Work

Twenty years of building, breaking and securing software: what I work on, and where to see it.

I have spent twenty-odd years turning “it works on my machine” into “it works, at scale, and we know why”. That has meant Java services and the APIs between them, pipelines that ship them, Kubernetes clusters that run them, and lately the security reviews and AI tools that sit around all of it. The blog is the notebook; the portfolio is the shelf where the finished pieces go.

20+years in software
50+projects
30+certifications
3clouds: GCP, AWS, Azure

What I work on

Systems that scale

Distributed systems and microservices in Java and Spring, REST and GraphQL APIs, and the databases behind them.

Getting it to production

CI/CD, containers and Kubernetes, infrastructure as code, and the unglamorous work of making releases boring.

Keeping it safe

Secure development, dependency and vulnerability triage, security standards explained plainly.

AI, practically

Local models, pipelines and agents, tested on my own machines before I recommend them to anyone.

How I like to work

Clean, testable code; simple answers to hard problems; systems that fail loudly and recover quietly; and writing down what I learn so the next person starts further ahead.