Profile
Infrastructure engineer with 15+ years on production Linux and cloud, usually the senior infrastructure voice in a small team. I build and own the foundation a platform runs on: landing zones, networking and private connectivity, Terraform and CI/CD, IAM and secrets, observability and recovery, across GCP, AWS and Azure, with Kubernetes in production on GKE, EKS, AKS, Rancher and OpenShift. Most recently in regulated financial infrastructure, building the platform beneath a regulated settlement service along with the documentation its clients' auditors ask for. Much of my work is automation: taking manual steps out of operational and back-office processes, using AI where it beats a script.
Core Skills
- Cloud
- GCP · AWS · Azure. Landing zones, VPC/CIDR design, private connectivity, cost visibility (FinOps)
- Kubernetes
- GKE · EKS · AKS · Rancher/RKE · k3s · OpenShift. Helm, ArgoCD, image supply chain
- IaC & CI/CD
- Terraform (module design, remote state, drift control) · Ansible · SaltStack · GitHub Actions · Azure DevOps · HCP Terraform
- Security
- IAM & least privilege · Workload Identity Federation · Secret Manager / KMS · network segmentation · Cloud Armor · OIDC/SAML (Entra, Google)
- Observability
- Prometheus · Grafana · Splunk · Elastic · New Relic. SLOs, alerting, runbooks, incident response
- Platform
- RHEL · Ubuntu · Nginx/Apache · MySQL/MariaDB · Redis · DNS, TLS, routing, firewalling · Bash, Python
- AI automation
- Vision and language providers wired into operational workflows · Playwright browser automation · deterministic-first, model-on-fallback design · agent tooling run as normal Kubernetes workloads
- Ways of working
- Agile · service delivery management · architecture & design authoring · client and auditor engagement
Experience
Cloud Infrastructure Contractor, financial market infrastructure client
Apr 2026 – Jul 2026
Remote, Australia · GCP · platform foundation, extended into a second phase for observability and operational readiness
- Designed and built the GCP foundation for a regulated settlement platform: VPC and network topology, IAM baseline, and a Terraform monorepo so every environment is reproducible from code.
- Delivered private network connectivity from GKE workloads to managed distributed-ledger infrastructure, covering VPC peering, firewall policy and private DNS.
- Secured participant-facing endpoints with an external HTTPS load balancer and Cloud Armor, and federated OIDC sign-in via Microsoft Entra, plus uptime checks and alert routing.
- Stood up the delivery model: GitHub Actions to GCP via Workload Identity Federation, ArgoCD, Artifact Registry, and a two-tier secrets pattern using Google Secret Manager, with production applies gated on required reviewers.
- Built the observability layer in the second phase: Managed Prometheus and Cloud Monitoring dashboards, centralised Cloud Logging, and alerting routed to the nominated channel.
- Authored the architecture, decision record and secrets-management documents used as the technical evidence base in client and partner due-diligence conversations.
Kubernetes & GCP Cloud Operations Lead, Wipro at Woolworths Group
Mar 2024 – Present
Adelaide, South Australia
- Own how the Kubernetes and GCP platform is run day to day, and build GCP capability across the team.
- Drive the GCP automation programme, cutting manual steps out of routine platform work and standardising how environments are managed.
- Lead Kubernetes delivery across Woolworths' container platform, holding projects to agreed quality and process standards at retail scale.
- Diagnose performance problems on Kubernetes clusters and turn the findings into pre-emptive fixes that remove repeat failures; improve the shared infrastructure codebase and review the team's changes.
- Work with engineering teams and stakeholders on platform direction, prototype new approaches, and mentor engineers.
Independent Consultant, Meatmen (Singapore)
Sep 2025 – Present
Remote · AWS · e-commerce platform
- Deliver and run the AWS platform behind a premium-meats e-commerce business: Terraform-provisioned environments, automated CI/CD for a .NET and Next.js stack, and separate POC, staging and production environments.
- Own the AWS account, its running cost, and the deployment and security documentation the client works from.
Site Reliability Engineer / DevOps Engineer, Alcidion Group
Nov 2019 – Feb 2024
Adelaide, South Australia · clinical software for hospitals in Australia, New Zealand and the UK
- Built and operated the cloud infrastructure for Smartpage (clinical messaging) and Miya Precision (clinical decision support): healthcare workloads with real availability and privacy obligations.
- Deployed container platforms across Azure AKS, AWS EKS and on-premise Rancher/RKE (k8s and k3s), led the migration of workloads to GCP and GKE, and built out continuous deployment pipelines in Azure DevOps.
Senior Cloud Engineer / Cloud Consultant, 5G Networks and Comunet
Mar 2019 – Nov 2019
Adelaide, South Australia
- Provided technical leadership on AWS and Azure, supporting pre-sales with architecture design, requirements gathering, solutioning and proof-of-concept delivery.
- Designed and implemented AWS EKS with Rancher, Helm charts and an integrated CI/CD pipeline, and won AWS EdStart funding for an EdTech client migrating to AWS.
Technical Service Manager / Lead Engineer / Linux Escalation Engineer, Hostworks
May 2011 – Feb 2019
Adelaide, South Australia · national enterprise clients
- Owned service delivery, incident management and solution design for enterprise clients including McDonald's, Volkswagen Group Australia, SBS, GM Holden, Sony Music, IAG and Australia Post.
- Automated full-stack blue/green environments in AWS with CloudFormation (VPC, EC2, RDS, ElastiCache) and introduced Docker-based solutions.
- Delivered high-profile campaigns and events under load (McDonald's Monopoly, SBS Eurovision and Tour de France, vehicle launches) with capacity planned and rehearsed in advance.
- Ran escalations across a 300+ RHEL estate in a 24/7 high-severity environment, and mentored operations and NOC staff.
Senior Systems Engineer / Systems Engineer, Ufinity Pte Ltd
Dec 2006 – Feb 2011
Singapore
- Led operations for Mail Ranger, an in-house anti-spam email service for a large healthcare group, and for StarHub pfingo systems; deployed UNIX/Linux and Windows estates, VMware ESX/ESXi virtualisation and replicated MySQL servers for commercial and Singapore government clients.
Education & Certifications
BA, Mass Communication (Multimedia)
Curtin University of Technology2003–2006
Diploma, Digital Media Design
Nanyang Polytechnic1999–2002
Red Hat Certified Engineer (RHCE)2010
RHCSA in Red Hat OpenStack2015
Red Hat Certified Virtualization Administrator2014
Certificates of Expertise: PaaS, Performance Tuning, Network Security2012–2016
Australian working rights · Languages: English (native), Mandarin (professional working)