Eliminating Static AWS Credentials in GitHub Actions with OIDC
Static credentials in CI/CD pipelines are a liability. Learn how to use OpenID Connect (OIDC) to let GitHub Actions authenticate to AWS without any stored secrets.
Insights on infrastructure, DevOps, and cloud architecture
Static credentials in CI/CD pipelines are a liability. Learn how to use OpenID Connect (OIDC) to let GitHub Actions authenticate to AWS without any stored secrets.
Essential patterns and practices for managing production infrastructure with Terraform. Learn how to structure your code, manage state, and avoid common pitfalls.
Real-world lessons from building observability infrastructure that processes terabytes of data daily. Learn what works, what doesn't, and how to avoid common pitfalls.
I'm a Senior Platform Engineer and DevOps Consultant with over six years of experience building cloud infrastructure that scales - from startups to enterprise systems. Across my career, I've delivered over $1 million in infrastructure cost reductions and worked on projects affecting hundreds of thousands of users.
My work focuses on building infrastructure that performs, scales, stays secure, and keeps costs lean—invisible to users while giving engineers the clarity and control to ship fast. I've built and maintained production systems across AWS, Azure, and GCP — from Kubernetes platforms and serverless architectures to real-time data pipelines in Python and TypeScript. Whether it's implementing GitOps workflows or untangling sprawling multi-account architectures, I bring a pragmatic approach focused on outcomes, not tools.
At Starboard, I'm leading a complete cloud platform modernisation for a defense technology company—secure GCP landing zones, Kubernetes platforms with policy-as-code, and self-service developer workflows built on golden paths and cloud native technologies. Previously, I worked on real-time data pipelines processing national weather data at the Meteorological Service of New Zealand Limited.
I believe the best systems are the ones you never have to think about. Every architecture decision should reduce cognitive load, every deployment should be boring, and every engineer should be able to ship with confidence.
Outside of work, I'm training for my first full marathon, and I produce drum and bass music where my tracks have amassed over 250,000 streams and been played on BBC Radio 1.