Writing

Field notes

Practical write-ups on platform engineering, cloud security, IaC, and reliability. Things I've learned building real systems in regulated environments.

Platform Engineering10 Feb 2026· 5 min read

IaC governance across 15+ pipelines without becoming a bottleneck

How I built a shared Terraform module library and pipeline template system that made secure patterns the default for every engineering squad — without centralising all decisions through one person.

Security & IAM22 Jan 2026· 6 min read

Running HashiCorp Vault Enterprise as a global platform at PayPal

Architecture decisions, RBAC model design, and the real lessons from operating a secrets management platform across GCP and AWS for international engineering teams.

Security & IAM15 Dec 2025· 5 min read

Least-privilege IAM for Azure SQL — automation over good intentions

Why RBAC provisioning for database access should never be a manual process, and how I cut 85% of the overhead using Python, C#, and the Azure API.