Single-instance to ECS migration
Re-platformed a single-instance application for a client into a full, containerised ECS architecture with edge protection.
ECSCloudFormation
WAFRDS
view infrastructure ↗
WORLD 1-1 · ABOUT
WHAT I ACTUALLY DO
I'm a cloud and infrastructure engineer working primarily across AWS — provisioning and maintaining ECS and EC2 environments, automating operational tasks with SSM, and keeping monitoring and logging pipelines healthy across multiple accounts.
Most of my work lives in the unglamorous space between "it works on my machine" and "it works for everyone, forever, without me." Automation, documentation, and just enough monitoring to sleep through the night — that's the job.
WORLD 1-2 · STACK
WHAT I RUN IN PRODUCTION
compute & containers
EC2
ECS
Fargate
Lambda
ECR
Auto Scaling
Docker
networking & delivery
VPC
Route 53
CloudFront
ALB
NLB
API Gateway
Direct Connect
VPC Endpoints
WAF
storage & data
S3
EBS
EFS
RDS
DynamoDB
ElastiCache
Backup
observability
CloudWatch
CloudTrail
EventBridge
OpenSearch
Splunk
Log Insights
automation & IaC
CloudFormation
Sceptre
Terraform
Systems Manager
Python
Bash
PowerShell
AWS CLI
security & identity
IAM
KMS
Secrets Manager
ACM
Organizations
IAM Identity Center
CI/CD
GitHub Actions
GitLab CI
Bitbucket Pipelines
WORLD 1-3 · HISTORY
WHERE I'VE OPERATED
Five years across cloud operations and end-user IT — from service desk to DevOps. Tap any role for detail.
WORLD 1-4 · WORK
SELECTED PROJECTS
Automated patch management
Designed a fully automated patch-management pipeline for a client, covering every production and non-production server.
PythonSSM
Patch ManagerAutomation
view infrastructure ↗
Cloud infrastructure design & delivery
Led the design and build of scalable, secure AWS infrastructure for a client focused on performance, security, and resilience.
CloudFormationSceptre
ECSRDS
view infrastructure ↗
Client readiness & incident-response dry runs
Validated deployment and incident-response readiness across diverse clients through repeated operational dry runs.
Incident responseDR
Cross-team
Fleet-wide Splunk upgrade automation
Built reusable tooling to audit and upgrade Splunk Universal Forwarders across a mixed Windows and Linux fleet spanning multiple AWS accounts.
BashPowerShell
SSMSplunk
WORLD 1-5 · INTERESTS
RUNNING IN THE BACKGROUND
soccer.service
status: running — on the pitch 3x a week. Consistent uptime, occasional hamstring incidents.
fitness.daemon
status: active — training and working out on a regular schedule. Progressive overload, no downtime.
ai_research.proc
status: running — deep in AI at the moment, reading and building. High CPU, worth it.