Kubernetes platforms
Production-grade EKS, GKE and AKS: cluster design, node strategy, ingress and Gateway API, service mesh, autoscaling and cost control.
Cloud platform engineering · UK
Cloud platforms that are secure, compliant and boring to run.
Edemantech designs, builds and hardens Kubernetes and cloud platforms on AWS, GCP and Azure — from a first production cluster to multi-cloud migrations and PCI DSS-ready infrastructure. Over 15 years of hands-on platform and DevOps engineering, from start-ups to banks and government.
- 15+years in platform & DevOps
- 3major clouds in production
- PCI DSS 4.0& ISO 27001 delivery
Services
Focused, senior engineering — the platform work that's hard to hire for and expensive to get wrong.
Cloud migrations
On-prem to cloud and cloud to cloud. I've moved a live platform AWS → Azure → GCP, and know where the sharp edges are.
Compliance-ready infrastructure
PCI DSS 4.0 and ISO 27001 remediation that actually closes findings: WAF, network policy, admission control, audit logging, secrets management.
Infrastructure as code & GitOps
Terraform, ArgoCD, Crossplane and GitHub Actions — repeatable environments and self-serve infrastructure so teams stop waiting on tickets.
Observability & incident response
Metrics-first dashboards, sensible alerting and runbooks that turn firefighting into repeatable troubleshooting — including AI-assisted root-cause analysis.
Platform & security reviews
A fixed-scope assessment of your cloud and Kubernetes setup, with a prioritised, plain-English report of what to fix first.
Track record
A selection of platform work. Organisations are described rather than named.
Digital identity · Fintech
Built a regulated platform from zero
Lead platform engineer for a decentralised digital-identity platform. Designed and ran Kubernetes across EKS, AKS and GKE through a full AWS → Azure → GCP migration, and led PCI DSS 4.0 and ISO 27001 remediation.
Tech scale-up
Zero-downtime ingress modernisation
Migrated production traffic off deprecated ingress-nginx onto the Kubernetes Gateway API with no customer impact, alongside internal TLS, stronger secrets management and self-serve infrastructure.
Global investment bank
On-prem to GCP migration
Bootstrapped GCP landing zones with Terraform-driven account provisioning to support the move of workloads out of the data centre.
Major UK retailer
Group-wide SSO & container migration
Single sign-on across the group's consumer brands, and migration of microservices onto AWS ECS.
Open Banking
Sandbox for the UK's largest banks
Built the cloud infrastructure for an Open Banking developer sandbox used by the UK's largest retail banks.
UK government
Cloud delivery for a central government department
AWS infrastructure and delivery pipelines for high-traffic public digital services.
How I work
-
Understand
A short discovery to learn your constraints — team, budget, compliance deadlines, what's already on fire.
-
Plan
A clear written plan with explicit decisions and trade-offs, so there are no surprises.
-
Build
Everything as code, reviewed, tested in a non-production environment first and rolled out safely.
-
Hand over
Documentation, runbooks and pairing with your team, so you own the platform when I leave.
Certification history
- AWS Solutions Architect – Professional
- AWS DevOps Engineer – Professional
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Application Developer (CKAD)
- Google Cloud Associate Cloud Engineer
Education
BSc (Hons) Computer Science
Tooling I use day to day
Kubernetes · Terraform · ArgoCD · Helm · Istio · Gateway API · Crossplane · GitHub Actions · Datadog · Prometheus · Kyverno · Falco · Cloud Armor · AWS · GCP · Azure
Let's talk
Tell me a little about your platform and what you're trying to achieve.