Independent practice for companies that want to own and operate their critical infrastructure. CDN, edge, regulated data, and AI serving in production.
I run infrastructure that can't afford to break, and help companies own theirs.
15 years across content delivery, edge & regulated data. 8 Tbps of bare-metal CDN at Optus Sport carrying EURO 2020, the FIFA Women's World Cup 2023, and EURO 2024. Privacy-preserving data linkage across 6M+ patient records at NSW Health.
What I work on
- 01
Broadcast and Media Infrastructure
Restructuring playout, delivery, and streaming workloads. Target architecture, build-operate-transfer, and the operating model after handover. What to own, what to rent, and who runs it from day one.
- 02
Private Content Delivery
Architecture, build, and operation of your own source content delivery stack. HAProxy, Envoy, Varnish & Nginx on bare metal. Quality of service as the target, cost compression as the by-product. For teams where quality of service and control make vendor edge the wrong answer.
- 03
Content Delivery Advisory
Procurement, DevOps, and configuration across vendors. Multi-CDN architecture spanning AWS CloudFront, Fastly, Akamai, and private origins. Edge security audits on WAF, bot, and rate limiting. Stream tokenisation and DRM to secure content rights. Capacity modelling and architecture forensics for the events ahead.
- 04
AI Native Organisations
Equipping organisations with AI tools that remove mundane, repetitive work. Tools giving AI live context from the internal systems. Agents sandboxed and isolated. Guardrails on input and output. Abuse controls tuned for the actual threat, not the vendor template. Cost controls sized for adoption past the pilot team.
- 05
Private Inference
Owning the inference your business relies on. On a desk or in the cloud. Architecture and capacity planning for on-prem, hybrid, or sovereign region deployment. For programs where vendor lock-in, data sovereignty, or unit economics make per-token inference the wrong answer.
- 06
Privacy Preserving Data Exchange
Linkage and analytics across organisational boundaries without identifiers crossing. Privacy Preserving Record Linkage, Clean Rooms. Architecture for new organisations, advisory for organisations stalled in privacy review. Encode before data egress, always.
Operating discipline
Three operational concerns. Each is something a company can rent from a vendor or own and operate themselves. Applies across CDN, edge, regulated data, and AI serving.
- 01
Protect
Edge security. Abuse and cost controls. Software supply chain integrity. Perimeter defence under load.
Operated edge security across 8 Tbps of live-event CDN through five EPL seasons and EURO 2020/2024.
- 02
Isolate
Scoped credentials. Identity-bound action. Sandboxing and containment. Blast radius bounded by design.
Designed scoped credentialing into NSW Health's automated GP file ingestion across 900+ practices.
- 03
Observe
Tracing and observability. Cost attribution. Evidence chains and control mapping. Regulator-ready audit.
Operated audit chains across 6M+ patient records under PPRL and traffic observability across four CDNs.
Experience
I build and operate the systems where failure isn't an option. Carrier-scale CDNs streaming live sport to millions. Data engineering on regulated data at population scale. The kind of work where downtime or a breach is the news.
Ran the Optus EPYC bare-metal CDN: 8 Tbps installed capacity, multiple exabytes delivered at 14 to 57x below commercial CDN unit cost, zero open vulnerabilities across five years. Carried the streaming side of FIFA Women's World Cup 2023, Australia's largest audience since the Sydney Olympics at 1.2M concurrent across Seven and Optus.
Engineered Australia's first statewide linked primary care data program: 900+ general practices, 6M+ patient records, over 50% of the NSW population. Bloom filter Privacy Preserving Record Linkage in production five years before privacy-preserving became procurement language; peer-reviewed research still publishing.
Built the developer surface for the CDN that beat household-name incumbents head-to-head on customer workloads, five years before edge compute became consensus. The enterprise wins carried the platform from Australian origins to a Boulder HQ relocation and the Webscale acquisition.