Architecture decisions, not just diagrams.
I design Azure and hybrid-cloud solutions around security, resiliency, cost, operations, and the tradeoffs that make an architecture practical. This portfolio includes four projects covering distributed commerce, privacy-preserving AI, cost-optimized static hosting, and a physical Kubernetes lab connected to Azure Arc with GitOps and measured chaos-engineering evidence.
Featured Azure projects
Each project starts with requirements and constraints, connects them to quality attributes and tradeoffs, and then carries those decisions through Infrastructure as Code, Azure control-plane validation, runtime evidence where available, failure analysis, and explicit known limitations.
Cost-Optimized Portfolio Hosting
Azure Static Web Apps Free architecture designed to target $0/month Azure hosting cost while preserving HTTPS, CI/CD, preview environments, security headers, and a deliberate upgrade path.
Distributed E-Commerce Platform
Production-oriented Azure reference architecture for a distributed commerce backend using Front Door, App Service, Cosmos DB, Service Bus, private networking, observability, and multi-region design.
Privacy-Preserving AI Age Assurance
Azure landing zone for bring-your-own age-estimation models using client-side envelope encryption, private inference, HSM-backed keys, anti-replay controls, managed identity, and no intentional image retention.
Hybrid Kubernetes Chaos Lab
Physical kubeadm Kubernetes connected to Azure Arc and reconciled through Flux GitOps, with repeatable pod-failure, CPU-saturation, and NetworkPolicy experiments backed by in-cluster availability evidence.
Designed to be reviewed, challenged, and operated.
Each case study starts with hard constraints and ties availability, security, privacy, consistency, cost, recovery, and maintainability back to an explicit design response.
ADRs and experiment notes explain why services were selected or omitted, while failure-path evidence shows what degrades, what recovers, and where the architecture deliberately accepts a limitation.
Evidence levels stay explicit: the portfolio is live, the hybrid Kubernetes lab has measured runtime chaos results, and the e-commerce and age-assurance references continue to separate compiler/control-plane validation from future runtime proof.
Resume
Cloud & security professional with 5+ years across Azure, Entra ID, Intune, endpoint security, hybrid infrastructure, Kubernetes, and automation—applying that operational background to solution architecture, Infrastructure as Code, GitOps, and resilience testing.
Architecture capabilities
From operations to architecture.
My approach is grounded in operating real infrastructure: understand the requirement, reduce unnecessary complexity, secure the trust boundaries, automate the deployment, and document the tradeoffs so the next engineer can understand the system.
Currently based in North Carolina and open to relocation to the Bay Area for the right opportunity.
Build the solution, document the decisions, and make the architecture understandable.
Contact
Interested in discussing Azure architecture, hybrid cloud, Kubernetes, cloud security, or one of these projects?