Principal Platform Engineer
February 2026 – PresentScoreline (Fantasy Football Hub)
- ▸Platform Foundation:Sole platform engineer for a subscription sports-analytics business on Google Cloud. Built the organisation landing zone and delivery platform in Pulumi (TypeScript, state in Cloud Storage): factory components that give every Cloud Run service and job observability, cost guards, IAM and secrets by default, ephemeral sandbox stacks per pull request, and a GitOps/ChatOps operating model — recorded in 40+ architecture decision records.
- ▸Observability & AI Incident Investigation:Standardised on OpenTelemetry as the only telemetry surface in application code, with the backend reached through a collector sidecar so it stays swappable; built a central observability project, trace-correlated logging, and job heartbeat alerting. Designed and built a read-only AI incident investigator that consumes the alert bus, investigates against logs, traces, source and billing data, and posts a structured assessment to Slack — on a provider-agnostic LLM port.
- ▸Security & Access:Moved the estate to zero standing access: two-tier Workload Identity Federation for CI, Privileged Access Manager entitlements for humans, least-privilege service identities, org policy and Security Command Center, and secrets consolidated out of CI variables into a managed secrets platform.
- ▸Cost:Owned cost visibility and efficiency: a cost-driver assessment across the estate, request-based CPU billing as the platform default with production services migrated one at a time, sandbox spend guards enforced in the factories, and billing anomaly alerts routed into the investigator.
- ▸Subscription Platform:Re-platformed the tier-1, revenue-bearing subscription service that normalises Stripe, PayPal and RevenueCat webhooks into one event-sourced store — Bun and Hono on Cloud Run, Drizzle on Neon Postgres, CI-owned migrations, an admin operations console, and OpenTelemetry tracing end to end.
- ▸Resilience:Built the disaster-recovery backup service — Cloud Run Jobs backing up Postgres, Cloud SQL and object storage from a single typed manifest into an isolated backup project — and the runbooks and incident process behind it.
