Working on and maintaining cert-manager, an open-source cloud native TLS tool for Kubernetes (https://github.com/cert-manager/cert-manager/). Particularly interested in TLS trust and workload / machine identity.I also work on enterprise software which helps users get the most from machine identities in their environments.I also speak at conferences and have done media engagements as part of my role.

I improved and maintained the BBC's internal deployment tooling, working on a variety of features including TLS, container deployments, security, automation and resilient "hot" config management. This involved: heavy use of AWS; making far-reaching architectural decisions which affected traffic at some scale; and using a variety of different other technologies when I identified the correct tool for the job.One of the tools I created was used during the football World Cup in 2018 to gate network ingress during highly publicised trials of UHD streaming. I also created an efficient schema validator for that tool which has had the effect that no engineer has ever had to ask for help writing the non-trivial schemas, in multiple years of use.I developed a knack for practical and secure use of TLS and built a comprehensive serverless platform for the secure automated issuance of TLS certificates using AWS IAM roles as an anchor for trust.Mostly I worked in Python and Go, while also using SQL and Bash on a day-to-day basis.

I work mainly in Python, working on the BBC's cloud continuous delivery pipeline. We streamline AWS deployment and to make it easier to release secure applications at huge scale, including parts of bbc.co.uk and bbc.com which rank highly in terms of traffic served on a global scale.

I ported a large existing geophyiscs codebase from Linux to Windows, managing legacy code and modernising where appropriate.This was a paid position while finishing my studies at university.