Platform · DevSecOps · Cloud · Security & Compliance
For 14+ years I've built, automated, and secured mission-critical platforms — across datacenters, multi-cloud, and regulated, air-gapped environments. I pair hands-on infrastructure and DevOps engineering (IaC, CI/CD, OpenShift) with security and compliance: CIS/NIST hardening, Zero-Trust, SOX & SOC 2, and vulnerability remediation. A stalled migration, a platform to modernize, or an estate to secure and make audit-ready — that's the call I take.
Empowering Global Tech Leaders
Selected Work
Six flagship cases, each: situation → what I did → result. Curated from 10+ projects to show range, not repetition.
CASE 01 · MULTI-CLOUD · AZURE + OCI
Multi-cloud delivery: Azure platform & identity, plus an OCI lift-and-shift
The challenge
Two enterprises, two clouds: one needed a governed, secure Azure platform with central identity and protected workloads; the other needed its Oracle EBS / Exadata estate migrated into Oracle Cloud (OCI) — both with cost and compliance under control.
On Azure
Designed the management-group & subscription governance and prod/non-prod landing zones, integrated Entra ID (Azure AD) SSO, and built Bicep IaC pipelines that deploy VMs repeatably with Key Vault secrets and NSGs — nothing hardcoded. Engineered Azure Backup (Recovery Services Vault) with full file-level and whole-VM restore runbooks.
On OCI
Lift-and-shifted Exadata (prod & non-prod) and EBS apps onto Oracle Linux, provisioned via Terraform, centralized access with Okta SSO and PCI-compliant bastions, and automated cost shutdown of idle/non-prod systems.
Result
Production workloads delivered, governed and protected across both Azure and OCI — migration, identity, infrastructure-as-code, and backup/restore proven on each.
CASE 02 · HPC & ENGINEERING
GPU-accelerated HPC cluster for CFD — remote 3D visualization that finally worked
The challenge
Engineers needed to run CFD jobs on a ~24-node HPC cluster from Linux workstations — but couldn't get GPU-accelerated 3D graphics to display remotely, since standard remote-desktop tools don't drive the GPU.
What We did
Designed the full cluster topology and architecture — a PBS Pro scheduler distributing jobs across the nodes — and solved the visualization problem with NVIDIA GPU-accelerated remote sessions over Linux. Automated file transfer, built the end-to-end user workflow, and integrated Active Directory so AD logins map straight to cluster accounts.
Result
Engineers could submit CFD jobs and see GPU-rendered 3D results remotely, with seamless AD-based access — a working visualization pipeline where remote GPU graphics had simply failed before.
CASE 03 · DATACENTER MIGRATION · BANKING
Bank datacenter migration: 100+ AIX & Linux servers, P6 → P770, EMC VMAX
The challenge
A bank had to relocate 100+ mission-critical servers — IBM AIX and RHEL — to a new datacenter, including Power 6 LPARs and physical Linux estates, with no room for data loss.
What We did
Led the UNIX team's migration: created VIO servers and virtual LANs on IBM P770 frames, migrated AIX LPARs from Power 6 to P770 via mksysb/NIM restore with SRDF replication on EMC VMAX, rebuilt 2/3/4-node AIX database clusters, and moved physical Linux servers with PlateSpin (P2V/P2P) onto Cisco UCS. Relocated VMware guests datacenter-to-datacenter using SRM + SRDF, and authored detailed runbooks for every step.
Result
100+ AIX and Linux servers migrated to new hardware, datacenter and storage — fully documented, with go-live patching to production standards and zero data loss.
CASE 04 · PLATFORM MODERNIZATION · NATIONAL RETAILER
AIX → Linux transformation: ~800 VMs, SAP HANA, automation & SOC 2
The challenge
~800 VMs and ~40 TB of mission-critical apps were running on platform-locked Power 6/7 (AIX). Rather than pour budget into P8/P9, the business needed to modernize onto Linux — without disrupting SAP, Oracle, analytics, and warehouse systems.
What We did
Re-platformed the estate from AIX to Linux: migrated SAP to SAP HANA on Linux, moved Oracle databases (RAC/Exadata), and rehosted the app tiers — Apache Tomcat, Cognos, ETL, and the Manhattan WMS. Introduced Ansible Tower — the company's first automation — for server & user provisioning, service integration, and config-drift detection. Then led the build-out toward SOC 2 compliance.
Result
Mission-critical workloads modernized off locked Power hardware onto Linux, SAP running on HANA, the org's first automation framework in place, and the business prepared for SOC 2 audit.
CASE 05 · MONITORING PLATFORM · HIGHER EDUCATION
Replaced legacy monitoring with a 3,000-check Nagios XI platform
The challenge
A university's monitoring ran on aging Xymon — limited visibility across a multi-site estate of servers, applications, databases, and network gear, with no automated alerting into the ticketing system.
What We did
Migrated all monitored systems from Xymon to Nagios XI, importing 3,000 custom service checks spanning server health, applications, databases, firewalls and switches. Wrote custom scripts to monitor home-grown identity applications, configured multi-level escalations and paging, and integrated the ticketing API so alerts auto-create and assign tickets.
Result
A from-scratch monitoring platform with 3,000 checks and closed-loop alerting — full visibility across servers, apps, databases and network, with incidents raised automatically.
CASE 06 · VMWARE / STORAGE · ZERO DOWNTIME
Live SAN migration of ~500 VMs — zero downtime, delivered solo
The challenge
A ~400–500-VM VMware estate needed its entire storage platform migrated off a legacy Dell SAN onto Dell Compellent, plus a 10GbE network upgrade — with no acceptable downtime for staff or students.
What We did
Certified as a Dell Compellent administrator for the project, added dual-port 10GbE NICs and cabled in the new SAN myself, built new datastores, and live-migrated every VM with Storage vMotion — then decommissioned and returned the old array once clear.
Result
~400–500 VMs moved fully online with zero downtime and no user impact — delivered end to end, single-handed, cabling included.
WHY CHOOSE TUWA
