Services

Domain 01

Full-stack web applications — React/TypeScript front-ends over .NET Core or Node.js APIs, with Azure Cognitive Services and OpenAI integrated for search, recommendations, and conversational features.
Native & cross-platform mobile — Android architecture in Kotlin/Jetpack Compose built for 15,000+ concurrent users, plus cross-platform delivery via Flutter and React Native.
Enterprise applications — Dynamics 365 (Sales, Field Service, Customer Service) and Power Platform (Power Apps, Power Automate, Power BI, Power Pages) on a governed Dataverse model with ERP integration patterns.

Domain 02

AWS administration across seven domains — compute, identity & federation, serverless and container hosting (EKS/Lambda/API Gateway), storage, and VPC networking — governed to the Well-Architected Framework.
Azure administration across six domains — VM/App Service infrastructure, Entra ID & Conditional Access, AKS, Azure Monitor/Log Analytics, and Site Recovery-based DR.
Multi-cloud & migration advisory — cloud-native modernisation, multi-cloud workload placement, and migrations executed with minimal downtime.

Domain 03

CI/CD pipeline engineering — Jenkins, GitHub Actions, Azure DevOps, and ArgoCD across Dev → SI/UAT → Production with automated quality gates.
Infrastructure-as-Code — Terraform, Ansible, AWS CDK, and Bicep for reproducible, drift-detected environments.
Container & platform operations — Kubernetes, OpenShift, and EKS/AKS cluster lifecycle management with GitOps delivery and policy enforcement (OPA/Gatekeeper, Kyverno).
Observability engineering — Datadog, Prometheus/Grafana, CloudWatch, and Azure Monitor, tuned for signal over noise.

Domain 04

Hyperconverged private cloud — Proxmox VE and Ceph storage fabrics delivering cloud economics on owned hardware, with 5 PB+ currently under active management.
Bare-metal Kubernetes — kubeadm and Talos Linux clusters with Calico/Cilium networking, MetalLB, and Rook-Ceph persistent storage.
Enterprise self-hosted services — Keycloak IAM, Kafka/RabbitMQ messaging, and HA PostgreSQL/MySQL/MongoDB for teams with data-residency or vendor-independence requirements.

Domain 05

Vulnerability Assessment & Penetration Testing — network, web application, API, and cloud-configuration testing mapped to OWASP Top 10/WSTG, CVSS v3.1, and MITRE ATT&CK.
Privilege-escalation-focused application testing — black-box testing of authentication, authorisation, session management, and business-logic abuse, with proof-of-concept evidence for every finding.
Security operations support — Defender XDR triage, Vectra AI network detection, phishing response, and a three-horizon roadmap from immediate remediation to ISO 27001-aligned maturity.

Domain 06

24/7 production support across AWS, Azure, Linux & Windows estates.
FinOps cost governance — rightsizing, Reserved Instances, zombie-resource clean-up.
Patch & backup lifecycle ownership with RTO/RPO drills.

Domain 07

Delivery footprint