17+ years designing, securing, and automating multi-cloud infrastructure (AWS · Azure · GCP) — currently leading DevSecOps transformation at Giesecke+Devrient.
I'm a DevSecOps Architect with 17 years of experience across multi-cloud infrastructure, platform engineering, and automation — currently leading DevSecOps transformation at Giesecke+Devrient, modernizing cloud platforms with IaC, policy-as-code, and secure software delivery.
Before this, I spent 4+ years at PwC as a Senior Cloud & DevOps Architect (AWS landing zones, ML/AI workload infrastructure, monolith-to-microservices migrations on ECS/Fargate/EKS) and 5+ years at Thales leading DevOps for GitOps-based microservices deployments, FinOps cost reduction, and multi-cloud IaC on AWS/GCP/Azure. Roles before that — NTT DATA, SDG Corp, FutureSoft, and Softona Technology — trace the path from Linux system administration to full DevOps and cloud architecture, including managing 500+ servers across heterogeneous environments along the way.
I'm an AWS Ambassador and Community Builder and write practitioner-grade technical content on cloud, DevOps, and AI-assisted infrastructure — mechanics over marketing, verified specifics over hype.
- 🔭 Currently: leading DevSecOps transformation & platform modernization at Giesecke+Devrient
- 🛠️ Building: automation to migrate AWS MGN/DMS resources into guardrail-compliant Terraform
- 🌱 Exploring: Claude Code subagents, MCP architectures, agentic AI for platform engineering
- 🚀 Open source: SkyArch AI — multi-cloud architecture diagramming, my flagship project
- ✍️ Writing: deep-dives on AWS, Kubernetes, Docker, and Claude-powered DevOps tooling
- 💬 Ask me about: cloud migrations, Terraform/Ansible at scale, GitOps, FinOps, AI agent tooling for DevOps
Open-source multi-cloud architecture diagramming tool — my flagship personal project.
- Full agent suite: diagram generator, architecture reviewer, cost estimator, IaC exporter
- Multi-cloud provider catalogs (AWS / GCP / Azure)
- Packaged as a complete Claude Project (agent definitions + skill files) for reuse
Turns raw terraform plan output into a readable, visual diff using custom SVG mascot characters —
built as an open-source, community-distributed tool.
- Containerized via Docker
- Distribution strategy centered on open-sourcing + Medium/community outreach
Auto-generates and imports Terraform configuration for AWS MGN (VM) and DMS (database) migrated resources — enforcing account guardrails and org standards by default, eliminating manual post-migration cleanup.
Role-based Ansible pipelines provisioning IBM WebSphere, ActiveMQ, Liberty, JBoss, WildFly, and SQL
Server in disconnected environments, following a consistent house pattern (group_vars as single edit
point, vars_prompt credentials, tagged tasks, size-based idempotency).
Migrated a GitHub organization's SSO/SCIM configuration from one Okta tenant to another — 175 users, 657 repos, standard (non-EMU) org.
Static web app for exploring every AWS EC2/RDS instance type — workload guidance, side-by-side comparison, and live on-demand pricing, with zero backend and zero AWS credentials required.
- Vanilla HTML/CSS/JS, no frameworks or build step
- Pricing data auto-refreshed weekly via a GitHub Actions workflow
- Dark/light themes, full-text search, accessible (ARIA roles, reduced-motion support)
| Company | Role | Focus |
|---|---|---|
| Giesecke+Devrient | DevSecOps Architect (2026–present) | DevSecOps transformation, IaC, policy-as-code, secure SDLC |
| PwC Acceleration Centers | Senior Cloud & DevOps Architect (2022–2026) | AWS landing zones, ML/AI infra on AWS Batch, monolith→microservices on ECS/Fargate/EKS |
| Thales | Senior DevOps Technical Lead (2017–2022) | GitOps (Flux/ArgoCD), FinOps, multi-cloud Terraform/Ansible, Istio service mesh |
| NTT DATA Americas | Senior Principal Consultant (2015–2017) | Infra automation (Ansible/Salt/Puppet/Chef), 500+ server fleet management |
| SDG Corporation | Senior Linux Administrator (2014–2015) | LAMP stack ops, AWS infrastructure, DR environments |
| FutureSoft (India) | Linux Administrator (2012–2014) | LAMP tuning, MySQL replication/failover automation, HA Apache setups, KVM virtualization |
| Softona Technology | System Administrator (2009–2012) | Linux/Windows sysadmin foundations — networking, backups, server security, early AWS setup |
Cloud Platforms
Infrastructure as Code & Automation
CI/CD & GitOps
Observability
AI / Agentic Tooling
| Post | Topic |
|---|---|
| Claude Code Dynamic Workflows | AWS IaC security scanning |
| Claude Code Nested Subagents | AWS FinOps cost optimization (+ SRE-audience version on incident triage) |
| Amazon ECS Updates (Jun–Jul '26) | Autoscaling, deployment observability, circuit breakers, Express Mode |
| Docker Gordon AI Assistant | Internals deep-dive |
| GitHub Copilot Custom Agents | Legacy modernization workflows |
| Kubernetes Series (devops-dev) | Multi-part, building/apartment analogy, K8s 1.35 features |
| MCP Tunnel Architecture | Private VPC / Bedrock setup |
| Docker Image Supply Chain Security | SBOM generation, Sigstore/cosign signing, CI/CD integration (in progress) |
📖 Full archive on Medium and LinkedIn
Multi-Cloud Infrastructure • DevSecOps • Platform Engineering • AI-Driven Automation