Branch Manager
A web app for managing Azure DevOps branches across many repositories at once. Built because clicking through the portal fifty times per release is not a workflow.
Tech Lead Cloud Automation @ Rubicon
I build cloud platforms that are secure by design.
Cloud architect at Rubicon, specialised in Azure, identity and automation. I design the platform, write the code that deploys it, and blog about what I learn along the way.
AzureEntra IDBicepAzure DevOpsGenAIMCP
Selected work
Things I've built
Open-source tools and experiments, mostly born from a real problem at work or at home. Every one of them taught me something worth writing about.
Custom AI Chat
A fully self-hosted AI chat stack with local models, image generation and web search. Private by default, no subscription attached.
Shelly MCP Server
An MCP server that lets AI assistants control Shelly smart home devices directly. Talking to your house, but in a structured protocol.
This website
The site you are looking at. Nuxt 4, Nuxt Content and Tailwind 4, statically generated and served from Cloudflare's edge. Designed and vibe coded in the open.
What I do
Expertise
A decade of infrastructure experience, applied to the cloud. From network cables to landing zones — always with security as the starting point.
Cloud & Identity
Azure architecture and design with a security-first mindset. Identity, governance and hybrid connectivity done properly.
Microsoft AzureEntra IDCloud SecurityHybrid ConnectivityPIM & Governance
Automation & IaC
If it can be code, it should be code. Infrastructure, role assignments and policies deployed from a pipeline, not a portal.
BicepPowerShellAzure DevOpsCI/CD PipelinesPolicy as Code
AI & Tooling
Practical GenAI: coding assistants, self-hosted models and MCP servers. Exploring what these tools change about how we build.
GenAI WorkflowsMCP ServersSelf-hosted AIVibe CodingIntune & Endpoints
From the blog