Services

End-to-end design and delivery of resilient, production-grade infrastructure. I build hyperconverged Proxmox clusters with Ceph storage and live migration, multi-master Kubernetes environments with hardened networking and GitOps delivery, and Grafana-based observability stacks that give you real visibility into your systems. Automation is baked in from day one — Ansible handles configuration and drift prevention, CI/CD pipelines drive reliable deployments, and self-hosted n8n connects your internal tooling without third-party SaaS dependency.

Eliminate implicit trust from your network with a layered security architecture built around identity-aware connectivity. I deploy OpenZiti overlay networks that span clouds, data centres, and edge devices without open firewall ports or exposed services. Security Onion provides deep network visibility, threat detection, and incident response capability. Self-Sovereign Identity (SSI) brings cryptographically verifiable credentials to your access control and identity workflows — putting you in control of who proves what, to whom, and when.

Deploy and operate permissioned distributed ledger networks tailored to enterprise requirements. I work across Hyperledger Besu for EVM-compatible private networks, Hyperledger Fabric for modular permissioned ledgers with fine-grained access control, and IOTA for feeless data and value transfer on the Tangle. From genesis configuration and node provisioning through to validator management, peer operations, channel governance, and network hardening — infrastructure that is secure, maintainable, and built to evolve.