Own the architecture of two closely related Pulumi (TypeScript) programs: B4C, a shared multi-tenant Azure platform consumed by PDPM and five other downstream business platforms (UCC, VRIDS, NTPDG, DoIT, AquaScan), and PDPM, the Digital Project Management platform used by all project participants — client, contractor and sovereign functions — to plan, test, implement and monitor infrastructure projects. B4C provisions the shared Front Door + WAF, API Management, Container App Environment, Container Registry, Redis Enterprise cache, Service Bus namespace, Key Vault, Storage and Log Analytics workspace that every tenant platform builds on. PDPM is split into two independently deployed Pulumi stacks — pdpm-core (SQL Server with an elastic pool across seven databases, TDE encryption and private endpoints, storage accounts, networking, Service Bus, Key Vault with RBAC authorization) and pdpm-component (Function Apps, Container Apps, a Static Web App admin portal, Logic Apps and Dapr pub/sub, state-store and cron-binding components) — with the architectural boundary between the two mechanically enforced at build time via dependency-cruiser so platform and application concerns cannot leak into one another.

• Serve as solution, integration and infrastructure architect for both the shared B4C platform and the PDPM tenant, across six environments (AU, AU1, EU1, EU2, PU1, TU1).
• Designed the two-stack (core/component) split for PDPM and the accompanying StackReference-based cross-stack output contract, so platform/data infrastructure and business-domain application hosting evolve and deploy independently.
• Architected the shared B4C platform's multi-tenant network topology — Front Door + WAF, API Management, and a shared Container App Environment — serving as the common ingress and compute fabric for six downstream business platforms.
• Designed secured, segmented network architectures with private endpoints, NSGs, firewall rules and zero-trust-aligned controls across subnets for API Management, private endpoints and the delegated Container App Environment.
• Implemented identity and access management with OAuth2, Entra ID and workload-identity/federated authentication patterns, and RBAC-authorized Key Vault access consumed via managed identities.
• Designed event-driven integration using Service Bus topics/queues and Dapr pub/sub, state-store and cron-binding components, decoupling business-domain services (workflow, project, email, model management, SharePoint permissions, Teams, transfer jobs) from one another.
• Maintained enterprise-grade security posture: encryption at rest and in transit, TDE on SQL, secure configuration baselines, GitHub Advanced Security scanning, and automated dependency updates via Renovate.
• Planned and implemented disaster-recovery strategy, high-availability configuration and scheduled backup/restore pipelines for critical SQL and storage resources.
• Enforced engineering governance: TypeScript across both repositories, ESLint + Prettier, a 99% line/branch/function test-coverage gate on all infrastructure code via Vitest with Pulumi runtime mocks, and JSON-Schema-validated (Ajv) per-environment configuration as the single source of truth.
• Redesigned and optimized Azure DevOps CI/CD pipelines (validate → preview → deploy), including plan-based pulumi up --plan deployments, scheduled drift detection, and manual maintenance-mode toggles for API Management and Front Door WAF.
• Authored architecture, pipeline and pub/sub documentation (Mermaid diagrams) consumed by every team building on the shared platform, and repo-level agent skills that let engineering teams and AI coding agents navigate the platform boundary safely.
• Delivered Proofs of Concept to validate architecture decisions and gave engineering teams a clear source of truth; provided ongoing architectural guidance to management and development teams, shaping long-term roadmap and technology strategy.
• Wrote automation scripts in Bash and PowerShell for operational efficiency, compliance enforcement and lifecycle management; used Docker for secure development, testing and deployment workflows.
• Troubleshot and resolved complex multi-layer issues spanning networking, infrastructure, identity and application domains across both platforms.

The Single Supervisory Mechanism is the legislative and institutional framework under which the European Central Bank directly supervises larger banks and indirectly supervises smaller ones.

• Migrated an on-premises application and its components into Azure Kubernetes Service; prepared Dockerfiles and published images to a jFrog Artifactory Docker registry.
• Configured Docker Compose to pull and run images, and set up environment variables, certificates, port routing and secrets synchronized from HashiCorp Vault into Azure Key Vault.
• Set up CI/CD pipeline jobs in GitLab YAML, and wrote Bash/PowerShell scripts to support the GitLab runner during build and deployment.
• Redesigned and re-architected existing applications for cross-platform operation (Windows and Linux).
• Migrated RabbitMQ messaging into Azure Service Bus, and redesigned console-app components into Azure Functions for serverless execution.
• Developed and maintained the software as a member of a scrum team, engaging with multiple scrum teams to orchestrate activity, take ownership, and drive solutioning and improvements.
• Provided day-to-day technical support on issue triage and resolution.

A Remote Deposit Capture application that publishes scanned cheques to Cheque Day 1, which decides whether internal or external processing applies via rigorous validation before publishing to Cheque Day 2 or external services.

• Designed the Azure infrastructure for migrating the Cheque application.
• Designed interfaces for integrations across Windows, Mainframe and Linux systems on the cloud platform.
• Engaged with multiple teams to orchestrate activity, take ownership, and drive solutioning.
• Managed architecture and design of the application's various components, and coordinated architecture deliverables across teams.
• Provided day-to-day technical support on issue triage and resolution.

Shop Direct Group is a multi-brand online retailer in the UK and Ireland, based in Liverpool. The project implemented a new credit platform to support business modernization, process automation, and faster, more flexible credit-offering delivery.

• Architected a new finance platform, a key component of the client's drive to deliver more personalized customer journeys and a broader range of credit offerings.
• Delivered quality design documents to help the client understand business behavior and align stakeholders around a single requirements timeline.
• Engaged with multiple teams to orchestrate activity, take ownership and drive solutioning.
• Drove successful completion of data migration through proactive collaboration, exchanging technical expertise and business-process knowledge with the team.
• Guided technical staff working across geographically distributed and offshore teams.

UBS is one of the largest banks in Switzerland. Internal bank operations are performed through various in-house applications across segments such as tax, risk, branding, data protection, legal and compliance.

• Performed requirement analysis, feasibility analysis and technical evaluation.
• Wrote use cases, technical design documents and functional test cases.
• Contributed to development, including system/architecture design tweaks, and helped the team understand requirements through functional and technical discussion.
• Managed the deployment process and schedule.

PMI is a global cigarette and tobacco company with products sold in over 200 countries. ISMS was the client's main sales and merchandising tool, customized per country to reflect local government rules and regulations; assigned to Russia, Hong Kong and Taiwan.

• Presented ideas for system improvements and worked closely with analysts, designers and staff.
• Produced detailed specifications and wrote the code.
• Tested the product in controlled, real-world scenarios prior to go-live.
• Prepared training manuals for users and maintained the systems once operational.

Wyndham Worldwide Corporation is the holding company for Wyndham Hotels & Resorts, Group RCI and other lodging brands. HMS, the main Hotel Management System, maintained room and rate data for global publication alongside reservations and interfacing with legacy systems.

• Presented ideas for system improvements and worked closely with analysts, designers and staff.
• Produced detailed specifications and wrote the code.
• Tested the product in controlled, real-world scenarios prior to go-live.
• Prepared training manuals for users and maintained the systems once operational.

Lilisoft is an American medical company. The Lilisoft application functioned as a complete Clinical Information System managing medical records, reports and documents per patient, and processing claims to a standardized format, achieving compliance across six HIPAA modules relevant to Lilisoft Medical's line of business.

• Presented ideas for system improvements and worked closely with analysts, designers and staff.
• Produced detailed specifications and wrote the code.
• Tested the product in controlled, real-world scenarios prior to go-live.
• Prepared training manuals for users and maintained the systems once operational.