Description

I design and build the infrastructure that keeps enterprises secure — and I'm increasingly doing it with AI.

Over 25 years I've delivered large-scale cloud migrations, zero-trust security architectures, and infrastructure automation for global organisations including IBM, Royal Dutch Shell, and IAG. The scale has been significant: a 65,000-user IAM transformation, the decommissioning of four data centres with zero data loss, and securing critical infrastructure across 50+ countries.

What sets my work apart right now is the intersection of traditional enterprise IT and AI automation. I'm building production-grade agent orchestration pipelines using Claude, OpenAI, and Grok — integrating LLMs directly into Infrastructure as Code workflows, vulnerability triage pipelines, and security operations. The results are measurable: faster delivery, fewer manual steps, and better-quality output.

My focus areas:

•Cloud security architecture — AWS, Azure, zero-trust, hybrid cloud

•Infrastructure as Code — Terraform, Ansible, CI/CD pipelines

•AI agent orchestration and LLM workflow automation

•Identity & Access Management — CyberArk, SailPoint, Entra ID, AWS IAM

•Vulnerability management — Qualys, Nessus, Splunk, ArcSight

I maintain a private hybrid cloud lab where I test, build, and document the patterns I use in client work. My GitHub has the scripts, templates, and AI workflow integrations: github.com/IT-Architect-UK/monorepo

If you're an architect, engineer, or CTO wrestling with how to bring AI into your infrastructure practice — let's connect.

Industry field of expertise

Languages

English
Native or bilingual

Workplace preferences

Can work on-site

Cardiff (up to 50km)

Kyndryl
Technical Integration Lead
BANKING AND INSURANCE
July 2024 - Today (1 year and 11 months)
London, United Kingdom
▪ Leading complex technical integration and security projects across enterprise client environments, increasingly leveraging AI-assisted tooling to accelerate delivery.
▪ Deployed Tripwire Enterprise for file integrity monitoring, strengthening compliance posture across client estates.
▪ Designed and implemented MOVEit Transfer & Automation for secure managed file transfer; hardened on-premises and cloud infrastructure using Ansible automation, Group Policy, and vendor security baselines.
▪ Conducted penetration testing and vulnerability remediation using Nessus and Qualys; delivered risk reduction reports to senior stakeholders.
Active Directory Linux Ansible Windows Server artificial intelligence
CyberBase & IAG
IT Infrastructure Security Architect
AVIATION AND AEROSPACE
January 2021 - April 2024 (3 years and 3 months)
London, United Kingdom
▪ Architected zero-trust cloud access solution, migrating 50+ on-premises servers to AWS; implemented Entra ID and AWS IAM with MFA across all workloads.
▪ Deployed Splunk and QualysGuard for real-time monitoring and vulnerability scanning; automated security configurations with Terraform and Ansible, reducing manual provisioning time by approximately 60%.
▪ Introduced AI-assisted IaC generation and review into the delivery pipeline, accelerating infrastructure automation authoring and reducing review cycles.
▪ Authored detailed security documentation and change management reports, ensuring compliance with industry standards.
Amazon Web Services Microsoft Azure Ansible Terraform GitHub
IT Solution Architecture Limited
IT Infrastructure Architect – AI & Automation SME
DIGITAL AND IT
January 2023 - Today (3 years and 5 months)
Cardiff, United Kingdom
▪ Designing and operating a private hybrid cloud lab (VMware vSphere 8, Ubuntu 24, Windows Server 2025) for proof of-concept testing and continuous AI/infrastructure research.
▪ Building production-grade AI agent orchestration pipelines using Claude, Grok, and OpenAI APIs — multi-agent workflows with tool use, memory, and structured output for IT operations.
▪ Developing LLM-powered Terraform and Ansible generation pipelines; integrating AI analysis into Qualys vulnerability scan workflows for automated triage and prioritisation.
▪ Deploying self-hosted LLM environments on private infrastructure with enterprise security practices (OPNsense, network segmentation, scripted policy automation).
▪ Maintaining active public GitHub repository with automation scripts, Terraform/Ansible templates, and AI workflow integrations.
artificial intelligence Windows Server Linux VMWARE Proxmox