download pdf

Career Profile

Seasoned engineer with nearly 20 years of experience designing, operating and leading teams to deploy applications for businesses of varied sizes. Expertise in cloud strategy, cloud security and Kubernetes, employing Agile, DevOps, reliability and chaos engineering practices to deliver scalable, robust systems that are efficient and pleasurable to use and maintain. Contracting through Gremlin LTD since 2018.

Experience

Managing Consultant · Gremlin LTD

2018 to present

IT consultancy providing engineering resources across AWS, Azure, Kubernetes, Linux and Windows. Client engagements:

Senior DevOps Engineer · Kennek

GitOps-based Kubernetes deployment architecture with minimal manual intervention; custom Operators and Resources. Implemented a secure AWS account hierarchy with access elevation via Azure PIM. Extensive Linux, Node.js and Python.

$ AWS · EKS · K8s Operators · GitOps · GitHub Actions · Azure PIM

Senior Engineer · Cambridge Broadband Network Group

Engaged to cover a departing permanent staff member. Accelerated Kubernetes and OpenShift adoption, worked with clients on implementation issues, and assisted in the architecture of internal PKI solutions on the platform.

$ On-Prem · GCP · OpenShift · Kubernetes · PKI · GitOps · Helm · Terraform

Principal Cloud Engineer · Aer Lingus

Migrated the contact centre to Salesforce and Amazon Connect. Built voice-driven menus with Lambda and Lex, brought manually provisioned infrastructure under Terraform and CloudFormation, and designed self-service SMS/WhatsApp journeys with SNS and Pinpoint.

$ AWS · Amazon Connect · Lambda · Lex · Terraform · Python

Principal Engineer · VectaBass

Brought in to accelerate the adoption of infrastructure as code and create deployment pipelines, across AWS, on-prem and AI workloads.

$ AWS · On-Prem · Ollama · OpenAI · Anthropic · Lambda · Terraform · GitHub Actions · Python

DevOps Engineer · WorldPay

Data-lake infrastructure and security with secure, role-based access to PII. Upgraded legacy Terraform, designed least-privilege cloud policies, created Kubernetes clusters with RBAC, and developed GitOps deployments.

$ AWS · Terraform · Kubernetes · RBAC · GitOps

Senior Developer · BigBear.ai

OS provisioning for national-security-critical equipment using PXE and Ansible on Linux. Redesigned backup solutions for robust data lifecycle management, made platform installs reproducible, and led the migration to GitHub with Actions-based CI/CD.

$ Linux · PXE · Ansible · GitHub Actions

Senior Engineer · Ministry of Justice

Brought in as a DevOps specialist. Improved automated deployment pipelines, removing manual intervention, and created a number of GitHub Actions to improve integration between GitHub and Azure / Azure DevOps.

$ Azure · Azure DevOps · GitHub Actions · Terraform · Python

Site Reliability Engineer · Mention Me

Modernised legacy cloud infrastructure to secure infrastructure-as-code. Created a Kubernetes environment and deployment pipeline to raise development velocity; upgraded Elasticsearch from an EOL version with minimal downtime.

$ AWS · Terraform · Kubernetes · Elasticsearch

Staff Platform Engineer · Fnality International

Comprehensive security audits and management of complex Kubernetes clusters. Designed and developed public key infrastructure, significantly strengthening the security architecture, while training technical and non-technical colleagues.

$ Kubernetes · PKI · Blockchain · Security auditing

Lead DevOps Engineer · Vive (GH Bank)

Secure cloud-native architecture and internal security tooling for a bank. Automated GitOps for Kubernetes and AWS, led DevOps and DevSecOps teams, optimised cloud costs, re-architected Spring microservices, and designed controlled-egress proxying from AWS.

$ AWS · Kubernetes · GitOps · Spring · DevSecOps · Cost optimisation

Earlier Career

Head of DevOps · CallSign

Senior Software Engineer / SRE · Ocado Technology

Principal Engineer / SRE · Crownpeak

Engineer · Cloudflare

Senior Linux Engineer / DevOps · Rackspace

Senior Engineer · Capita

Senior Engineer · London Councils

Support Engineer · Red Bee Media

Deployment Engineer · Ministry of Justice

System Administrator · BJ Computers

Open Source

terraform-provider-pocketid Terraform provider for Pocket-ID: OIDC clients, users and groups as code. On the Terraform Registry.
ansible-collection-pocketid Ansible collection managing Pocket-ID users, groups, OIDC clients, SCIM and secrets, with zero runtime Python dependencies.
action-approve-pr GitHub Action gating CI jobs on human approval via PR comment reactions, bound to the head commit SHA.
npm-docker-sync Rust service syncing Docker labels into Nginx Proxy Manager, with Let's Encrypt via Cloudflare DNS-01.
aws-ssh-config Generates an SSH config from the AWS EC2 API.
ansible-nebula Ansible role to deploy Nebula, a scalable overlay networking solution.
buildsociety Community org producing quality Docker images: Nebula, cloudflared, Wrangler, Terragrunt and more.
docker-base Minimal, hardened base container images: Alpine, Wolfi, Ubuntu and distroless variants from ~3MB.