AI, infrastructure, security, and networking. I design it, migrate it, harden it, and keep it running in production. Senior, hands-on, and accountable for the outcome, not the slide deck.
Most consultants hand you a recommendation. I hand you a running system, with monitoring, documentation, and a runbook your team can actually use.
LLM features wired into your real systems, not demo notebooks.
Azure-first architecture for estates that mix cloud, on-prem, and legacy.
Practical controls that hold up in an audit and in an incident.
The messy middle between offices, clouds, and datacenters.
A sample of recent production engagements. References available on request.
Inventoried every host, dependency, and public IP for a move to a new physical datacenter. Sequenced the cutover around the riskiest unknowns (the database tier and the public IP block) so the business case came before the forklift.
Deployed eBPF-based tracing (Grafana Beyla) across three production API hosts under a strict constraint: no code changes and no restarts. Went from no visibility to full request traces in days.
Put Entra ID single sign-on in front of internal web apps that were never built for it, using oauth2-proxy and nginx. One identity, MFA enforced, no application rewrites.
Wrote step-by-step runbooks for the scenarios that matter: compromised accounts, phishing reports, offboarding, ransomware first response. Each one walked against the real environment, so the on-call person can act at 2 am without guessing.
Built and operate a production Discord bot for a language-learning community: AI conversation practice, an XP and leveling system, scheduled homework delivery by DM, and a web admin portal so teachers manage everything without touching code. Runs 24/7 on a cloud VM.
Designed a parallel-run migration of a 27-account trading-partner SFTP platform from on-prem to Azure, reusing host keys and credentials so partners cut over without noticing.
Built an Azure Virtual Desktop environment end to end: host pools, golden images, FSLogix profile containers, and Entra ID sign-in with MFA. Replaced legacy VPN-and-RDP access with managed desktops that autoscale, so idle hosts stop billing.
One to two weeks. I dig into your environment and deliver written findings, a risk ranking, and a plan you can execute with or without me.
A migration, an SSO rollout, an AI integration. Scoped up front, priced for the outcome, done when it runs in production.
A standing block of senior engineering time for teams that need depth on tap without a full-time hire.
Tell me what you're dealing with and propose three times that work for you. I'll confirm one by email within one business day.
Got it. I'll review your times and confirm one by email within one business day.