Projects
Things I have built, mostly for clients. Client names are left out.
Azure cloud foundations
Several customers · Production
Azure landing zones for several customers, based on the Cloud Adoption Framework: management groups and policy, hub-spoke networking, identity and the security baseline, all in Terraform.
Key Components
- Management & Governance: Azure Policy, Management Groups, Blueprints, Resource Organization
- Connectivity: Hub-Spoke Architecture, VPN/ExpressRoute, Azure Firewall, Network Segmentation
- Identity: Entra ID Integration, RBAC, Conditional Access, Privileged Identity Management
- Security: Microsoft Defender, Sentinel SIEM, Security Center, Compliance Frameworks
Internal GPT assistant
Azure OpenAI • Production
A company-internal chat assistant on Azure OpenAI with Entra ID sign-in, retrieval over internal documents through AI Search, and secrets kept in Key Vault.
Technology Stack
- Identity & Security: Microsoft Entra ID, App Registration, Conditional Access
- AI Services: Azure OpenAI Service, Azure AI Search (Cognitive Search)
- Application: Azure Web App, Custom Frontend, API Integration
- Infrastructure: Key Vault (Secrets Management), Storage Account, Automation Runbooks
Terraform module library
Infrastructure as Code Library
A set of reusable Terraform modules used across customer projects, covering networking, access, compute and governance.
Module Catalog
- Networking: Hub Connectivity, Spoke Connectivity, Azure Virtual Network Manager (AVNM), Azure Firewall
- Security & Access: Bastion, Privileged Identity Management (PIM), Network Security Groups
- Compute & Containers: Azure Kubernetes Service (AKS), Virtual Machines, App Services
- Governance: Azure Policy, Budget Alerts, Service Health Alerts, Log Analytics Workspace
Cloud foundation automation
Managed Service • DevOps
Tooling that deploys and maintains cloud foundations through pipelines, with compliance checks and self-service provisioning. Built with Python, PowerShell, Pulumi and Terraform.
Platform Capabilities
- Infrastructure: Management, Governance, Connectivity, Identity, Security automation
- DevOps: Azure DevOps Pipelines, Service Connections, YAML Templates, Multi-stage Deployments
- Technology Stack: Python, PowerShell, Pulumi, Terraform, YAML
- Automation: Self-service provisioning, Compliance checks, Automated remediation
Websites and shops
Various customers
Websites, shops and blogs for small businesses, built with WordPress, Astro, React and Webflow.
Project Portfolio
- E-Commerce: Custom web shops with payment integration, inventory management
- Corporate Websites: Professional business sites with CMS integration
- Technical Blogs: Performance-optimized content platforms with SEO
- Tech Stack: WordPress, React, Astro, Webflow, custom PHP solutions
CI/CD pipelines
DevOps • Security
Pipeline templates for infrastructure code and web apps, with pre-commit hooks, security scanning and plan/apply automation for Terraform.
Pipeline Features
- Deployment: Multi-stage deployments, Blue-Green, Canary releases
- Security: Pre-commit hooks, SAST/DAST scanning, Secret detection, Dependency scanning
- Infrastructure: Terraform validation, Plan/Apply automation, State management
- Applications: Web app builds, Container builds, Automated testing, Performance monitoring