Enterprise Cloud & AI Architect designing, governing, and delivering large-scale cloud and production Agentic AI systems.
I’m an Enterprise Cloud & AI Architect, Google Cloud Ambassador (Infrastructure), and 9× Google Cloud Certified practitioner based in the UK. I work across various sectors to design resilient multi-cloud platforms, zero-trust network boundaries, and governed multi-agent ADK architectures where security and blast-radius controls are built directly into the foundation.
Production engineering analyses covering boundary networking, ADK multi-agent blast-radius isolation, serverless vs. GKE runtimes, and enterprise AI governance.
A practical comparison of VPC Peering, Private Services Access and Private Service Connect, in my Google Cloud lab to explore address overlap, transitivity and DNS.
The same ADK agent container deployed to both platforms, with real cold-start numbers, a real load test, and an actual recommendation, anchored in a genuine Workload Identity gap GKE Autopilot has that Cloud Run doesn't.
When one ADK agent delegates to another, identity is not inherited along the way: two Cloud Run services, two service accounts, and the IAM binding that actually defines blast radius.
A practical reference design for putting cost controls, identity and observability around NL-to-SQL on Google Cloud.
Enterprise coding governance was built for humans. Antigravity lets an AI agent plan, execute, and commit code autonomously. This pivotal shift necessitates a new architectural blueprint.
A2A, the Agentic Mesh, and the governance layer inside the Gemini Enterprise Agent Platform: an enterprise architect's perspective from Google Cloud Next '26.
Bridging executive strategy and principal-level engineering across four foundational enterprise domains.
Moving beyond fragile single-prompt wrappers to deterministic, multi-agent systems with strict cryptographic identity boundaries, zero-trust tool execution, and non-repudiable Cloud Audit trails.
Engineering non-transitive, overlap-resilient network architectures where data movement is enforced at the packet and API perimeter rather than relying on application-level intent.
Designing paved-road internal developer platforms and container runtimes backed by empirical cold-start benchmarking, keyless CI/CD federation, and programmatic cost ceilings.
Bridging executive strategy and technical delivery across regulated industries (Financial Services, Public Sector, Retail) with provider-native architectures across Google Cloud, AWS, and private hypervisors.