Skip to content

Expertise

Seven domains, ordered by where I spend my time today. Each describes work I lead and do; the technology inventory further down is the supporting evidence.

AI & Agentic Systems

Architecture for production AI: agent runtimes, retrieval, model routing, tools, memory, gateways, evaluation, and the enterprise systems they connect to.

  • LLM application and agent architecture
  • Multi-agent orchestration and tool-calling gateways
  • Retrieval-augmented generation and retrieval quality
  • Embeddings, vector search and document ingestion pipelines
  • Structured output and function calling
  • MCP and A2A as enterprise integration surfaces
  • Guardrails, evaluation and human-in-the-loop review
  • Model routing and multi-model architectures
  • Python
  • Node.js
  • AWS
  • Azure
  • PostgreSQL
  • Redis

AI-Native Software Engineering

Redesigning the software delivery lifecycle around coding agents, specifications, automated verification, and human judgment.

  • Specification-driven development with AI agents
  • AI-assisted architecture and documentation generation
  • Legacy source and dependency analysis at scale
  • Test generation with human validation gates
  • AI-assisted code review and its limits
  • Governance for AI-assisted delivery
  • Claude Code
  • MCP
  • Git
  • JavaScript
  • Python

Cloud & Platform Engineering

Cloud and infrastructure architecture across AWS, OCI, and Azure: Kubernetes, gateways, networking, observability, and infrastructure as code.

  • AWS and Azure platform architecture
  • Kubernetes and container orchestration
  • Serverless and event-driven infrastructure
  • High availability, networking and caching strategy
  • CI/CD pipelines and deployment strategy
  • Observability and operational readiness
  • AWS
  • Azure
  • Oracle Cloud
  • Kubernetes
  • Docker
  • Redis

Engineering Leadership

Leading complex technical initiatives, setting architectural direction, developing engineers, and turning experimentation into repeatable engineering practice.

  • Technical strategy and architecture governance
  • Leading teams through complex, ambiguous delivery
  • Mentoring engineers and architects
  • Driving AI adoption without abandoning engineering discipline
  • Technical decision-making and trade-off communication
  • Engineering process transformation

Security

Security designed into the architecture from the start: identity, network boundaries, credentials, tenant isolation, secure delivery, and AI guardrails.

  • Cloud and application security architecture
  • Identity and access management
  • Secure SDLC practice
  • Credential isolation and secure tool execution for AI systems
  • Network and perimeter architecture
  • Security governance and review
  • AWS
  • Azure
  • Check Point CloudGuard
  • Kubernetes

Software Architecture

Designing distributed, integration-heavy enterprise systems that evolve without losing reliability, clarity, or operational control.

  • Distributed and service architecture
  • API and integration design
  • Event-driven architecture
  • Scalability and resilience patterns
  • Legacy integration and incremental modernization
  • Architecture review and technical decision records
  • Node.js
  • Java
  • Python
  • Go
  • React
  • PostgreSQL

Data

The data layer behind enterprise applications and AI systems: relational modeling, caching, retrieval, vector search, ingestion, and performance.

  • Relational data modeling and query performance
  • Document and key-value data design
  • Vector search and embedding storage
  • Document ingestion and RAG pipelines
  • Caching strategy
  • PostgreSQL
  • Oracle
  • SQL Server
  • MongoDB
  • Redis
  • MySQL

Current focus

The initiatives and questions I am actively working on. Reviewed quarterly.

  • AI & agentic systems

    Designing enterprise agent platforms, RAG systems, tool architectures, and multi-model runtimes that integrate with existing business systems. MCP is settling into that picture; A2A I am watching closely.

  • AI-native software engineering

    Redesigning how software is specified, built, reviewed, tested, and modernized when coding agents join the engineering workflow.

  • Cloud & infrastructure

    Building the cloud and platform layers behind modern AI systems: Kubernetes, gateways, infrastructure as code, observability, networking, and multi-cloud architecture.

  • Engineering leadership & innovation

    Leading SWAT, turning emerging technologies into repeatable engineering capability, and guiding teams through high-complexity technical work.

  • Security & AI governance

    Designing identity, credential boundaries, tenant isolation, guardrails, auditability, and human control into AI systems from the beginning.

  • Software architecture & modernization

    Modernizing complex enterprise systems and integration-heavy platforms while preserving the business behavior, reliability, and operational control they already provide.

Current engineering stack

The technologies I reach for most in the systems I am building today: agent runtimes, cloud infrastructure, APIs and gateways, observability, security, and data platforms. This is my current working set, not the limit of my experience.

AI & agentic systems

  • Claude
  • OpenAI
  • Azure AI Foundry
  • OCI Generative AI
  • Amazon Bedrock
  • Vercel AI SDK
  • n8n
  • LangChain
  • RAG
  • MCP
  • A2A

Cloud

  • AWS
  • Microsoft Azure
  • Oracle Cloud (OCI)
  • Google Cloud
  • Vercel

Platform & infrastructure

  • Kubernetes
  • Docker
  • Terraform
  • Nginx
  • Apache HTTP Server
  • Apache APISIX

Observability

Languages

  • TypeScript
  • JavaScript
  • Python
  • Java

Backend

  • Node.js
  • FastAPI

Frontend

  • Next.js
  • React

Mobile

  • Flutter
  • Swift
  • Kotlin

Data

  • PostgreSQL
  • Oracle AI Database
  • Oracle AI Vector Search
  • Redis
  • MongoDB

Security

  • OAuth 2.0 / OIDC
  • HashiCorp Vault
  • JWT
  • IAM
  • RBAC
  • PII detection & anonymization
  • Secure SDLC
  • Check Point CloudGuard

This stack sits on more than a decade of hands-on work across backend, frontend, mobile, databases, blockchain, cloud, DevOps, security, and platform engineering. The full inventory below covers the broader technology base behind the work I lead today.

