GitOps
Production GitOps
Kubernetes workloads managed with Flux, Helm, Kustomize, Sealed Secrets, automated CI, and controlled upgrades.
Independent infrastructure consulting
Infrastructure engineering for small technical teams
Cloud infrastructure, Terraform, Kubernetes, CI/CD, reliability, observability, and security—without needing to hire another full-time platform engineer.
Services
Focused help where infrastructure gets difficult
Fixed-scope projects and limited fractional engagements available.
01
Infrastructure Review
A focused assessment of the infrastructure you already run, with risks and improvement opportunities prioritized by practical impact.
- Current-state architecture and IaC assessment
- IAM, trust boundaries, and access posture review
- Kubernetes, CI/CD, and operational workflow gaps
- Reliability, observability, and recovery readiness
- Cloud cost, maintainability, and production risk
- Prioritized recommendations with practical next steps
02
Infrastructure Projects
Hands-on implementation and modernization with a defined technical outcome, documented changes, and a clear handoff.
- Refactor or migrate Terraform and cloud foundations
- Modernize Kubernetes and container platforms
- Implement GitOps and CI/CD workflows
- Improve observability and production reliability
- Harden IAM and automate backup and recovery
- Troubleshoot production infrastructure and implement fixes
03
Fractional Infrastructure Engineering
Limited ongoing senior engineering support for agreed priorities, without assuming full-time operational ownership or on-call coverage.
- Architecture and design review before changes
- Infrastructure PR review and implementation support
- Production troubleshooting within the engagement scope
- Upgrade, migration, and reliability planning
- Incremental IaC, platform, and security improvements
- Technical roadmaps, documentation, and handoff
Engineering proof
Built and operated, not just recommended.
The consulting work is grounded in systems I have designed, deployed, maintained, and documented.
Cloud security
Terraform threat modeling
tfSTRIDE turns multi-cloud Terraform plans into normalized infrastructure facts, trust boundaries, and CI-ready findings.
Read the case studyObservability
Distributed fleet monitoring
Prometheus and Grafana across a distributed fleet, combining node, container, Kubernetes, and security telemetry.
Read the case studySecurity automation
Detection and enforcement
Automated drift detection and reconciliation between CrowdSec decisions and nftables enforcement across Linux systems.
Read the case studyBackup and recovery
Continuous backup validation
Automated checks for source data, repository integrity, recent archives, and restore readiness, with failure alerting.
Read the case studyCI/CD
Repeatable delivery pipelines
Reproducible testing, policy gates, release automation, and infrastructure deployment across managed and self-hosted tooling.
Good fit
For teams whose infrastructure needs senior attention
This work is a good fit when infrastructure has become important enough to need deliberate engineering, but not necessarily another permanent hire.
Where I can help
- SaaS and startup engineering teams
- Small teams with growing infrastructure complexity
- Teams without a dedicated platform or SRE function
- Systems being prepared for production growth
- Terraform, Kubernetes, CI/CD, or cloud environments that have outgrown their original design
Usually outside scope
- Desktop or end-user IT support
- Managed help desk services
- Website design, SEO, or marketing work
- Penetration testing or formal compliance audits
- 24/7 operational, NOC/SOC, or on-call coverage
Engagements
How the work moves forward
A small, explicit process keeps the technical work focused and the handoff useful.
01
Understand the system
Review the problem, relevant architecture, and technical context.
02
Define the scope
Agree on the highest-value work, constraints, and a clear deliverable.
03
Build and hand off
Implement the work, document the result, and explain what changed and why.
Tools
Technologies I work with
A focused set of tools for building and operating production infrastructure.
- AWS
- GCP
- OCI
- Terraform
- Kubernetes
- Docker
- Flux
- Helm
- Kustomize
- Sealed Secrets
- Python
- Linux
- GitHub Actions
- Gitea Actions
- Prometheus
- Grafana
- PostgreSQL
- Cloudflare
Contact
Have an infrastructure problem?
Send me a short description of what you're running, what's causing trouble, and what you'd like to improve. I'll tell you whether it's something I can help with.