Technical writing
Notes from deep cloud work
Practical explanations of cloud services and architecture patterns, organized around the systems I build: secure GCP foundations, delivery pipelines, Kubernetes, operations, data and AI.
Last reviewed: 19 July 2026
Featured guide
SC-100: How I Passed the Microsoft Cybersecurity Architect ExamCloud security & zero trust
Google Cloud · Jul 2026
Diagnosing Cloud Run Deployments: Build, Revision, IAM and Runtime Failures
A systematic way to isolate Cloud Run failures across source builds, image publication, revision startup, identity and request handling.
ExploreAI Security Engineering · Jul 2026
Designing an Agentic Security Harness with Tools, Memory and Evolving Skills
Engineering principles for orchestrating security tools and LLM agents while keeping actions bounded, evidence traceable and learned playbooks reviewable.
ExploreGCP architecture
Cloud Compliance · Jul 2026
Engineering Continuous Compliance Evidence for Regulated Health-Tech on GCP
How to turn HIPAA, GDPR and security-control requirements into continuously collected technical evidence instead of a last-minute audit exercise.
ExploreFinOps · Jul 2026
A Practical GCP FinOps Audit: From Billing Export to Remediation
A defensible workflow for finding waste, allocating spend, testing recommendations and proving that cloud-cost remediation actually worked.
ExploreDevSecOps · Jul 2026
Securing Mobile Release Pipelines for Google Play and the App Store
Release engineering controls for signing, store credentials, policy checks, provenance and recoverable mobile deployments.
ExploreCloud Security · Jul 2026
Debugging 403 Permission Failures in Event-Driven GCP Systems
A principal-first method for resolving 403 errors across Scheduler, Pub/Sub, Cloud Run, Tasks and notification services without over-granting IAM.
Explore