Field notes on doing it well.
Occasional writing on cloud migration, security, infrastructure, and the quiet craft of keeping systems running.
Linux is 35 and you never standardised it
Linux quietly became the platform beneath your cloud, containers and appliances. Most enterprises still manage it as a pile of servers, not a governed platform.
ReadIntroducing Rune: a WYSIWYG editor with zero dependencies
We wrote our own rich-text editor — headless, configuration-driven, and free of ProseMirror, Slate, and build steps. Here is why we built it, and how to try it.
ReadWhat 'managed' actually means
Most 'managed services' watch a dashboard. Real managed operations means someone is accountable for the outcome at 3am — with the runbooks and SLOs to back it.
ReadAutomation that earns its trust
Automating operations is easy; automating them safely is the whole job — guardrails, reversibility, and knowing which calls a machine should never make alone.
ReadSegmentation is the cheapest security you are not buying
Before the next appliance, draw the boundaries. Segmentation turns a single compromise from a free run of the estate into a contained, observable event.
ReadThe case for owning your own iron
Cloud is the right default, not the right answer for everything. For some workloads the economics, latency, and control of a well-run data center still win.
ReadBuild, buy, or don't
The most valuable engineering decision is often the feature you choose not to build — a simple test for when bespoke software earns its keep.
ReadZero-trust is a posture, not a product
You cannot buy zero-trust in a box. It is a set of decisions about identity, access, and assumption-of-breach — expressed in architecture, not a purchase order.
ReadThe migration customers never noticed
Zero-downtime cloud migration is less about clever tooling than about sequencing, rehearsal, and the discipline to prove every wave before starting the next.
Read