Making risky infrastructure boring.

Least-privilege IAM, infrastructure as code, observability, guardrails. The work is the boring infrastructure layer underneath the product, the layer that makes a risky change reviewable instead of stressful, and a bad day shorter than it would otherwise be.

Simple by default: managed services, off-the-shelf primitives, the proven solution before the clever one. Bespoke tools only when the problem actually needs one, scoped tight to the specific gap.

Plain words, real conversations. I leave the place better than I found it, and the people I’ve worked with will tell you the same.

The hardest part isn’t the tooling. It’s saying no to the next one-off hack that someone will swear is just for now.