Principal Azure platform engineer and architect in London. 20+ years across .NET and cloud, specialising in AKS, API Management, private networking, Entra ID, and Terraform. Current focus: AI platform architecture on Azure.
mcp-platform-azure, enterprise governance of MCP servers on Azure (v1.0.0 release). Terraform-first; APIM gateway with RFC 9728 discovery; complete Entra identity model (OBO delegation and trusted-subsystem workload identity, both gate-tested); Azure API Center registry sync; ephemeral apply-call-destroy live proof in CI. Full ADRs and an honest statement of what is and is not proven, in the release notes.
- Azure platform engineering: AKS design and networking (Azure CNI, NetworkPolicy), APIM, Application Gateway, hub-spoke and private endpoint architectures
- Infrastructure as code: Terraform (azurerm and azapi), Bicep, policy as code
- Identity and security: Entra ID, managed identity, OBO flows, secure-by-default provisioning
- .NET distributed systems: Service Bus, event-driven services, high-throughput APIs (12k req/s at ASOS)
- Observability and operations: Azure Monitor, App Insights, KQL, alerting, runbooks