Writing
Long-form notes on site reliability, platform engineering, cloud security and engineering leadership.
2026
-
GitOps: Beyond the Hype
What GitOps looks like in practice: where it delivers, with numbers from Intuit, Deutsche Telekom and Adobe, where it quietly falls apart, and how to make it work.
-
Terraform at Scale: Patterns and Anti-Patterns
What separates teams that run Terraform smoothly at scale from those fighting state corruption, slow plans and drift, drawn from Cloudflare, Stripe, Uber and Benchling.
-
The Three Pillars of Observability: Logs, Metrics, Traces Done Right
Monitoring tells you when something breaks; observability tells you why. How to get logs, metrics and traces right, with OpenTelemetry, smarter sampling and a checklist.
-
SRE in 2026: What's Changed and What's Next
SRE was not automated away. What changed by 2026: rising toil, slow as the new down, the limits of the autonomous SRE, Rust and eBPF, and GreenOps.
2025
-
SRE & Security Lessons from the 2025 Trenches
What broke at hyperscale in 2025, why zonal redundancy was an illusion, and the code patterns that help when a configuration change, not hardware, takes systems down.
-
Beyond the Breach: A playbook for Cloud Security
A playbook for the misconfigurations and IAM flaws behind most cloud breaches, covering Zero Trust, CSPM, DevSecOps, a secure S3 bucket in Terraform, and security culture.
-
Proving the ROI of Your SRE Program
How to translate availability, SLOs and MTTR into revenue, churn and operating cost, so leadership can see the return on an SRE program.
-
Threat Modeling: The Ultimate Guide
Why threat modeling belongs inside delivery instead of at the end: the main methodologies, threat modeling as code, and the pitfalls engineering managers should avoid.
Get new posts by email
One email when a new post is published, and nothing else. Every email has an unsubscribe link.