Production · identity first
Azure cloud & DevOps
Cloud storage and services designed around least privilege, provisioned by script and delivered by pipeline.
- Blob Storage · Cosmos DB Production Shared, audited sensor recordings
- Entra ID · MSAL · managed identity · RBAC Production Custom least-privilege data roles
- App Service · Easy Auth Production Hosted tools and services
- Azure DevOps CI/CD · PowerShell · az CLI Production Provisioning and delivery automation
- Azure Monitor · Cost Management APIs Applied Cost and capacity monitoring
I start cloud work from identity: who can read, who can write, and how we would know afterwards. Storage, compute and pipelines come after that, and they are scripted so they can be rebuilt instead of remembered.
Where it shows up
- 2026 From labelled cuts to C# constants An Azure ML pipeline that trains candidate detectors in parallel, picks a champion against the challengers, and exports the winner straight into production code.
- 2025–26 Sharing recordings without sharing the keys Central, audited storage for sensor recordings on Azure: Blob Storage and a document database behind least-privilege roles, managed identity and automated delivery.