AI & Security Engineering
AI expert and infrastructure leader with 25+ years of software delivery
experience. Working in Security Engineering to help enterprises adopt AI safely
and unlock productivity, including rolling out Model Context Protocol (MCP)
servers with guardrails for enterprise use.
Host of the AI Infrastructure podcast, sharing
practical experience and discussion on AI adoption, AI agents, security guardrails,
DevOps and cloud engineering.
Infrastructure Lead at Thoughtworks
December 2020 - Present | UK
- Rolled out an MCP risk assessment process across a large enterprise, using mcphints to support security reviews of server tools and declared capabilities
- Implemented AI guardrails through managed settings, tool restrictions and policies, role-based access control (RBAC), and logging
- Lead and grow engineering teams with a focus on simplicity, reliability and practical AI adoption
- Partnered with AWS to secure record funding for client projects and ensure best practices
- Reduced operational overhead and improved efficiency & time to market through strategic adoption of managed services
- Grew the Infrastructure discipline, inside the company and out, contributing learning materials and videos
Tech Stack:
MCP, AWS, GCP, Go, Kubernetes, JavaScript, Serverless, Terraform, GitHub, GitLab
AWS Cloud Practice Lead, Teamwork/Corexpert consultancy
February 2020 - November 2020 | Singapore
- Enhanced operational resilience by designing and implementing robust cloud-based backup and
disaster recovery solutions for clients.
- Achieved significant cost optimisation on cloud bills from GCP/AWS to save clients money.
- Pre-sales on large complex cloud migrations for digital transformation
Tech Stack:
AWS, GCP, Cloud, Backup, Disaster Recovery Planning (DRP)
Senior Engineer in Digital Science Platform in Gojek
October 2019 - January 2020 | Singapore
- Developed a process to label new instances to produce costing reports via
parameterised Jupyter Notebooks
- Improved system observability and proactive issue detection by instrumenting, exporting, and producing dashboards/alerts using Jsonnet, Grafana, Prometheus, and Go.
Tech Stack:
Machine Learning (AI), Prometheus, Grafana, Go
Devops lead at Property Management startup Unee-T
March 2018 - October 2019 | Singapore
- Engineered and automated a CI/CD pipeline for deploying Docker containers on AWS ECS, enhancing deployment reliability and frequency.
- Developed serverless microservices in Golang, focusing on robust integration and operational stability.
Tech Stack:
AWS, Go, Docker
Senior devops at Video streaming company Spuul
June 2016 - March 2018 | Singapore
- Ensured high availability and scalability by administrating a complex multi-region, fault-tolerant service on AWS.
- Developed operational tooling using AWS SDK Golang V2 to automate the rollout of ~150 channels on AWS Elemental media services, improving efficiency and consistency.
- Authored a Golang-based static site and playlist generator to optimize video delivery over AWS CDN, enhancing performance and feature set
- Wrote Vue.JS / AWS JS SDK serverless app to ingest video with metadata
Tech Stack:
ffmpeg, AWS, Go, HTML, JavaScript (JS)
Managing Director of Webconverger, the Browser Linux distribution
February 2012 - March 2016 | London/Singapore
- Designed, developed, and maintained a leading open-source Web kiosk distribution, ensuring system reliability and security.
- Implemented a configuration and device management service, enabling scalable deployments.
- Maintained system uptime across ~5000 machines through consistent patching and robust operational processes, demonstrating expertise in managing systems at scale.
Tech Stack:
Linux, shell, git
Compliance Process Manager at Telecoms Joint venture WAC
July 2010 - February 2012 | London
- Editor of compliance tests for product delivery from Widget Runtime (WRT)
vendors to Joint Venture members
- Lead development on security tools: widget signing and validation tools
- Designed test result reporting system for members and vendors to track their
compliance progress
- Presented and represented the company at the Mobile World Congress stand
Tech Stack:
Web browsers, mobile
Senior developer at Japanese mobile company Aplix
August 2007 - July 2010 | Guildford, Surrey
- Developing and testing the WebVM browser plugin for exposing device APIs
securely on mobile devices
- Contributed to OMTP BONDI, W3C DAP and W3C widgets working groups
- QA for the SDK, an Eclipse based IDE for BONDI widgets and an emulator
runtime
- System administrator for our source control, Bug Tracking System (BTS) and
services
Tech Stack:
JavaScript, PHP, Make, C, Shell, Standards processes
Skills
- Enterprise AI: AI adoption, Model Context Protocol (MCP) servers, AI-assisted engineering, workflow automation
- Security Engineering: MCP risk assessment, managed settings, tool restrictions and policies, role-based access control (RBAC), logging
- Certification: AWS Certified Security - Specialty
- Cloud Platforms: AWS, GCP
- Infrastructure & Automation: Kubernetes, Docker, Terraform, CI/CD, Infrastructure as Code (IaC)
- Programming Languages: Go, Shell, JavaScript
- Observability & Monitoring: Prometheus, Grafana
- System Reliability: Operational Tooling, Scalability, Fault Tolerance, Disaster Recovery
- Distributed Computing: Web (REST), Event-driven design
- Data stores: S3, DynamoDB, SQL
- Tools: vim, git, Make
- Servers: Debian/Ubuntu/AWS or any Unix/Linux system
- Domains: Entertainment, Self service, Real Estate, Telecommunications, Finance
- Methodologies: Agile / continuous integration
Education
- Graduated from the University of Helsinki Computer Science Masters program at
the Faculty of Science in 2005 with minors in Management, Mathematics,
Statistics, German and the Finnish language
Podcast & Presentations