$ ls / Areas of practice
Engineering with the whole system in view.
Security, infrastructure and software meet in the same system. Local operation, privacy and clear data boundaries guide how those parts are designed, operated and changed.
Security architecture
Understand how identities, networks and applications meet. Define the boundaries, then turn those decisions into changes a team can apply and maintain.
- Identity and access design
- Network segmentation and zero trust architecture
- Cloud security and hardening
- IT and operational technology boundaries
Platform engineering
Work on the infrastructure behind the application: how it is provisioned, connected, observed and recovered. Linux, SDN, hybrid cloud and repeatable automation are central to this work.
- Linux and cloud infrastructure
- Network and software-defined network design
- Infrastructure as code and operational automation
- Container platforms and reliability
Security in development
Bring useful checks closer to the change. Give people enough context to understand a finding, decide what to do and review the result.
- Security tooling and workflow integration
- Code, secret, dependency and infrastructure review
- Developer-facing evidence and documentation
- Checks around the history being pushed
AIOps and MLOps
Operational telemetry, model delivery and evaluation, with automation people can inspect and control.
Connect operational telemetry and assisted triage with model delivery, evaluation and monitoring. Keep changes reviewable, measure behavior and plan rollback before automation takes action.
Private/offline AI infrastructure
Local model serving, GPU capacity and data boundaries on infrastructure you control.
Design local inference and GPU infrastructure around the workload, data sensitivity and available capacity. Plan model storage, access, updates and offline operation so external dependencies and data flows are explicit.
Field experience / 2026 Winter Games
Follow an incident
across the boundaries.
Hewlett Packard Enterprise
Senior Technology Operations Specialist
External consultant, December 2025 to March 2026
Live broadcast infrastructure depends on more than a working link. Routing, wireless, DNS, DHCP and security telemetry all help explain what is happening.
External consulting for HPE in the Technology Operations Centre supported the 2026 Winter Games' broadcast infrastructure. The work included incident response, Juniper routing and switching, Mist wireless, Infoblox DNS/DHCP and observability.
Python correlation tools connected the Mist, Infoblox and QRadar APIs, bringing network, name-service and security evidence into the same investigation.
The tooling, in outline
- MistNetwork and wireless telemetry
- InfobloxDNS and DHCP context
- QRadarSecurity events
Python correlation for cross-domain troubleshooting
How the investigation fits together.
A public project
Lomo CodeSecurity
CodeSecurity applies the same habit to code: gather evidence, review the finding and check the history before a protected push. The open-source SRE workbench is available as a source preview, with concepts and implementation to build on.
Starting point
Tell us about the system
and the change you need.
A short description of the current situation, constraints and intended outcome is enough to begin.
Discuss a project