Blog

How I design enterprise landing zones that scale: management group hierarchy, subscription governance, and Azure Policy guardrails delivered as code.

Automating enforcement of 100+ governance and compliance policies across a global tenant with Azure Policy, Terraform, and GitLab CI — and cutting environment onboarding by ~60%.

Designing an Azure IoT platform that processes several million device messages a day — Java Spring Boot microservices, device models, and event-driven processing with a hardened edge.

Operating Java Spring Boot microservices for 15+ customer systems on EKS with a service mesh, GitOps pipelines, and autoscaling driven by custom metrics — and governing multi-cloud cost along the way.

Bringing order to AWS with Terraform-managed multi-account VPCs, IAM least privilege, subnet segmentation, and Kubernetes governance patterns.

Migrating a decade-old Java Spring and PHP Symfony estate to containers and Kubernetes without a big-bang rewrite — the CI/CD, Docker, and runtime patterns that made it work.

Why every significant platform decision deserves an ADR — a short markdown file committed to the repo — and how recording decisions as code speeds up onboarding, audits, and architecture reviews.

Running a production AI assistant for 10,000+ daily customers on Azure AI Foundry — multi-service containerized backend, RAG orchestration, guardrails as code, and an evaluation loop that gates every model release.