Senior DevOps &
Platform Engineer

Technical lead for cloud security and DevSecOps across an Azure-hosted, HITRUST-aligned SaaS platform, governing multiple engineering squads.

• ▸Defined and standardised DevSecOps standards across 15+ Azure DevOps pipelines — reusable templates, approval gates, Snyk scanning, and integrated TLS enforcement.
• ▸Migrated legacy ARM-based infrastructure to Terraform/OpenTofu; reduced technical debt and cut environment provisioning time significantly.
• ▸Automated RBAC provisioning for Azure SQL and service accounts using Python and C#, cutting manual access-change effort by ~85% and dramatically improving audit trail quality.
• ▸Led hub-and-spoke networking architecture migration using Terraform, improving security segmentation across multiple environments.
• ▸Reduced MTTR by an estimated 30% through improved Azure Monitor, Application Insights, and KQL-based alerting and dashboards.
• ▸Reviewed 100+ infrastructure and DevOps pull requests; mentored engineers on IaC patterns, secure design, and CI/CD standards.

Owned the global HashiCorp Vault Enterprise and Jenkins platforms serving multiple international engineering teams across GCP and AWS.

• ▸Architected and operated HA Vault Enterprise and Jenkins clusters using Terraform, Terragrunt, Ansible, and Packer across GCP and on-prem.
• ▸Led migration of CI/CD from TeamCity to Jenkins — introduced shared pipeline libraries, dynamic build agents, and security-focused templates.
• ▸Implemented security-critical Jenkins pipelines to protect customer-facing web properties: ACL IP blocking, AWS Route53/IAM/EC2 automated workflows.
• ▸Built a full observability stack integrating Prometheus, Grafana, Nagios, Splunk, and Slack for platform health, access anomalies, and security alerting.
• ▸Reduced operational toil by ~11% through Python and Ansible automation of previously manual, error-prone platform tasks.

Managed 50+ Linux servers and built CI/CD pipelines for web applications, with a focus on security hardening and automation.

• ▸Built CI/CD pipelines for web-based applications with integrated testing and security checks, reducing manual change risk.
• ▸Implemented HAProxy and Apache web stacks on Kubernetes clusters on AWS for scalable, resilient customer-facing services.
• ▸Used Ansible as configuration-as-code for secure server builds, reducing configuration drift and speeding patch rollouts.

Designed and maintained local and wide-area networks, 50+ on-prem servers, and built SQL/Power BI reporting on large operational datasets.

• ▸Owned day-to-day systems administration: account management, patching (inc. SELinux), capacity planning, and incident response.
• ▸Built monitoring and alerting for business-critical processes, reducing unplanned downtime across the on-prem estate.
• ▸Delivered SQL/Power BI reporting solutions on 100k+ record datasets for stakeholder operational insight.