Online · North Yorkshire, England
M7NXS · UK Ofcom Amateur Radio Licensed · IO94
DevOps Engineer · Terraform · AWS · Platform Engineering
25+ years of infrastructure work — Unix roots, cloud present, automation throughout.
Automate first, ask questions later. Usually.
I’m a DevOps engineer based in North Yorkshire, working mostly with Terraform, AWS, and Infrastructure as Code. My day job involves a reasonably large multi-account AWS environment across several regions — keeping things running, automating the bits that would otherwise require a human to do something repetitive, and trying not to break anything that matters.
Before the cloud there was a fair bit of Unix: Solaris at various government facilities, some Oracle IAM work at Hewlett-Packard, and systems administration at Lockheed Martin in Virginia and North Yorkshire. It was the sort of work that discourages carelessness.
Before that, I ran a WWIV BBS in Washington DC in the early ‘90s — which is where the habit of tinkering with networked systems started and, frankly, never stopped.
Outside work: a Proxmox homelab that has gotten slightly out of hand, Home Assistant running most of the house, and a live chicken camera with more monitoring than it strictly needs. I use AI tooling heavily — mostly because it means less typing. Dual US/UK citizen.
Born in Germany, raised in the United States, and long settled in North Yorkshire — which accounts for a certain amount of travel before the deliberate kind even started. Most of Western Europe has been covered at some point, along with the Baltics, Scandinavia, North Africa, and a few further afield; also driven the United States coast to coast four times on both the northern and southern routes, which puts some distances in perspective. Currently practising German to around B1, working towards B2 — conversational rather than professional, mostly useful when we’re in Austria or Bavaria and defaulting to pointing just seems rude. York is fifteen minutes away and still gives back after two thousand years; it was one of several reasons we ended up where we did. The loose plan involves more of the same: different places, unfamiliar food, and making reasonable use of being half an hour from an international airport.
Top Secret / SCI Security Clearance with Counterintelligence Polygraph — U.S. Government
Active 2003–2013 · Lockheed Martin, Hewlett-Packard, and Sotera Defense Solutions · Inactive
Multi-account AWS across a reasonably large environment. VPC design, Transit Gateway, Direct Connect, BGP, IAM — the usual collection of things that seemed straightforward until they weren’t. Enough time in it to know which questions to ask before touching anything.
Terraform is the thing I spend most of my time in. Module architecture, semantic versioning, workspace management, CI/CD pipelines for IaC — mostly because clicking through consoles manually seemed like an unreasonable use of a human’s time.
AMI lifecycle across the usual suspects: RHEL, Ubuntu, Amazon Linux, Windows Server. CIS hardening, cross-region distribution, automated validation pipelines. The sort of thing that benefits from not being done manually.
Jenkins, GitHub Actions, shared library patterns, Docker build agents, credential rotation. Pipelines that run unattended are generally preferable to pipelines that require someone to watch them.
A good while on production Unix across various operating systems. RHEL, Ubuntu, Amazon Linux, Solaris, Windows Server when necessary. Long enough that most of the failure modes are familiar, which is either reassuring or faintly depressing depending on your perspective.
Transit Gateway, site-to-site VPN, Direct Connect, BGP, Squid forward proxy for a fleet of AWS accounts. Networking in AWS: technically straightforward, expensive to get wrong, therefore worth automating carefully.
CIS hardening, Cloud Custodian for automated compliance, Wiz, Security Hub, ADFS/SAML federation, KMS. Security work that is largely automated, because manual compliance checking tends to have a spotty track record.
Docker, Kubernetes, EKS, Helm — enough to be useful. Plus a Proxmox homelab that has accumulated rather more services than was originally planned.
Using AI tooling daily for infrastructure work — agentic workflows, LLM-assisted IaC, structured prompting for specific engineering tasks. Primarily because it is faster than doing things the slow way, and the slow way was never that enjoyable to begin with.
Documentation that updates itself from source repositories is considerably more accurate than documentation that doesn’t. Built a platform to do that. Also wrote the usual guides, runbooks, and onboarding docs that every platform team eventually needs.
