Platform foundation for a subscription business
Sole platform engineer on a consumer SaaS: organisation landing zone in Pulumi, factory components giving every service observability, cost guards, IAM and secrets by default.
Operating model for an infrastructure team
Interrupt-driven support replaced with a chat-based intake on a Kanban board, and documentation standards raised so engineers resolved the common cases themselves.
Security, cost and release engineering in insurance
Zero standing access: Workload Identity Federation for CI, entitlements for humans, no service-account keys. CI/CD runtime cut by 60%.