Professional record / 2021 — present

Build it.
Operate it.
Improve it.

Five years across platform engineering, cloud transformation, high-availability operations, security governance, and the emerging discipline of production AI infrastructure.

Mar 2025 — Present

AI Platform Engineer

Segen

Platform & AI infrastructure work: IaC modernization, multi-cloud resilience, security governance, and AI agent tooling for production.

  • Architected migration from legacy Bicep to a Terraform/OpenTofu ecosystem — 5 reusable modules, 12 deployment guides, deployment cycles sped up 15%, infrastructure tickets down from 3 days to self-service.
  • Engineered multi-cloud HA with AWS as secondary provider: automated failover for critical Azure workloads, regional backups via Azure + Rubrik.
  • Led infrastructure remediation to achieve SOC 2 and ISO 27001; deployed centralized IAM, automated access governance, and HashiCorp Vault for secrets + PKI.
  • Migrating legacy stacks to Kubernetes (AKS) with strict RBAC integrated with Entra ID for least-privilege developer access.
  • Built a production IaC drift-detection system running twice daily, scoped to Azure resources.
  • Designed least-privilege access for AI agents (read-only by default via resource-group-scoped service principals) and an SRE review agent that runs terraform plan on PRs with a red/amber/green severity traffic-light.
  • Standardised API exposure via Azure APIM, Application Gateway, and internal load balancers.

Feb 2024 — Feb 2025

Platform / DevOps Engineer (Contract)

RES

Enterprise infrastructure at scale: 100+ servers, 4,000+ endpoints, containerized releases, HPC administration.

  • Managed an enterprise IaaS environment of 100+ servers and 4,000+ endpoints; custom Terraform module system accelerated resource creation 40%, migration pipelines cut migration time 50%.
  • Achieved zero-downtime releases by containerizing legacy apps into Kubernetes (AKS) with CI/CD on GitHub Actions and Azure DevOps.
  • Designed and enforced RBAC + security governance across hybrid Active Directory and Entra ID.
  • Implemented AI-powered ticket classification (criticality/priority) and an AI ticket auto-classification system.
  • Administered 30+ RHEL HPC servers for computational workloads.

Mar 2023 — Jan 2024

System & Cloud Engineer

Partnership Education Limited

Cloud migration, cost optimization, and high-availability operations across multiple school sites.

  • Cut OPEX by migrating on-premise environments to Azure/GCP with Terraform, auto-decommissioning idle services.
  • Maintained 99% infrastructure uptime as first responder for outages, upgrades, and backup recovery.
  • Automated Linux patching with Ansible + Bash; containerized apps with Docker.
  • Upgraded legacy Palo Alto/Juniper/Netgear to Cisco Meraki for major clients.

Jul 2022 — Mar 2023

Infrastructure Support Engineer

Merkur Casino UK

Support for 300+ internal users across multiple venues; Azure governance and DR design.

  • Resolved 15+ tickets/day supporting 300+ colleagues; managed AD credentials and group policies.
  • Engineered a per-country Azure tenant structure, cutting SLA response times 50% via regional isolation.
  • Designed failover + DR using Azure File Share with onsite and offsite redundancy.
  • Automated VM provisioning in test environments with Python.

Mar 2021 — Jan 2022

Hardware & Infrastructure Engineer

Euronet Worldwide

ATM hardware engineering with remote diagnostics and automation across the UK.

  • Diagnosed ATM hardware remotely over SSH, reducing on-site visits.
  • Configured secure network settings on ATM terminals for financial transactions.
  • Wrote Bash/Python scripts to automate diagnostics and system health checks.