Cyber-resilience platform for servers and endpoints, sold to organisations in scope of NIS2. Full technical ownership: architecture, security posture, regulatory alignment and delivery.

• Security architecture: post-quantum ML-KEM transport, shell-less storage appliance, EU-only data custody chain, zero-knowledge key model.
• Recovery engineering: instant bare-metal restore to unprepared hardware, in-flight EFI and partition repair, hypervisor live mount and migration.
• NIS2 obligations translated into concrete architectural and operational controls; ISO 27001 programme and partner DPA framework under way.
• Six platform layers in production within six months, built single-handedly while employed full time.

Migration of a legacy bare-metal architecture to AWS, including large-scale refactoring of Perl systems into Java, Python and C++.

• Owned target architecture and migration approach for core data processing pipelines.
• Course-corrected key architectural decisions mid-programme, preventing critical performance bottlenecks.
• Promoted within two months to primary technical liaison between engineering, product and leadership.
• Led a five-person team that outdelivered a fifteen-person AWS Professional Services team by five projects to none.

Technical lead for on-premise development of Datto's flagship Business Continuity and Disaster Recovery platform - the company's highest-rated product and a core asset of a $6.2B acquisition.

• Technical direction and architectural standards for the operating system and core services teams.
• Core member of the rapid response team for critical large-scale production incidents.
• Owned platform cybersecurity with the SecOps function: threat mitigation, customer security requirements, compliance.
• Architected for high availability and 100% uptime on critical communication paths; tens of millions in savings through performance optimisation.

Industrial IoT platform for energy optimisation in heavy industry and power generation - an OT environment with the constraints that come with it.

• Embedded software from low-level drivers to application logic.
• Designed security protocols for the TCP/IP communication layer and custom protocols for industrial IoT.
• Administered bare-metal network architectures and the lifecycle of a large deployed device fleet.
• Led technical integration of the platform into diverse client infrastructures.

• Secure embedded software for critical defence systems, delivered under formal certification, safety and security assurance regimes. 
• Employer, project detail and responsibilities remain subject to a non-disclosure agreement; the sector and nature of the work can be discussed.