Blog

Insights & field notes

Short, opinionated notes from real engagements — what worked, what broke, and what the invoice taught me.

ArchitectureSep 10, 20268 min read

The Landing-Zone Blueprint I Reuse on Every Engagement

Multi-account structure, network segmentation, identity baselines and guardrails — the exact starting layout I deploy before a single workload moves.

FinOpsAug 28, 20266 min read

Requests, limits, autoscaling and namespaces showback — the four levers that cut one SaaS bill 29% without a single outage.

MigrationAug 14, 202610 min read

Dual-write verification, rollback drills and the Sunday-morning runbook I use to move production databases without drama.

SecurityJul 30, 20267 min read

Policy-as-code only works when it explains itself. How I write Kyverno and OPA rules teams keep instead of bypass.

PlatformJul 17, 20265 min read

Golden paths beat headcount. The team topology and self-service defaults that let small platform teams support hundreds of engineers.

One practical cloud architecture email a month. No spam, no fluff — unsubscribe anytime.