Infrastructure · Security · Cloud · Automation · AI

I understand complex systems and make them better.

I combine decades of infrastructure, security and enterprise architecture experience with an automation-first engineering mindset. My focus is not simply whether a design can be built, but whether it will remain secure, operable, resilient and supportable throughout its lifecycle.

Based in Singapore LTVP+ with Letter of Consent No employer sponsorship required

A practical generalist with a whole-system perspective.

My career has spanned Unix, middleware, virtualisation, enterprise infrastructure, cloud, security, automation and architecture. That breadth allows me to see dependencies and operational consequences that are often missed when a problem is viewed from only one technical domain.

I am most valuable where systems cross organisational and technical boundaries: translating business needs into implementable designs, connecting specialists, exposing hidden risks and making sure the resulting platform can actually be operated after the project team has moved on.

Architecture grounded in engineering and operations.

I design across the lifecycle rather than treating architecture, implementation, security and support as separate concerns.

01

Enterprise systems architecture

End-to-end reasoning across business requirements, applications, infrastructure, networking, identity, security, operations and support.

  • Solution and platform architecture
  • Technical standards and reference designs
  • Architecture review and trade-off analysis
02

Security engineering

Security incorporated into the design from the beginning rather than applied as a late-stage compliance exercise.

  • CIS and NIST-aligned configuration
  • Vulnerability and compliance management
  • Audit evidence and risk-informed controls
03

Cloud and infrastructure

Architecture for enterprise infrastructure, virtualisation, AWS and hybrid environments with operational resilience in mind.

  • Migration and transformation planning
  • Availability, recoverability and lifecycle design
  • Infrastructure and platform integration
04

Automation and Infrastructure as Code

Repeatable engineering workflows that replace fragile manual effort and make architecture easier to validate and maintain.

  • Python, PowerShell, Bash and C
  • Terraform, Ansible and Packer
  • Validation, generation and build pipelines
05

Operational improvement

A production-focused mindset that asks how a solution will fail, how it will be observed and how people will support it.

  • Root-cause and systems analysis
  • Monitoring and operational evidence
  • Process simplification and remediation
06

Technical leadership

Connecting business, architecture, engineering, security, operations and vendors around a clear, defensible technical direction.

  • Stakeholder and vendor engagement
  • Decision records and technical documentation
  • Cross-domain coordination and mentoring

Architecture is more than drawing the desired state.

A credible solution must work within real constraints. I consider deployment, identity, security, observability, failure modes, recovery, change, compliance, cost and eventual replacement—not just the happy path.

I prefer evidence, experiments and working prototypes over unsupported certainty. Where possible, I encode knowledge in structured data, automate validation and leave behind repeatable processes rather than undocumented expertise.

01Business objectiveWhat outcome is genuinely required?
02System contextWhat already exists, and what constrains us?
03Architecture choicesWhat trade-offs are we deliberately accepting?
04Controls and operationsHow will it be secured, observed and recovered?
05Evidence and improvementHow will we prove it works and make it better?

Extending established architecture skills into enterprise AI.

My goal is not to reposition myself as a foundation-model researcher. I am applying existing strengths in systems architecture, automation, infrastructure and security to the practical adoption of AI in enterprise environments.

The focus is secure AI application architecture: controlling data access, context, tools, actions, trust boundaries and operational risk.

Application architecture

REST APIs, microservices and integration

Designing clear contracts, service boundaries and synchronous or asynchronous interactions.

AI architecture

RAG, orchestration and evaluation

Building grounded AI services that can be measured rather than trusted by assumption.

AI security

Prompt injection and least privilege

Separating untrusted content from authority and enforcing deterministic controls around agent actions.

AI operations

Observability, governance and lifecycle

Operating AI as a governed enterprise capability rather than an isolated demonstration.

What keeps me curious.

I learn by breaking systems into components, testing assumptions and recombining the useful parts into something practical.

Secure agentic systems

Applying zero-trust principles, input classification, policy enforcement and least privilege to AI capable of taking action.

Career as Code

A version-controlled professional knowledge system built from structured evidence, schemas, templates and automated document generation.

Automation and optimisation

Finding repetitive or fragile processes and replacing them with simpler, testable and repeatable engineering workflows.

Applied machine learning

Exploring ensemble models, market information, uncertainty and the limits of prediction in complex real-world systems.

Quantum computing

Investigating how quantum approaches may eventually help with optimisation and combinatorial problems.

Food science

Applying experimentation, measurement and process control to fermentation, preservation and small-scale product development.

Let us discuss a difficult system or architecture problem.

I am interested in architecture roles involving enterprise platforms, infrastructure, cloud, security, automation and emerging AI capabilities in Singapore, APAC or distributed international teams.