Skip to content
Architectural cross-section of a four-tier tower with operations, programme, platform, and an unfinished principal command gallery, one figure climbing the external stairway toward the top

About

The ops leader who learned to build the platform

I started in IT operations and programme delivery. I now design and operate the infrastructure that product teams build on. The thread connecting those phases is simple: I kept finding systems that depended on heroics, so I learned to build systems that don't.

My IT career started in operations management, owning Azure governance, Entra ID hardening, and procurement controls for a 130+ person organisation. That work taught me what happens when platform decisions are left implicit: access drifts, spend surprises, and incidents recur because the system rewards restoration over prevention. I fixed what I could with policy and process, then led a £1M transformation programme that rebuilt the organisation's systems, culture, and delivery cadence over 18 months. That programme taught me how to govern complex change without losing the trust of the people doing the work.

What it didn't teach me was how to build the infrastructure itself. So I designed and operated a production infrastructure R&D environment: bare-metal Proxmox, a k3s Kubernetes cluster, self-hosted GitLab CI/CD, and a full Prometheus/Grafana/ Loki/Alertmanager observability stack. Twenty-plus services, entirely declarative, targeting 99.9% availability. That platform runs this site, a volunteer cycling campaign group's public infrastructure, and the observability tooling I depend on daily. It proved the architectural patterns I now deploy at work—and proved them at scale, under real operational constraints.

I now work as a platform engineer at Buro Happold, designing Azure infrastructure that product teams self-serve through golden-path Terraform modules, Azure Verified Modules, and policy-driven guardrails. The pattern I proved in independent infrastructure R&D, Terraform declares intent, Ansible consumes a derived inventory, layers compose through explicit contracts, is the same pattern I deploy at work. Only the providers change. That is not a coincidence. Platform engineering is not about the substrate; it is about the contracts between layers.

I am working toward a principal platform engineer role. Not because I want a title, but because the problems I care about, governance that scales without heroics, platforms that teams trust, cost decisions made at architecture time rather than invoice time, sit at that scope. I have built the foundations across operations, programme delivery, and hands-on engineering. The next step is setting the direction.

How I decide when things conflict

  • Clarity over ambiguity.
  • Recoverability over optimisation.
  • Sustainable platforms over short-term heroics.
  • Cost decisions at architecture time, not invoice time.
  • Governance that scales without depending on the person who set it up.

If a system or process cannot be explained simply, owned clearly, and recovered predictably, it is not ready to scale.

Architectural cross-section of a five-span viaduct with progressively refined segments from rough monitoring booth to precision survey platform, one figure walking along the connecting walkway

The career arc

2019–2023 · PMO & IT Operations Manager

Learning what breaks when ownership is unclear

Owned Azure subscription structure, Entra ID conditional access, and RBAC for 130+ staff. Stabilised core services during modernisation. Saw firsthand how MSP-driven environments reward ticket closure over root-cause prevention, and how inherited privilege and inconsistent tagging create governance drift that nobody notices until an audit. The lesson: policy enforced at the platform boundary beats discipline left to individuals.

2023–2025 · £1M Transformation Programme Lead

Learning to govern change without burning people out

Led a six-workstream programme covering infrastructure, tooling, culture, brand, systems, and operations, delivered on time and on budget with zero failed workstreams. Built the governance model: steering cadence, risk management, benefits tracking, change control. Coached workstream leads through ambiguity. Shipped a new website, CMS, commerce integration, and BI tooling. The governance model stayed in place after programme close. The lesson: cadence beats effort, and transparency builds the trust that sustains momentum.

2024–present · Independent Infrastructure Architect

Building production infrastructure to prove architectural patterns

Designed and operate a bare-metal Kubernetes platform on Proxmox from scratch: Terraform VM provisioning with role and tier abstractions, Ansible configuration management, k3s cluster formation driven by a derived inventory, self-hosted GitLab CE with isolated CI/CD runners, zero-trust VLAN segmentation, and full observability stack. Running production workloads for real users. The lesson: the constraint is the architecture, and patterns transfer between substrates—proving the approach that I now apply at work.