Full technology inventory

Show full inventory193 technologies

A broader view of the platforms, languages, frameworks, protocols, and infrastructure I have used in production, led teams with, earned certifications in, or evaluated in depth. Current technologies come first in each group; earlier experience stays visible because it is part of the foundation behind the current work.

AI & agentic systems

  • Claude
    • Claude Code
  • OpenAI
    • ChatGPT
    • Codex
  • Azure AI Foundry
    • Azure OpenAI
  • OCI Generative AI
  • Amazon Bedrock
  • Vercel AI SDK
    • OpenAI-compatible APIs
  • n8n
  • LangChain
    • LangGraph
    • LangSmith
  • RAG
  • MCP
  • A2A
  • Gentle AI
  • opencode
  • OpenRouter
  • Gemini

Applied AI

  • Azure AI Speech
  • Contextual retrieval
  • Cross-encoder re-ranking
  • Embeddings
  • FFmpeg
  • Hybrid search (vector + BM25)
  • Microsoft Presidio
  • Schema-constrained extraction
  • sentence-transformers
  • spaCy
  • tiktoken
  • Whisper
    • CTranslate2
    • faster-whisper
  • MLX
  • ONNX Runtime

Cloud

  • AWS
    • API Gateway
    • Aurora / RDS
    • AWS CDK
    • AWS Lambda
    • CloudWatch
    • DynamoDB
    • ECS / Fargate
    • Elastic Load Balancing
    • ElastiCache
    • EventBridge
    • Route 53 / ACM
    • S3 / CloudFront
    • Secrets Manager / SSM
    • Step Functions
    • Elastic Beanstalk
  • Microsoft Azure
    • Azure DevOps
  • Oracle Cloud (OCI)
    • Autonomous Database
    • OCI Bastion
    • OCI Cache
    • OCI Container Registry
    • OCI DevOps
    • OCI edge (WAF / LB)
    • OCI networking (VCN)
    • OCI Object Storage
    • OCI Streaming
    • OCI Vault / KMS
    • OKE
  • Google Cloud
    • Firebase
  • Vercel
  • Huawei Cloud

Platform & infrastructure

  • Kubernetes
    • External Secrets Operator
    • Kustomize
  • Docker
  • Terraform
  • Nginx
  • Apache HTTP Server
  • Apache APISIX
    • etcd
  • Serverless architecture

Observability

  • OpenTelemetry
  • Elastic
    • Elastic APM
    • Elastic RUM
  • Application performance monitoring
  • Distributed tracing
  • Structured logging

Languages

  • TypeScript
  • JavaScript
  • Python
  • Java
  • SQL
  • Dart
  • Go
  • PL/SQL
  • C++

Backend

  • Node.js
    • Express
    • Sequelize
  • AJV / JSON Schema
  • Zod

Frontend

  • React
    • Next.js
  • Tailwind CSS
  • Material UI
  • React Hook Form
  • TanStack Query
  • Angular
  • Vue.js

Mobile

  • Flutter
    • Dio / Retrofit
    • GetX
  • Swift
  • Kotlin
  • Google Sign-In
  • Native Android
  • Native iOS

Data

  • PostgreSQL
  • Redis
  • MongoDB
  • Microsoft SQL Server
  • MySQL
  • Oracle Database
    • Oracle AI Database
  • CouchDB

API & integration

  • REST
  • Meta WhatsApp Business Platform
  • OpenAPI / Swagger
  • Server-Sent Events
  • SOAP
  • Webhooks

Security

  • OAuth 2.0 / OIDC
    • JWT
  • HashiCorp Vault
  • IAM
  • RBAC
  • PII detection & anonymization
  • Secure SDLC
  • Check Point CloudGuard
  • CSP / HSTS
  • Tenant & credential isolation
  • HMAC webhook verification
  • mTLS

DevOps & delivery

  • CI/CD
  • Git
  • GitHub Actions
    • GitHub OIDC federation
  • Preview environments

Blockchain

  • Ethereum
  • Hyperledger Fabric

Legacy & modernization

  • Adobe ColdFusion
  • Mainframe modernization exposure
    • CICS
    • COBOL
    • Db2
    • JCL

Engineering tooling

  • Metadata-driven code generation
  • Spec-driven development
    • OpenSpec
  • Mermaid
  • Obsidian
  • ESLint
  • Jest
    • Supertest
  • Kanban
  • Lerna
  • Playwright
  • Prettier
  • Scrum
  • Testing Library
  • Vitest
  • Yarn
  • Power Apps
    • Copilot Studio
    • Dataverse
    • Power Automate
    • Power BI
  • Figma