Starting this blog

I spend most of my working hours designing zero-trust, cloud-native security architecture for regulated financial institutions — lately with a growing focus on securing the foundation-model platforms enterprises are now building on top of. Most of that work stays inside the organizations I do it for.

This blog is where I’ll write in public: notes on zero-trust and multi-cloud security architecture, AI Security Posture Management (AI-SPM), and the practical lessons that come out of running security programs at scale in tightly regulated environments.

More soon.