The interface is the visible part. Most of my work is the engineering underneath it — and these are the areas I have worked in and can work in again.
DEVOPS & AUTOMATION
I design and run CI/CD from scratch: pipelines on GitHub Actions and Bitbucket Pipelines, self-hosted runners, container images built and published automatically, versioning and releases kept traceable across several repositories. I also automate what comes after the build — deployments, restarts, health checks, environment provisioning — because anything I have to do twice by hand is something I would rather write once.
Docker · GitHub Actions · Bitbucket Pipelines · self-hosted runners · AWS · ECR · Bash
SECURITY BACKGROUND
I started my career as a cybersecurity consultant at KPMG, working with organisations where the cost of getting it wrong is high: maturity assessments, cyber risk management, identifying vulnerabilities and building remediation plans with the client. I bring that lens to the systems I build now — thinking about attack surface, access control and secrets management while the thing is being designed rather than after.
cyber risk management · maturity assessments · hardening · zero-trust access · secrets management
NETWORKING
Getting an application reachable, encrypted and trusted in someone else's network is rarely the same problem twice. I have worked with reverse proxies, tunnels, certificate issuance and renewal, VPNs and DNS, and I am used to figuring out what will actually work given the constraints a particular client's environment imposes.
Nginx · Cloudflare Tunnels & Zero Trust · TLS / ACME · VPNs · DNS · firewalls
BACK END & LOW LEVEL
I work on the layer underneath the interface: FIX connectivity, market data and order routing, strategy logic and low-level components, messaging between processes, and the C/C++ libraries involved. I am comfortable reading and modifying code at that level, and comfortable in Linux when the answer turns out to be a kernel or system setting rather than the application.
Python · C/C++ · FIX / QuickFIX · ZMQ · asyncio · Linux internals
EFFICIENCY & SCALE
I spend real time on making software cheaper and steadier to run: profiling CPU and memory use, finding the hot path, cutting what a process wastes, and shrinking build artefacts and the transfer they cost on every release. It is unglamorous work with a direct payoff — the same hardware carries more, the system behaves predictably under load, and the bill goes down.
profiling · CPU & memory optimisation · concurrency · image size reduction · cost control
AGENTS & LLMs
I work closely with language models and build agents that do real jobs. I developed an automated code reviewer that reads every push, plus a set of agents and skills for internal automation and for documentation — turning technical material into something the business side can actually read, which shortens the distance between engineers and everyone else. I design the prompts and tooling, wire them into existing systems, and tune them against real usage.
LLM agents · automated code review · tool/skill design · prompt engineering · CI integration
