iptables on Linux
Use iptables string matching to block specific outbound HTTP paths, understand HTTPS limits, and choose safer egress controls when needed.
How a WordPress Plugin Added 16 Seconds to Every Admin Page Load
A real case: Modern Events Calendar (MEC) was responsible for 28 out of 31 outbound HTTP calls and 16 seconds of additional latency on every WordPress admin request. How it was found and stopped.
Serve Let's Encrypt ACME challenges on Nginx
Fix Nginx 404 errors on .well-known/acme-challenge during Let's Encrypt HTTP-01 validation with webroot config and renewal checks.
Get in touch
Interested in working together?
I take on a small number of engagements at a time. Tell me what you are working on and I will tell you honestly if I am the right fit.
Start a conversation