Infrastructure • Technical Leadership • Project Delivery

Engineering reliable infrastructure throughleadership and practical delivery.

I combine more than 20 years of infrastructure and operational experience with technical leadership, stakeholder coordination, structured delivery and continual development across cloud, containers, monitoring, automation and security.

  • Linux
  • Infrastructure
  • Project Delivery
  • Cloud
  • Monitoring
  • Security

Project Delivery Highlights

Technical change delivered through planning and coordination.

My experience includes defining technical requirements, coordinating teams and suppliers, managing dependencies and risks, supporting implementation and ensuring successful operational handover.

01

Service Transition

Offshore Patching Transition

Planned and led the transfer of routine infrastructure patching to an offshore provider while managing security, knowledge-transfer, cultural and time-zone challenges.

  • Planning
  • Supplier management
  • Risk management
  • Operational handover
02

Infrastructure Change

IT Environment Separation

Coordinated technical workstreams and third-party suppliers to separate a shared IT environment so two organisations could operate independently.

  • Scope
  • Dependencies
  • Stakeholders
  • Change delivery
03

Technical Delivery

DrayTek SIM Upgrade Programme

Provided technical leadership and escalation support during a structured upgrade programme affecting deployed network equipment.

  • Technical leadership
  • Implementation planning
  • Issue management
  • Service continuity
04

Service Improvement

Grafana Monitoring Proof of Concept

Developed and communicated a monitoring proof of concept to improve service visibility, operational understanding and proactive support.

  • Requirements
  • Proof of concept
  • Stakeholder communication
  • Continuous improvement

Engineering Philosophy

Successful delivery combines technology, planning and communication.

My approach is to build solutions that are secure, observable, maintainable and well documented.

Technical success depends on more than implementation. It requires clear objectives, stakeholder alignment, risk management, effective communication and a controlled transition into operational support.

I aim to leave every platform, process and team in a stronger position than before the work began.

Engineering Journey

Two decades of infrastructure experience and continual development.

From first-line support and enterprise UNIX systems through technical leadership, cloud platforms, containers, observability and security.

Explore my Engineering Journey
FoundationSupport and Enterprise IT
SpecialismUNIX and Red Hat Linux
LeadershipInfrastructure and Technical Delivery
Modern EngineeringCloud, Containers and Automation
Current DirectionPlatform and Cloud Engineering

Featured Engineering Projects

Real engineering projects.

Practical infrastructure projects demonstrating platform engineering, observability, cloud technologies, automation and operational resilience.

Security Operations

SecOps

A joined-up security operations capability combining threat detection, vulnerability management, DNS filtering and evidence-led remediation.

  • CrowdSec
  • Greenbone
  • Suricata
  • Pi-hole
View project →

CI/CD & Platform Delivery

Jenkins Delivery Pipeline

An end-to-end delivery pipeline that tests, packages, containerises, security-scans, publishes and deploys a Java application to K3s with automated health verification and rollback.

  • Jenkins
  • Gradle
  • Docker
  • Trivy
View project →

Vulnerability Management

Greenbone Vulnerability Management

A managed vulnerability-management workflow that turns Greenbone scan evidence into prioritised, reviewable remediation for the Linux homelab.

  • Greenbone
  • OpenVAS
  • Docker Compose
  • Prometheus
View project →

Security Engineering

CrowdSec Security Platform

A production-style threat detection and automated firewall enforcement platform with Prometheus metrics, Grafana dashboards and community threat intelligence.

  • CrowdSec
  • Linux Firewall
  • Prometheus
  • Grafana
View project →

Container Platforms

Docker Engineering Platform

A self-hosted container platform with protected secret delivery, encrypted recovery, reverse proxying, authentication, monitoring, security and automated application deployment.

  • Docker
  • Docker Compose
  • Nginx Proxy Manager
  • Authelia
View project →

Kubernetes

Kubernetes Homelab

A practical K3s environment with encrypted datastore Secrets, two-recipient SOPS recovery, container orchestration, load balancing, ingress and Git-based deployment.

  • K3s
  • Kubernetes
  • MetalLB
  • Traefik
View project →

Infrastructure Resilience

Disaster Recovery Platform

A practical recovery framework combining Restic, passphrase-encrypted detached SOPS identity recovery, automation, monitoring and independent restoration evidence.

  • Restic
  • Linux
  • Docker
  • Raspberry Pi
View project →

Recent Engineering Highlights

Continual development through practical delivery.

Recent work combines infrastructure engineering, automation, observability, cloud development and professional documentation.

01

Engineering Portfolio

Designed and deployed a data-driven Astro portfolio using Docker and Nginx.

Explore →
02

Public Security Monitoring

Published a sanitised Grafana dashboard showing live CrowdSec and firewall activity.

Explore →
03

AWS Infrastructure as Code

Developed Terraform remote state and reusable cloud infrastructure components.

Explore →
04

Kubernetes Engineering

Built a K3s environment using MetalLB, Traefik and Git-based deployment practices.

Explore →

Engineering Lab

The platform behind the projects.

A continuously evolving environment combining Linux, Docker, Kubernetes, cloud engineering, observability, security and automated delivery.

Explore the Engineering Lab
PlatformDocker and Kubernetes

Containerised application and orchestration environments.

ObservabilityPrometheus and Grafana

Metrics, dashboards, logs and operational alerts.

SecurityCrowdSec and Authelia

Threat detection, firewall enforcement and MFA.

AutomationGit, Terraform and CI/CD

Version-controlled and repeatable engineering workflows.

Platform Architecture

One connected engineering environment.

Edge protection, identity, containers, applications, monitoring and security controls work together as a complete operational platform.

Explore the architecture
EdgeCloudflare
AccessNginx and Authelia
PlatformDocker and Kubernetes
ObservabilityPrometheus and Grafana
SecurityCrowdSec and Firewall