Python for automation that needs to be maintainable, Perl since the ‘90s through force of habit, Groovy for Jenkins, Bash for everything else. PowerShell when Windows leaves no other option. The language is usually less important than just automating the thing.
Steampipe for cross-account querying, Splunk, CloudWatch, Prometheus, Grafana. Governance, cost optimisation, orphaned resource identification — the unglamorous end of cloud work that is nonetheless worth doing, preferably by a script.
Platform engineering in a small team: AWS infrastructure automation, golden image lifecycle, IaC tooling, Transit Gateway networking, Squid proxy fleet, compliance automation across a large multi-account environment. Also built a DocOps platform that generates documentation from internal repositories automatically. Wrote M3, a Python tool for migrating Terraform modules from a monorepo to independently versioned repositories. More recently: working out how AI tooling fits into day-to-day infrastructure delivery — what it's genuinely useful for, and what it isn't.
Third-line engineering for IBM Sterling Integrator. TLS 1.2 upgrades, Secure+ configuration across Connect:Direct links, EBICS protocol implementation with Deutsche Bank. Middleware work: not glamorous, but the banks seemed to appreciate it.
First role after relocating to the UK. Unix-based project engineering, PCI DSS compliance work. A straightforward transition into commercial infrastructure.
Moved from Virginia to Yorkshire. Unix administration turned out to be much the same on either side of the Atlantic, which was convenient.
Oracle IAM deployment for a U.S. Government customer — Access Manager, WebLogic, Identity Federation, and related components. Perl automation for build and PKI processes. Final role before relocating to the United Kingdom.
Managed a team of 14 Unix and Windows administrators. C&A testing for a major government system re-accreditation, Sun E15k domain management, multi-network authentication environments. The sort of role where things going wrong had noticeable consequences.
Solaris administration across a large estate. Hardened baselines, directory services rationalisation, DNS, LDAP/AD integration, NTP, patch management. Most of it scripted in Perl and CSH because doing it manually at scale seemed inadvisable.
Unix systems administration. Also built INFORManagement, an internal application for technical statistics reporting, which was apparently useful enough to warrant a Lockheed Martin Spot Award — a pleasant surprise.
Held Top Secret/SCI clearance with Counterintelligence Polygraph throughout tenures at Lockheed Martin and Sotera Defense Solutions, supporting classified U.S. Government programmes in Virginia and England.
Multi-node WWIV BBS on 703 and 202 area codes — networked, multi-user, 24/7. Building and operating networked systems before the internet was a household concept. Continued through university (1995–97). Currently exploring a Proxmox-hosted revival.
Most recent first. Expired AWS certs are shown for completeness; they represent real delivered work.
Amazon Web Services · Expired
Amazon Web Services · Expired
InfoBlox
Red Hat · Rapid Track Course · Expired
Red Hat
Sun Microsystems
London, UK · April 2026 · Attendee
Internal Conference · Presenter · 20-minute demo of the DocOps platform
Las Vegas, NV · Attendee · 2018, 2021, 2022
Proxmox HA cluster with rack-mounted UDM Pro Max, USW-Aggregation switch, LACP 802.3ad LAG, 2U UPS, and Synology NAS. Runs an offline GB mapping stack (Protomaps + MapLibre GL, Valhalla routing, custom SQLite geocoder), self-hosted Plex, Home Assistant, Docker services, NUT UPS monitoring with automated shutdown scripting. Built to stay up.
Explore the Home Lab ↗An unattended HF digital station running around the clock from IO94, near York. On 40m at 7.078 MHz via an IC-7300MK2 into a 41.7m end-fed wire, the station operates as a JS8Call heartbeat node and authenticated APRS-IS gateway — bridging HF radio operators into the worldwide APRS network with no internet required on their end. Stations across Europe that can hear the signal can relay messages, position reports, and commands through this gateway. Useful in normal operation; considerably more useful when the internet isn’t.
