INFRASTRUCTURE ENGINEER · SERVERS · CLOUD · SECURITY

THE INFRASTRUCTURE BEHIND YOUR BUSINESS.

I build, migrate, secure and run the servers, cloud, databases, mail and networks your business depends on — so the systems behind the scenes just keep working.

12+ systems operated 99.9% uptime target 24/7 ownership
◆ 02INFRASTRUCTURE AT A GLANCEHOVER TO OPEN

Everything your business runs on — held by one engineer.

Eight domains of infrastructure, drawn as one connected system. Open any node to see what it means for your business, and the technology underneath.

01

Cloud

Run on cloud that scales with demand and won't surprise you with the bill.

AWSAzureGCPVPS
Specs +
02

Servers

Linux and Windows servers, set up properly and kept healthy.

UbuntuDebianRHELWin Server
Specs +
03

Databases

Keep the database your business depends on fast, reliable and safe.

PostgreSQLMySQLMariaDB
Specs +
04

Mail

Make sure your email actually reaches the inbox — not the spam folder.

SMTPSPFDKIMDMARC
Specs +
05

Security

Lock down your systems before someone else finds the way in.

FirewallSSL/TLSVPNHardening
Specs +
06

Network

DNS, routing and connectivity that stays fast and stays up.

DNSCloudflareLoad Balancing
Specs +
07

Migration

Move to better infrastructure without breaking what already works.

ServerCloudWebsiteDatabase
Specs +
08

Monitoring

Know what's happening inside your infrastructure — before it breaks.

PrometheusGrafanaUptimeAlerts
Specs +
◆ 03WHAT I SOLVEIN PLAIN ENGLISH

You don't have an infrastructure problem in the abstract. You have this one.

P/01

"Your website keeps going down."

I find the real cause — not the symptom — and make it stable, then keep it that way.

P/02

"Your server is slow and nobody knows why."

I profile the whole stack, fix the bottleneck, and give you the headroom back.

P/03

"You need to migrate — with zero downtime."

I plan the cutover, rehearse it, and move you across without your customers noticing.

P/04

"Your email lands in spam."

I fix SPF, DKIM and DMARC and get your mail reliably into the inbox.

P/05

"You're moving to the cloud."

I architect it right the first time — cost-aware, secure, and built to scale.

P/06

"Nobody knows what's inside your infrastructure."

I audit and document everything, then put monitoring on it so you always know.

◆ 04TRACE THE SYSTEMSCROLL TO FOLLOW A REQUEST

What actually happens when someone opens your website?

Follow a single request as it travels through the infrastructure — and back. This entire journey is what I keep fast, secure and online.

00 ORIGIN

Your customer clicks.

Someone, somewhere, types your address or taps a link. From here everything happens in a few hundred milliseconds.

01 DNS

DNS finds your server.

The internet looks up where "you" actually live. Get this wrong and nothing else loads — so I keep DNS fast and correct.

A · AAAA · CNAME · TTL 300 · anycast resolvers
02 CLOUDFLARE · EDGE

The edge filters and accelerates.

Bad traffic is stopped, real visitors are sped up, and your origin is shielded. This is your first line of defence.

WAF · DDoS · TLS 1.3 · CDN cache · rate-limit
03 WEB SERVER

The web server answers.

Nginx or Apache takes the request, terminates SSL, and hands it to your application — tuned to stay quick under load.

Nginx · Apache · HTTP/2 · gzip/brotli · keep-alive
04 APPLICATION

Your application runs.

The code that powers your business executes — with the right runtime, the right resources, and room to grow.

PHP-FPM · Node · Python · systemd · containers
05 DATABASE

The database returns the data.

Your real information — orders, users, content — is fetched in milliseconds and kept safe, backed up and replicated.

PostgreSQL · indexes · pooling · replication · PITR
06 RESPONSE

The page travels back.

The finished response returns along the same path, cached at the edge so the next visitor is even faster.

07 DELIVERED

Your customer sees your business.

All of that, every single time, without them ever knowing it happened. That invisible reliability is the whole job.

The full round-trip — kept fast, secure and online.
◆ 05INFRASTRUCTURE EXPERIENCETHE FULL STACK

The systems I work with, from the cloud down to the cable.

Patch panel and structured cabling inside a data centre rack
RACK · U01–U42
PATCH PANEL · CAT6A
UPLINK · 10 GbE
REV. C · STRUCTURED CABLING
CloudCompute, networking and storage across AWS, Azure and GCP.IaaS · VPC · autoscale
ServerProvisioning, tuning and lifecycle for Linux and Windows.systemd · kernel · GPO
NetworkDNS, routing, load balancing and edge delivery.DNS · LB · anycast
WebHigh-performance web serving and reverse proxies.Nginx · Apache · IIS
DatabaseReliable, tuned, replicated data layers.PostgreSQL · MySQL · MariaDB
MailDeliverable, authenticated mail infrastructure.SMTP · SPF · DKIM · DMARC
SecurityHardening, firewalls, VPN and TLS everywhere.firewall · VPN · SSL/TLS
BackupAutomated backups and rehearsed disaster recovery.snapshots · PITR · offsite
MonitoringMetrics, logs and alerts so nothing is a surprise.Prometheus · Grafana · alerts
◆ 06SERVICESOPEN A ROW FOR DETAIL

Take one thing off your plate — or all of it.

◆ 07CASE STUDIESENGINEERING STORIES

Real infrastructure problems, taken from broken to boring.

Detailed case studies with real architecture and metrics are being prepared. Below is the structure each one follows.

Network patch cabling inside a rack
CASE / 01 — PLACEHOLDERREV C
E-COMMERCE MIGRATION · SAMPLE STRUCTURE

From nightly outages to a platform that scales.

ProblemPeak-hour crashes, no visibility, hosting that couldn't keep up.
ArchitectureRe-platformed to autoscaling cloud with a managed, replicated database.
ImplementationRehearsed, zero-downtime cutover behind the edge with full rollback.
OutcomeStable through peak, faster pages, and monitoring on everything.
Uptime
after
Page load
improvement
0
Downtime
at cutover
◆ 08TECHNOLOGY ECOSYSTEMTHE TOOLKIT

A connected ecosystem — not a wall of logos.

CLOUD
AWSAzureGoogle CloudVPS
OPERATING SYSTEMS
LinuxWindows ServerUbuntuDebian
WEB & PANELS
NginxApacheIISPleskcPanel
DATA
PostgreSQLMySQLMariaDB
EDGE & SECURITY
CloudflareDNSSSL/TLSVPNFirewalls
DELIVERY
DockerGitLab CI/CDAnsible
◆ 09PROCESSHOW WE WORK

A clear path from "something's wrong" to "it just works."

01

Discover

Understand your business and what depends on what.

02

Audit

Map the current state, risks and quick wins.

03

Architect

Design the right, cost-aware target state.

04

Implement

Build and migrate carefully, with rollback.

05

Secure

Harden, patch and lock everything down.

06

Monitor

Put eyes on it so nothing is a surprise.

07

Optimize

Keep tuning cost, speed and reliability.

◆ 10 — START HERE

Something behind your business isn't working?

Let's fix what's happening behind the scenes — and make sure it stays fixed.

SYSTEMS NOMINAL · READY WHEN YOU ARE