stuff I figured out the hard way

Hey — I'm the engineer behind Infrascribbles. I've spent the better part of a decade working across cloud infrastructure, Kubernetes, automation, and DevOps. This site started as my notes on problems I kept solving the hard way, and grew into a small consulting practice.

When you hire me, you work directly with me — no account managers, no handoffs to juniors, no layers of abstraction. The person you email is the person doing the work. Contracts and invoices go through my company, Marq, LLC.

What I'm good at

Kubernetes is my home turf: EKS, AKS, and GKE, GitOps with ArgoCD, Gateway API and Envoy, self-service platforms, and the networking, storage, and IAM problems that show up once you're running at scale. I also run plenty outside the hyperscalers — Hetzner Cloud, dedicated servers, and Linux VM fleets — when that's the simpler, cheaper answer. I hold the Certified Kubernetes Security Specialist (CKS) certification and have hands-on experience building and running SOC 2 and ISO 27001 compliant systems.

The other half of my work is identity and access. I've designed workforce SSO across many cloud accounts, replaced VPNs with Zero Trust access, brokered every privileged session through just-in-time gateways, and consolidated authentication behind a single Keycloak/OIDC pattern — the goal is always zero standing privilege. Under all of it sits infrastructure as code: Terraform for cloud resources, Ansible for servers and VMs, and GitOps for everything that runs on Kubernetes.

In more than 8 years of this work I've helped teams release 4–8× more often, cut on-call alerts by ~88%, reduce cloud spend by 30% or more, and carry SOC 2 Type II and multi-region GDPR deployments through audit.

How I work

I build things that are simple enough to understand, reliable enough to trust, and maintainable long after I'm done. I'm upfront about trade-offs, I don't pad hours, and I don't upsell. Because it's just me, I take on a small number of clients at a time — so each one gets real focus.

The blog

I write up the hard problems I solve on the blog — real numbers, real dead ends, real fixes. It's the best way to see how I work before you get in touch.

Certification
CKS — Certified Kubernetes Security Specialist
Compliance
SOC 2 Type II · ISO 27001 · GDPR multi-region
Identity
SSO · Zero Trust · JIT access · Keycloak · Active Directory
Automation
Terraform · Ansible · AWS CDK · ArgoCD · Helm
Cloud
AWS · Azure · Google Cloud · Hetzner · VMs
Contact
hello@infrascribbles.com