My Certification and Learning journey

Principal Architect. Strategic Advisor. Builder of What Comes Next.

A practice forged across a decade of high-stakes consulting engagements, advising Fortune 500 enterprises, financial institutions, and government agencies on the architecture decisions that determine competitive survival. Where the cloud journey is genuinely complex, the security posture must be unassailable, and the tolerance for failure is zero. That is where this work begins.

Enterprise Cloud Transformation & Architecture Advisory: Guiding global organizations through large-scale cloud-native transformations anchored in the AWS Well-Architected Framework, Azure Landing Zones, and the GCP Cloud Adoption Framework. Designing hybrid architectures that bridge legacy VMware vSphere estates with cloud-native services, delivering measurable gains in cost efficiency, operational resilience, and time-to-market velocity.
Distributed Platform Engineering at Scale: Architecting and delivering high-availability platforms under exacting production SLAs: sub-second latency, 99.99% uptime, and petabyte-scale data pipelines. Kubernetes multi-cluster federation, service mesh (Istio/Linkerd), eBPF-based observability, and GitOps-driven continuous delivery are not whiteboard exercises here. They are production realities.
Zero-Trust Security Architecture & Compliance: CISSP-led security architecture spanning zero-trust network design (NIST SP 800-207), enterprise-scale secrets management (HashiCorp Vault), STRIDE/PASTA threat modeling, and SIEM/SOAR implementation, achieving FedRAMP, SOC 2 Type II, and ISO 27001 compliance without compromising engineering velocity.
DevSecOps, SRE & Operational Excellence: Embedding reliability and security into the fabric of engineering organisations: SLO/SLI/error-budget frameworks, policy-as-code (OPA/Rego), chaos engineering, and shift-left security woven into automated CI/CD pipelines. The goal: operations that are proactive by design, not reactive by circumstance.

Current Focus

Beyond client engagements, I am in the early and most demanding stages of what I consider the defining technical undertaking of my career.

Building an open financial-data infrastructure designed to challenge the information asymmetry that has long confined institutional-grade market intelligence (real-time global market data, multi-asset pricing feeds, quantitative analytics, and research-quality financial intelligence) behind proprietary terminal subscriptions accessible only to a privileged few.
The engineering challenge is formidable: ingesting and normalizing multi-asset global market data at scale, serving sub-millisecond queries under concurrent production load, and maintaining the data integrity and uptime that financial decisions demand.
The ambition is larger still: to level the playing field for every investor, researcher, entrepreneur, and policymaker, regardless of the institution they work for or the terminal on their desk. If capital markets are supposed to be efficient, the intelligence that drives them should be equally accessible. That is the mission. It is monumentally hard. That is precisely why it matters.

Certifications

9 active credentials across cloud architecture, security, and networking.

CISSP

ISC² · Information Systems Security

The benchmark credential for designing, implementing, and managing a best-in-class enterprise cybersecurity program.

Azure Solutions Architect Expert

Microsoft

Subject-matter expertise in designing cloud and hybrid solutions that run on Microsoft Azure.

AWS Solutions Architect – Professional

Amazon Web Services

Advanced skill in providing complex solutions to complex problems, optimizing for security, cost, and performance while automating manual processes.

AWS DevOps Engineer – Professional

Amazon Web Services

Advanced technical expertise in provisioning, operating, and managing distributed application systems on AWS.

Cisco Certified Network Professional (CCNP)

Cisco · Enterprise

Demonstrated expertise in implementing and managing enterprise network solutions.

SANS SEC505: Securing Windows & PowerShell Automation

SANS Institute

Securing Windows environments and automating security tasks with PowerShell for large-scale deployments and hardened protection against sophisticated attacks.

CompTIA Security Analytics Professional (CSAP)

CompTIA · Stackable

Expertise in using security analytics to identify threats and manage incidents.

CompTIA Cybersecurity Analyst (CySA+)

CompTIA

Validated expertise in incident response and vulnerability management, with the communication skills effective security analysis and compliance demand.

