Hey, I’m Robert
I’m an AWS Architect with 10+ years of experience across programming, software testing, network engineering, and cloud architecture. I hold a master’s degree in IT Security and spent 3 years as an AWS Community Builder.
My work lives at the intersection of governance, FinOps, security, and platform engineering — helping mid-sized enterprises run AWS at scale without losing control of cost, compliance, or velocity.
What I do
I design and operate AWS platforms — from single-account setups to environments with 2000+ accounts. My focus areas:
- AWS Governance & Landing Zones — Building the organizational backbone: SCPs, ControlTower customizations, delegated administration, and multi-account strategies that balance security with developer freedom.
- FinOps & Cost Engineering — Going beyond native AWS tools. I build custom cost allocation models, TCO views for EC2 fleets, and savings plan redistribution logic that actually reflects how organizations consume cloud.
- Security & IAM at Scale — Cloud Identity Entitlement Management (CIEM), blast radius analysis, privilege escalation detection, and practical approaches to least privilege that don’t kill developer productivity.
- Networking & Connectivity — Transit Gateway architectures, Gateway Load Balancer setups with Palo Alto, VPC Lattice, and the security implications of every new AWS connectivity feature.
- DevOps & Infrastructure as Code — Terraform modules for Lambda deployments, CI/CD pipelines, and serverless architectures. Building reusable, production-grade IaC that scales across organizations.
About this blog
This blog is where I publish deep-dive technical content on AWS platform engineering — the kind of material you won’t find in a quick Google search. I write about real-world problems I’ve encountered operating large AWS environments and the solutions I’ve built to solve them.
Expect posts on Athena-powered analytics over CloudTrail and CUR data, custom FinOps solutions beyond what AWS provides out of the box, IAM security analysis at organizational scale, and governance patterns for enterprises navigating the complexity of multi-account AWS.
If any of this resonates — feel free to connect with me on LinkedIn or check out my work on GitHub.