platform · infrastructure · security
I build and run the infrastructure other engineers depend on — and I care deeply about the security and compliance underneath it.
Based in Gdynia, Poland · open to senior / staff platform and infrastructure roles, the same work with security and compliance in scope, and consulting engagements.
I'm a platform and infrastructure engineer with ten years spent building and running the systems other engineers depend on: multi-account AWS estates, Kubernetes in production, everything defined as code and applied through peer-reviewed pipelines, plus the tooling that turns recurring manual work into something teams can self-serve.
What I care about underneath that is security and compliance — not as a separate function, but as properties of the platform itself. Least privilege, tenant isolation and audit evidence are things you build in, not paperwork you reconstruct once a year. I'm a CISSP, and I've taken SOC 2 Type II, ISO 27001 and Cyber Essentials Plus to certification while the engineering team kept shipping.
My bias is practical: the safe path should also be the easy path. I'd rather automate a control than write a policy nobody reads, and I'd rather give engineers a self-service route than have them file a ticket to do their job. I carry the pager for what I build, which tends to keep me honest about what's actually maintainable.
Outcome: fewer tickets, no loss of control.
Replaced blanket EKS cluster-admin with a tiered model — read-only by default, with time-bound, logged write escalation brokered through Okta and IAM Identity Center. Built from primitives already in place rather than buying a PAM product: it closed a material audit gap, and engineers stopped filing tickets to get their work done.
Outcome: clusters that get upgraded, not feared.
EKS lifecycle end to end — provisioning, version upgrades, RBAC design, and the workloads on top. Namespace and tenant isolation for dedicated client accounts, with Fargate and Helm where they earn their place.
Outcome: every change reviewed, planned, reversible.
Multi-account Terraform and Terragrunt applied through Atlantis, so every change is peer-reviewed, version-controlled and planned before apply — account foundations, networking, clusters and production workloads, with automated credential rotation and policy enforcement in CI.
Outcome: access that is auditable and revocable by design.
Migrated a company identity platform to Okta for 83 employees, modelling org structure as groups that drive access to AWS, GitHub and Databricks automatically. Joiner/mover/leaver stops being a fire drill, and Zero Trust covers the internal services.
Outcome: SOC 2 Type II with zero findings.
Led SOC 2 Type II end to end to a clean report, and delivered ISO 27001, Cyber Essentials Plus and GDPR programmes. The useful part is wiring evidence collection into everyday infrastructure so it holds up continuously, instead of being reconstructed each audit window.
Outcome: LLM adoption with practical guardrails.
Established an AI governance framework across engineering and the wider company — tool approval criteria, data handling boundaries, acceptable use, and a review process for adopting new tools. The newest place where "move fast" and "don't leak everything" need a referee.
Artificial Labs
Cloud infrastructure, identity, endpoint and governance across the company estate — AWS as code with the pipelines that apply it, Okta as the central identity provider with automated joiner/mover/leaver provisioning, and MDM across the device fleet. Established the company's AI governance framework for engineering and beyond, and run ISO 27001 audit cycles as a continuous process rather than an annual exercise.
Equilibrium Energy
Platform, Kubernetes and security for an AWS-based energy trading company serving dedicated client tenant accounts — both the internal infrastructure and the infrastructure customers ran on. Multi-account Terraform and Terragrunt through Atlantis, EKS in production, a redesigned secrets architecture, and the SOC 2 Type II programme end to end. Carried on-call for the platform.
Equilibrium Energy
Cloud security and identity management across AWS — secure network access (WARP) and IAM design — plus infrastructure automation from foundational components to operating EKS clusters and production workloads. Owned the SOC 2 Type II program from inception to certification.
Equilibrium Energy
Light
Infrastructure management (AWS, Terraform, EKS, Fargate, GitHub Actions) alongside compliance and security work — SOC 2 Type II reporting, code review, and the risk registry.
Artificial Labs
Built and managed AWS environments with Terraform, kept them as secure as possible, and automated whatever could be automated. Helped achieve ISO 27001 certification.
EXATEL
Redge Technologies
Continuous Integration with Puppet; managed staging environments.
Centralny Ośrodek Informatyki
I'm looking for senior / staff platform and infrastructure roles — multi-account AWS, Kubernetes in production, infrastructure as code through pipelines, and the developer experience around it. I'm especially interested where that comes with security and compliance in scope, since that's the part I care most about. I also take consulting engagements: platform and IAM architecture, or a compliance programme (SOC 2, ISO 27001, GDPR, Cyber Essentials / CE+) taken from inception to certification. If any of that is on your plate, get in touch.