Software architect Systems designed to be run, changed and handed over.
15+ years of building for the web, from legacy rewrites to new platforms. I design with the people who will run the system, write the plan down, and move to it one step at a time.
Four parts of architecture work.
Every design comes with the plan to reach it.
-
Cloud architecture on AWS
Accounts and networks laid out before the first service.
Separate accounts per environment, access through IAM Identity Center, private networks with endpoints, and the edge in front: CloudFront, certificates and DNS. Every part has its place in Terraform.
-
Existing systems
Start from the system that is already there.
An existing estate is read before it is redesigned: the accounts, what was clicked together by hand, and the bills. It is brought under Terraform as it stands, then changed one reviewed step at a time.
-
Legacy rewrites
Progressive rewrites, not a switch-over day.
The old application keeps running behind the same address while the new one takes over in steps, and traffic moves as each part is ready. Every step can go back.
-
Documentation for handover
Written down for the team that stays.
Decisions, diagrams and runbooks next to the code, with instructions a coding agent can follow too, so the team can change the system without me in the room.
The tools behind architecture work.
Architecture
- Software architecture
- Scalability
- Legacy rewrites
- Domain-driven design
- Documentation for handover
- Importing existing infrastructure
- Lambda (AWS Lambda: functions without servers to manage)
- API Gateway (Amazon API Gateway)
- SQS (Amazon Simple Queue Service)
- SNS (Amazon Simple Notification Service)
- DynamoDB (Amazon's key-value database)
- RDS (Amazon Relational Database Service)
- Aurora (Amazon Aurora: managed MySQL and PostgreSQL compatible database)
- S3 (Amazon Simple Storage Service)
- Organizations (AWS Organizations: many accounts managed as one)
Integrations
- Building APIs
- OAuth with scoped permissions
- Webhooks
Data
- MySQL
- Redis
- PostgreSQL
- Elasticsearch
Shaded pills mark what I work with now.
The same work, seen from three other sides.
- DevOps engineerAWS in Terraform, pipelines with linting and security scanning, and containers from laptop to production.
- Site reliability engineerMonitors, SLOs and alerts in code, and every change planned with a way back.
- Security advisorAccounts on least privilege, a hardened edge and a guarded delivery chain, written up and carried out in Terraform.
Need a software architect?
Tell me about the system you have and the one you need.