Home  /  Architecture

03 / Architecture

Architecture and design

I design technology estates that are secure, resilient, governable and deliverable.

Practice

My architecture work spans infrastructure, cloud, cybersecurity, data, AI, identity and operational resilience. I work across enterprise, solution and infrastructure architecture, connecting strategic intent, including operating model, IT and digital transformation goals, with the engineering reality needed to deliver it.

I am strongest in complex, regulated environments where architecture decisions must account for legacy systems, cloud adoption, regulatory pressure, supplier constraints, operational risk and cost. I am at my best breaking down silos between technical teams and working closely with the business to turn competing priorities into aligned, high-impact results.

Typical areas of work

Enterprise architecture governance and technical assurance.

Infrastructure and cloud strategy across AWS, Azure, OCI and hybrid estates.

Target-state architecture for cloud migration, datacentre modernisation and platform transformation.

Identity, IAM, PAM and Zero Trust architecture.

Architecture review of HLDs, LLDs, supplier designs and migration plans.

Data and AI platform architecture, including guardrails, governance and security considerations.

Business continuity and disaster recovery, with infrastructure resilience design.

Technical roadmaps that balance ambition, cost, risk and delivery reality.

Selected outcomes include £4M+ in documented cost savings through architectural redesign, 13× infrastructure scaling during the NHS COVID-19 response, and nationally critical platform delivery across UK Government, the Metropolitan Police and NHS England.

Technical breadth

Platforms, tools and standards I work across

A working selection, not an exhaustive list. Evidence of the breadth a senior architect is expected to govern.

Cloud

AWS Azure Oracle OCI M365 Exchange Online Express Route Direct Connect Hybrid Cloud

Cybersecurity

Zero Trust / ZTNA CASB SIEM / SOAR Palo Alto Cortex CrowdStrike FortiGate MS Sentinel MS Purview PKI CIS Hardening Darktrace XDR EDR Observability Patching

Virtualisation & containers

VMware vSphere VMware VCF NSX Nutanix Hyper-V Citrix VDI Kubernetes Docker Red Hat OpenShift

Networking

SD-WAN SASE MPLS BGP Cisco / Meraki F5 / Kemp LB Zscaler Netskope CATO Juniper Alta Labs Global Load Balancing Microsegmentation VMware NSX Nutanix Flow Subnetting IPv4 / IPv6

Server hardware & physical layer

HPE Dell Lenovo Cisco UCS Rack Design Ethernet Cabling Fibre Cabling SFPs Physical Installations Datacentre Logistics

On-premises & datacentre

Rack Design Power Budgeting UPS / PDU Spec Hot/Cold Aisle CRAC / CRAH Structured Cabling Server Room Build Datacentre Migration Crown Hosting Microsegmentation

Identity & access

Active Directory Entra ID OKTA PAM MFA / FIDO OAuth / SAML Cisco DUO One Identity

Data & AI

Databricks Snowflake MS Fabric MSSQL / Oracle DB MLOps Agentic AI LLM / RAG ISO/IEC 42001 ETL Pipelines Data Lake Data Governance AI Security Nutanix AI NVIDIA Hardware

DevOps & IaC

GitHub / GitLab CI/CD Pipelines Terraform Pulumi Ansible DevSecOps JIRA / Confluence

Languages

Python PowerShell SQL YAML pySpark pandas SwiftUI

Frameworks & standards

TOGAF NIST ISO 27001 ISO/IEC 42001 MITRE ATT&CK NIS2 DORA ITIL AGILE C4 Model SFIA L6/L7