15 years across CDN, edge, and regulated data. 8 Tbps of bare-metal CDN at Optus Sport carrying EURO 2020, the FIFA Women's World Cup 2023, and EURO 2024. Privacy-preserving data linkage across 6M+ patient records at NSW Health.
I build and operate the systems where failure isn't an option. Carrier-scale CDNs streaming live sport to millions. Data engineering on regulated data at population scale. The kind of work where downtime or breach, they're the news.
At Optus Sport, carrier-scale bare-metal OTT CDN inside a Tier 1 telco, delivering the largest concurrent Australian audience since the Sydney Olympics for FIFA Women's World Cup 2023. At NSW Health Lumos, helped shape Australia's first statewide linked primary care data program, population-scale records across hundreds of GP practices, peer-reviewed research still publishing. At section.io, built the developer surface for the CDN that beat household-name incumbents on Hotjar's workload, five years before edge compute became consensus. Behind that, a decade of enterprise .NET delivery across Australia's largest brands.
Equipping organisations with AI tools that remove mundane, repetitive work. MCP servers giving AI live context from the internal systems. Agents sandboxed and isolated. Guardrails on input and output. Cost controls that hold under team adoption. An audit chain that holds up in risk review.
Owning the inference your business relies on. On a desk or in the cloud. Architecture and capacity planning for on-prem, hybrid, or sovereign region deployment. For programs where vendor lock-in, data sovereignty, or unit economics that make per token inference the wrong answer.
Architecture, build, and operation of your own source CDN stack. HAProxy, Varnish, and custom Golang on bare metal. Quality of service as the target, cost compression as the by-product. For teams where quality of service and control makes vendor edge the wrong answer.
Procurement, DevOps, and configuration across vendors. Multi-CDN architecture spanning AWS CloudFront, Fastly, Akamai, and private origin. Edge security audits on WAF, bot, and rate limiting. Stream tokenisation and DRM to secure content rights. Capacity modelling and architecture forensics for the events ahead.
Linkage and analytics across organisational boundaries without identifiers crossing. Privacy Preserving Record Linkage, Clean Rooms. Architecture for new organisations, advisory for organisations stalled in privacy review. Encode before egress, always. Audit chain that survives a five year retrospective.
Defence designed into the application surface. Edge security and abuse controls tuned for the actual threat, not the vendor template. Software supply chain integrity. Operator architecture for the threat landscape the next wave will throw at production systems.
Three operational concerns. Each is something a company can rent from a vendor or own and operate themselves. Applies across CDN, edge, regulated data, and AI transformation.
Edge security. Abuse and cost controls. Perimeter defence under load.
Scoped credentials. Identity-bound action. Blast radius bounded by design.
Tracing and observability. Cost attribution. Regulator-ready audit.