When the gateway isn’t running, the station switches to FT8 with WSJT-X — systematically working stations across as many countries and bands as possible in pursuit of the ARRL DXCC award. DXCC requires confirmed contacts with 100 distinct “entities” (countries plus a handful of territories that count separately); the DXCC Challenge extends that to 1,000 band-entity combinations. Both are in progress. The two modes share the same rig, antenna, and the same general philosophy: maximum reach, minimum fuss.
M7NXS on QRZ.com ↗A 1090 MHz outdoor antenna over North Yorkshire decoding ADS-B transponder signals and feeding position data to a number of flight tracking platforms — FR24, FlightAware, RadarBox, PlaneFinder, OpenSky, ADS-B Exchange, and a few others. Deployed via Docker on a dedicated VM running ultrafeeder. Passive receive only; no transmissions, no interaction with aircraft. Mainly just interesting to watch.
FR24: T-EGXU127 · RadarBox: EXTRPI709473 · FlightAware: 274543 · PlaneFinder: 237463
My wife and I have been cruising together for years and are committed Royal Caribbean loyalists working towards Diamond status — 80 Crown & Anchor points earns free drinks, priority boarding, and a general sense of smug satisfaction. We’re at 52 points post-August 2026 and the plan is two more 14-night sailings to get there. It’s a retirement plan disguised as a holiday habit.
A live dual-camera stream from a backyard chicken coop, available 24/7. Containerised FFmpeg, UniFi Protect, RTMP to YouTube Live, Home Assistant for day/night switching, Cloudflare for delivery. A slightly overengineered solution to a problem that did not strictly require solving.
Visit clucks.netSolar panels, a Tesla Powerwall 3, and a heat pump — integrated into Home Assistant with Octopus tariff optimisation. The heat pump is installed and running. Solar and battery are contracted and ready to go, currently held up by DNO approval. The grid has paperwork. The paperwork has a queue. The queue has no particular sense of urgency.
16 Lanbon L8 touchscreen switches running OpenHASP, driven by Home Assistant via MQTT. Sensor data, energy stats, lighting, EV charging, doors, motion — 12 pages per device. Some are light switches with screens; others are just information panels. Built entirely in YAML, which is either elegant or a poor life decision depending on how the mood strikes.
Live Display Preview ↗Website for five Church of England village churches in the Vale of York, including a Grade I listed building sketched by Anne Brontë in the 1840s and a chapel designed by Sir George Gilbert Scott. Built, hosted and maintained pro bono. Modernised typography, accessible layout, safeguarding information. Self-hosted on Ubuntu with NFS storage — same stack as everything else.
Visit theunitedbenefice.co.ukI’ve raised the bar for contact. Not out of rudeness — out of curiosity. If you can reach me via either of the following, you’re already the kind the kind of person I want to talk to.
If neither of those options appeals, that’s completely fine. The internet will survive.
| # | DIST (NM) | AIRLINECALLSIGN | ALT (ft) | SPEED (kt) | HDG | SIGNAL | RECORDED | SQUAWK | CAT |
|---|---|---|---|---|---|---|---|---|---|
| Loading... | |||||||||


| AIRLINECALLSIGN | LAST HEARD | ALT (ft) | SPEED (kt) | HDG | DIST (NM) | MSGS | SIGNAL | SQUAWK | CAT |
|---|---|---|---|---|---|---|---|---|---|
| Loading... | |||||||||


| AIRLINECALLSIGN | ALT (ft) | SPEED (kt) | HDG | DIST (NM) | SIGNAL | SQUAWK | CAT |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
| TIME | MODE | BAND | CALLSIGN | COUNTRY | SNR | FREQ kHz | DIST | BRG | GRID | RAW MSG | WHAT IT MEANS | RADIO |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Loading decodes… | ||||||||||||
| # | SPOTTED | AIRLINECALLSIGN | FIRST SEEN | LAST SEEN |
|---|---|---|---|---|
| Loading... | ||||
| # | SPEED | AIRLINECALLSIGN | ALT (ft) | HDG | DIST | RECORDED | SQUAWK | CAT |
|---|---|---|---|---|---|---|---|---|
| Loading... | ||||||||