2025–present · Volunteer platform engineer, Cycle Kirklees

Proving the pattern works without a budget

Architected and built a self-hosted production platform for a volunteer cycling campaign group: Eleventy static site with Sveltia CMS, Express/TypeScript signup gateway with Zod-validated state machines, self-hosted domain email, and full observability, all at £0 marginal infrastructure cost. Gave non-technical committee members a git-based editorial workflow with zero infra knowledge. The lesson: a £0 budget forces the same architectural decisions that good FinOps demands at cloud scale.

2026–present · Platform Engineer, Buro Happold

Bringing the pattern to Azure at work

Design and operate Azure infrastructure that product teams build on without filing tickets. Own the Terraform module library and IaC pipeline: state locking, plan/apply separation, environment promotion, golden-path modules that give teams compliant foundations without writing them from scratch. Architected an Unreal Engine pixel streaming platform on GPU-enabled VM scale sets that cut compute spend by 45%. The homelab pattern transfers; only the providers change.

Architectural cross-section of a single integrated structure combining four functional zones around a central command console, one figure surveying all four zones at once

What I bring that most platform engineers don't

Operational empathy

I ran IT operations for 130+ staff. I know what it feels like when the platform lets you down at 3am, and I know what it costs when root causes go unaddressed because the incentives reward restoration over prevention. I design platforms from the on-call experience backward.

Programme-level governance

I delivered a £1M transformation programme on time and on budget. I can sit in a steering committee, translate engineering decisions into risk registers, and keep delivery grounded in real operational constraints. Platform engineering at principal scope is as much governance as it is code.

FinOps from the architecture up

I ran a production platform at £0 marginal cost. That constraint taught me exactly where the break-even points are between self-hosting and managed services, the same calculation a platform team makes when deciding whether to offer a managed database as a golden path or let teams self-serve. I make cost-visible decisions at architecture time, not invoice time.

Hands-on across the full stack

Terraform, Ansible, Kubernetes, GitLab CI/CD, Prometheus/Grafana/Loki, Traefik, Azure Policy, Entra ID, RBAC, Bicep, Azure Verified Modules. I have built every layer myself, from the hypervisor to the alerting. When I advise on architecture, I am drawing on systems I have broken and rebuilt, not frameworks I have read about.

Architectural cross-section of an elevated drafting platform overlooking a landscape of existing structures and an empty foundation pad, one figure at the table planning the next build

What I am working toward

Principal platform engineer. The problems I care about, governance that scales without heroics, platforms that teams trust, cost decisions made at architecture time, operating models that survive the people who built them, sit at that scope. I have the operations background, the programme delivery experience, and the hands-on engineering depth. What I am building now is the judgement to set platform direction for an organisation, not just execute it.

In progress

CKA, Certified Kubernetes Administrator. Deepening my Kubernetes fluency from hands-on to certified.

Next

AZ-305, Azure Solutions Architect Expert. Moving from Azure Administrator to architect-level design authority.

Stack & certifications

Cloud & Infrastructure

Azure Terraform Bicep Azure Verified Modules Proxmox Docker k3s Kubernetes Service Mesh (Istio, Linkerd) Entra ID

CI/CD & Automation

GitLab CI ArgoCD (GitOps) Ansible Terraform Helm Docker Compose Traefik Declarative Deployment

Observability

Prometheus Grafana Loki Alertmanager Uptime Kuma

Platform Governance & FinOps

Azure Policy OPA/Gatekeeper RBAC FinOps Cost Analysis Infrastructure as Code Patterns Agile GDPR

Security & Secrets Management

HashiCorp Vault Sealed Secrets Secret Rotation Zero-Trust Access

Continuous professional development is how I keep my thinking sharp and practical. Each certification fills a gap I identified in the field, not a box on a CV.

AZ-104

Microsoft Certified: Azure Administrator Associate

CKA (In progress)

Certified Kubernetes Administrator

AZ-900

Microsoft Certified: Azure Fundamentals

Agile Practitioner

Delivery governance and adaptive planning

Selected writing

I write about the platform as I build it. These posts trace the arc from self-hosting foundations to the patterns that transfer between bare metal and Azure.