CompTIA Security+

CompTIA

Core capability in securing networks, applications, and devices, ensuring data confidentiality, integrity, and availability.

Earlier Certifications

Lapsed but earned, listed here for a complete record.

Expired

Google Cloud Professional Cloud Architect

Google Cloud

Designing, developing, and managing robust, secure, and scalable solutions on Google Cloud Platform.

Expired

Google Cloud Professional Data Engineer

Google Cloud

Building data-processing systems: designing, deploying, monitoring, maintaining, and securing data workloads.

Industry Conferences & Advanced Training

Continuous professional development through leading cybersecurity and cloud programs.

Jan – May 2023SANS Institute
SANS Cyber Threat Intelligence Summit
- Advanced threat-intelligence collection methodologies and analysis frameworks
- Operationalized CTI lifecycle management for proactive risk mitigation
- SIEM integration and IOC deployment using Splunk Enterprise and SolarWinds
- Threat-actor attribution and campaign analysis techniques
View certification
Feb – Apr 2023SANS Institute
Cloud Security Exchange
- Cloud security posture management (CSPM) and compliance frameworks
- Identity and access management (IAM) hardening across multi-cloud environments
- Container security orchestration and runtime protection strategies
- Cloud-native application protection platform (CNAPP) implementation
View conference materials
Nov 2021SANS Institute
Pen Test HackFest Summit & Training
- Advanced penetration-testing methodologies (OSSTMM, NIST SP 800-115)
- Exploit development and vulnerability weaponization techniques
- Competed in the SANS NetWars Tournament of Champions, an elite red-team competition
- Adversary emulation and purple-teaming exercises
View competition results
2021SANS Institute
Digital Forensics & Incident Response Summit
- Network forensics and traffic analysis using tcpdump and Wireshark
- Memory forensics and malware-analysis methodologies
- Incident-response chain of custody and evidence preservation
- Enterprise-scale DFIR toolchain deployment and automation
View training materials
Oct 2020 – PresentGoogle Cloud Platform
Professional SRE & DevOps Engineer
- Site Reliability Engineering (SRE) principles and error-budget management
- CI/CD pipeline architecture with Cloud Build and Jenkins
- Infrastructure as Code with Terraform and Deployment Manager
- Service monitoring, logging, and incident management with Stackdriver
- Container orchestration with GKE and service-mesh implementation
Verify certificate
Jul – Sep 2019Google Cloud Platform
Data Engineering & Machine Learning Specialization
- Big-data architecture patterns and data-lakehouse implementation
- Data-pipeline orchestration with Cloud Composer (Apache Airflow)
- Machine-learning model deployment with AI Platform and Vertex AI
- Real-time analytics with Pub/Sub, Dataflow, and BigQuery
Verify specialization

Beyond the Work

A few pursuits that sharpen the way I think.

Financial Markets & Macroeconomics

Advanced

A deep analytical interest in global financial systems, market dynamics, and economic policy. The same analytical lens drives the open financial-data infrastructure above.

Track Fed, ECB, and SNB policy decisions closely
Analyze macroeconomic indicators and their effect on currency and equity markets
Study market microstructure and algorithmic-trading strategy
Follow the intersection of technology and finance, from blockchain to fintech

Reading & Literature

Avid reader

Wide reading with a focus on economic history, technological innovation, and geopolitical analysis, around 25 to 30 books a year.

Favour economic history, technological innovation, and geopolitics
Recent reads span central banking, cybersecurity policy, and AI ethics
Active in local book clubs on business and technology

View Goodreads profile

Aerial Robotics & Drone Technology

Technical hobbyist

Building, programming, and flying drones for both recreational and technical applications.

Build custom FPV drones with specialized flight controllers
Program autonomous flight patterns and computer-vision applications
Study UAV regulation across Switzerland and Europe

Soccer / Football

Player & enthusiast

Football as both physical exercise and a study in strategy and team dynamics.

Play in a local recreational league as a midfielder or defender
Analyze the tactics of top European clubs and international sides
Follow the Champions League, Premier League, and major tournaments