Private infrastructure.
Open-source platform engineering.
Self-hosted LLM platforms, Kubernetes at scale, and compliance-ready architectures for regulated industries. Data stays on your premises. Your team gets full operational ownership.
Previously worked with teams at
"Our app went down and we didn't notice for an hour"
You need someone to build proper monitoring and alerts so you find out before your customers do.
"Deploying a new feature takes our whole team half a day"
You need deployments automated so your developers ship features, not babysit servers.
"A big client is asking about our security setup"
You need to pass their security questionnaire or audit, without months of internal work.
"Our cloud bill doubled and we don't know why"
You need someone to find where the money is going and cut the waste, without breaking anything.
I build private AI platforms on Kubernetes. Self-hosted LLM inference, RAG pipelines, production-grade GitOps. Over a decade of infrastructure across fintech, pharma, and regulated cloud. Your data stays on your premises.
More about how we work →AI infrastructure and open-source platforms.
Private AI Platform
Self-hosted LLM infrastructure that runs entirely on your premises. OpenAI-compatible API gateway, GPU inference on Kubernetes, RAG pipeline over your knowledge base.
Kubernetes Platform Engineering
Production-grade HA clusters on bare metal or cloud. Flux CD GitOps with encrypted secrets, Cilium eBPF networking, Prometheus/Grafana/Loki observability stack.
Compliance-Ready Infrastructure
Architecture for regulated industries: air-gapped deployments, GDPR and MiFID II ready, zero-trust network policy, secrets encrypted in git and decrypted only at runtime.
SRE & Incident Response
Senior SRE support: root cause analysis, post-mortem leadership, alerting gaps closed after every incident. Short-term embedded engagements and AI-augmented observability tooling.
Private LLM Inference on Kubernetes: Real Costs and Real Numbers
An honest breakdown of what self-hosted LLM inference actually requires — hardware, costs, throughput reality, and when it makes sense versus just using the API.
Read → May 2026Secrets & Zero-Trust in Kubernetes
SOPS+age encrypted secrets, default-deny NetworkPolicies, and SSH hardening: complete secrets hygiene and zero-trust for a production Kubernetes cluster.
Read → May 2026Complete SRE Stack: Monitoring, Security & Disaster Recovery
kube-prometheus-stack, Falco runtime threat detection, and Velero: full observability, security, and disaster recovery layer for Kubernetes.
Read →Running a similar stack?
Let's talk.
We take on short-term infrastructure engagements and platform work. Reach out at [email protected] or find me on LinkedIn.