I work with engineering teams to build reproducible, low-toil infrastructure platforms.
Engagements are scoped as advisory retainers, fixed-scope modernization projects, or
targeted architecture audits.
Infrastructure Automation & Declarative Systems
End-to-end automation turning mutable, ad-hoc server setups into declarative, reproducible codebases. Eliminate configuration drift and ensure every deployment is auditable and rollback-safe.
Ideal for: Engineering teams struggling with environment drift, fragile shell scripts, or manual server maintenance.
Hermetic CI/CD pipelines with automated validation and linting
Disaster recovery workflows and deterministic server provisioning
Platform & DevOps Consulting
Hands-on architectural guidance and platform engineering to give your product engineers reproducible development environments and dependable production releases.
Ideal for: Growing engineering organizations needing a robust, low-maintenance platform without ballooning cloud overhead.
Key Deliverables
Container fleet architectures and edge service deployments
System hardening, attack surface reduction, and security compliance
Frequently Asked Questions
Direct answers to common questions about tools, engagement structure, and project scopes.
Why choose declarative infrastructure (Nix / NixOS / OpenTofu) over traditional configuration?
Traditional imperative setups (like manual bash scripts or mutable VMs) degrade over time due to configuration drift, untracked changes, and dependency rot. Declarative systems define the complete state of a machine in version-controlled code, allowing atomic upgrades, instant rollbacks, and bit-for-bit reproducible environments across staging and production.
How are consulting engagements structured?
Engagements are flexible to match your project needs: ongoing advisory retainers for team guidance, fixed-scope implementation projects for specific deliverables (e.g. migrating a fleet to NixOS or automating CI/CD), or one-off architectural and security audits.
Can you work with our existing cloud provider or bare-metal setup?
Yes. I design infrastructure that meets you where you are, whether running on AWS, GCP, Hetzner, self-hosted bare metal, or hybrid edge setups. Using provider-agnostic tooling like OpenTofu, container orchestrators, and Nix ensures you retain portability without vendor lock-in.
What does an initial infrastructure audit include?
An infrastructure audit evaluates your configuration reproducibility, deployment pipeline reliability, secrets management, and access controls. You receive a concrete assessment of operational risks, bottlenecks, and a step-by-step roadmap to modernize your architecture.
How do we begin an engagement?
Start by getting in touch via email. We will schedule a brief introductory call to review your current infrastructure challenges, establish alignment, and propose an actionable scope of work.
Have a project in mind?
Whether you need an architecture review, a fleet migration, or guidance on declarative
infrastructure, let's discuss your timeline and goals.