I'm a Cloud Infrastructure & DevOps Engineer based in Poland with 6+ years in tech (since 2020), designing, securing and operating infrastructure for large-scale enterprise environments on Microsoft Azure. I specialise in Azure networking, identity and governance, container platforms, Infrastructure as Code and automated delivery pipelines, turning manual, error-prone operations into repeatable, auditable processes.

I believe good infrastructure is only as strong as its documentation. The repositories here are reference implementations and runbooks, written the way I'd hand them over to a team: reproducible, verified and easy to operate.

• Design and operate secure Azure infrastructure: networking, identity, governance and monitoring
• Containerise and deploy workloads with Docker and Kubernetes
• Provision infrastructure as code with Terraform
• Build and maintain CI/CD pipelines with GitHub Actions and Azure DevOps
• Publish technical guides for engineers on dev.to

• Infrastructure Automation: Automated VM and Application Gateway provisioning with Terraform and CI/CD pipelines, cutting environment setup time from 2 days to 30 minutes.
• Secure Networking: Designed hub-spoke network architectures with private endpoints across 5 Azure subscriptions.
• Edge Security: Protected web workloads with Azure Application Gateway WAF, combining Microsoft-managed rule sets with custom rules and rate limiting to block malicious and abusive traffic.
• Cost Optimisation: Reduced compute spend by putting idle virtual machines on deallocation and shutdown schedules, so non-production capacity is paid for only when it's used.
• Product Engineering: Built and hardened KONTA, a production AI platform on Google Cloud Run with 100+ automated test files and 70+ merged pull requests.

• Azure Administration: Compute, storage, resource governance and day-to-day management tasks.
• Identity & Access: Microsoft Entra ID, RBAC and Active Directory Domain Services.
• Security, Monitoring & Compliance: Secure storage (Azure Files and Blob Storage), Azure Monitor, cloud security operations, and Microsoft Purview retention and eDiscovery.
• Azure Networking: Virtual networks, hybrid connectivity, load balancing, network security and private access to PaaS services.
• DevOps & CI/CD: Source control strategy, branching and pull-request workflows, build and release pipelines, and DevSecOps practices.
• Containers: Writing Dockerfiles, multi-container stacks with Docker Compose, and Kubernetes manifests.
• Infrastructure as Code & Automation: Terraform, YAML, Bash scripting and Makefile automation.
• Linux Administration: Day-to-day operations, shell tooling and troubleshooting.

An AI-assisted business ledger for small businesses, run from a web dashboard or WhatsApp

KONTA tracks sales, orders, inventory, customers, debtors and expenses. Merchants can send a WhatsApp text or voice note, and AI turns it into a proposal. Nothing changes in the books until a person confirms it, and the change itself is made by deterministic code.

• Platform: Containerised with a multi-stage Docker build (non-root runtime and health check) and deployed on Google Cloud Run. A least-privilege service account reads secrets from Secret Manager, and Firestore is locked down with deny-all rules, so all data access goes through the server.
• Security hardening: WhatsApp webhook HMAC verification, API rate limiting, request size limits, CSP/HSTS security headers, input validation before building Firestore paths, and phone numbers masked in logs.
• Reliability: Idempotent webhook processing, bounded timeouts on AI and messaging calls with safe retry rules, durable inbound and outbound message logs, and transactional ledger writes with concurrency isolation.
• Engineering practice: 100+ automated test files running against both an in-memory database and the Firestore emulator. Every change ships through a pull request (70+ merged).
• Tech Stack: TypeScript, React, Node.js / Express, Firestore, Google Cloud Run, Secret Manager, Docker, Gemini AI, WhatsApp Cloud API

A multi-container WordPress + MySQL stack with Docker Compose

Provisions, monitors and tears down a two-tier application with persistent volumes, service dependencies and port mapping. Every stage is verified with captured output.

• Tech Stack: Docker Compose, MySQL 8.0, WordPress, Docker Desktop

Kubernetes Pod specification: structure and API contract

A reference Pod manifest that breaks down the Kubernetes API contract (apiVersion, kind, metadata and spec) and sets out conventions for clean, version-controlled manifests.

• Tech Stack: Kubernetes, YAML, Nginx, Git

YAML patterns for DevOps & Cloud Engineering

A structured reference covering mappings, sequences, scalar types, multiline strings, anchors and aliases, followed by real-world GitHub Actions and app-config examples.

• Tech Stack: YAML, GitHub Actions, VS Code

A lean Nginx image for serving static content

A minimal Alpine-based image with a clean web root and documented build directives, covering layer caching, port mapping and container-lifecycle troubleshooting.

• Tech Stack: Docker, Nginx, Alpine Linux, HTML

An end-to-end team Git & delivery workflow

Implements feature branching, conventional commits, pull requests, applying code-review feedback, merging to main and triggering a CI/CD pipeline.

• Tech Stack: Git, GitHub, Python, Bash

I publish practical Azure implementation guides for engineers and teams.

• Location: Poland 🇵🇱
• Professional Networking: LinkedIn
• Technical Writing: dev.to/forsyth_famous_
• Credentials: Microsoft Learn Profile
• Open to: Cloud & DevOps collaboration, technical consulting and new opportunities

Building reliable cloud infrastructure, one automated step at a time.