GitOps, hardened pipelines and platform engineering done right.
DevOps stopped being about scripts long ago — it is about building a platform other engineers can ship on safely and fast. I design and operate exactly that in production at enterprise scale: GitOps delivery, pipelines hardened against supply-chain attacks, and isolation strong enough for untrusted workloads.
Articles in this hub
6 articles
IntermediateOpenTofu vs Terraform in 2026: Is the Fork Worth Switching To?
OpenTofu vs Terraform in 2026: why the fork happened, what actually differs (state encryption, provider for_each, licensing), a comparison table, and an honest verdict on switching.
Read article
IntermediatePodman in 2026: Rootless, Daemonless Containers Without Docker
A hands-on 2026 guide to Podman: why daemonless and rootless containers are safer, how user-namespace UID mapping works, and how Quadlet lets systemd run your containers instead of a background daemon.
Read article
AdvancedBuild a Tiny Linux Container without Docker in 2026
A hands-on 2026 walkthrough for building a tiny isolated Linux container with overlayFS, cgroups, namespaces, pivot_root, and kernel primitives instead of Docker.
Read article
AdvancedmicroVMs Explained: Firecracker vs gVisor for Secure Workloads in 2026
A practical 2026 comparison of Firecracker microVMs and gVisor for secure workload isolation: how each sandbox works, the security and performance trade-offs, and when to choose KVM-based VMs over a userspace kernel.
Read article
AdvancedSecure GitLab CI/CD in 2026: A Practical Hardening Playbook
A practical 2026 GitLab hardening playbook for protecting source code, secrets, runners, containers, artifacts, and CI/CD infrastructure from real-world attack paths.
Read article
IntermediateGitOps with Argo CD: Automated Kubernetes Deployments in 2026
A practical look at GitOps, Argo CD, and Kubernetes deployment automation: push vs pull models, kubectl, Kustomize, Helm, ApplicationSets, and a cleaner delivery workflow.
Read article
FAQ
What is your platform engineering background?
Are you available to hire?
How do we start working together?
Building a platform or hardening delivery?
From GitOps and Argo CD to CI/CD hardening and Kubernetes, I help teams ship faster without trading away security.
See platform engineering services →