01
Assess
I audit your current infrastructure, identify gaps in governance, security, and cost efficiency, and document the findings with detailed architecture diagrams.
Services
Four practice areas.
One engineer doing the work.
Infrastructure, governance, data and AI, and automation. I design, build, and document the work myself, from the first workshop to the handover.
0+
Client Engagements
0
Industries Served
0
Cloud Certifications
0+
Years Cloud Experience
Practice area 01
Cloud Infrastructure & Architecture
I design and implement production-grade AWS environments — from single-account setups to multi-account, multi-region architectures supporting $300K+ monthly cloud spend.
- Multi-account AWS architecture with Organizations and Control Tower
- Network design: Transit Gateway, VPC peering, multi-region, egress optimization
- Migration planning and execution (MAP assessments, lift-and-shift, refactoring)
- Cost optimization and right-sizing ($20K–$300K monthly budgets)
- High availability and disaster recovery across regions
Practice area 02
Governance & Compliance
I implement the guardrails and controls that keep regulated workloads secure and auditable — across healthcare, pharma, financial services, and beyond.
- HIPAA, GDPR, GxP, NIST, PCI-DSS, SOC 2 compliance controls
- AWS Conformance Packs and guardrail implementation
- Centralized logging (CloudTrail, VPC Flow Logs, SIEM integration)
- Automated compliance scanning and remediation
- Self-service account provisioning with Jira integration
Practice area 03
Data & AI Engineering
I build data pipelines that scale and AI systems that deliver measurable business value — from real-time streaming to generative AI with enterprise guardrails.
- Data lake architecture and real-time streaming pipelines (Kinesis, Glue, EMR)
- ML model training and deployment (SageMaker, GPU-accelerated PyTorch)
- Generative AI integration (AWS Bedrock, Claude, RAG pipelines)
- Vector databases and semantic search (OpenSearch, Pinecone, Milvus)
- Real-time inference endpoints and prediction streams
Practice area 04
Automation & DevOps
I automate everything that can be automated — infrastructure provisioning, deployments, compliance checks, and operational workflows.
- Infrastructure as code with Terraform, AWS CDK, and CloudFormation
- CI/CD pipeline design (CodePipeline, CodeBuild, GitHub Actions)
- Containerization and orchestration (ECS Fargate, EKS)
- Workflow orchestration with Step Functions
- Automated inventory, remediation, and reporting systems
Expertise
How I Work
A structured, repeatable approach that reduces risk and delivers results.
02
Architect
I design the target state: account structure, networking, compliance controls, data pipelines, and automation. Everything is documented and reviewed with your team before a single resource is provisioned.
03
Automate
I implement with infrastructure as code, build CI/CD pipelines, deploy monitoring and alerting, and write the documentation. Then I train your team to operate it independently.
Proven Playbooks
Engagements I've delivered multiple times, refined with each iteration.
6×
Multi-account governance (Organizations, Control Tower, SCPs)
5×
Centralized logging architecture
4×
Workload migration (lift & shift)
3×
Multi-account, multi-region networking
3×
API Gateway + CloudFront deployment
2×
Self-service account provisioning (Terraform + Jira)
2×
Security data lake pipelines
20×+
Containerization and ECS provisioning
Selected Client Work
Representative outcomes across industries.
Client names withheld per NDA.
Content moderation pipeline and recommendation engine
Processing time fell from 4–6 minutes to under 30 seconds once the moderation steps ran in parallel.
Read the client story
Automated legal bill review
Every incoming legal bill is now reviewed automatically in real time: 100%, up from 5% by hand.
Read the client story
Fleet-wide compliance inventory and remediation
The inventory runs nightly across 100+ accounts in under one hour. The client created a dedicated internal team to manage and extend it.
Read the client story
Two-petabyte business continuity
All 2 PB reached isolated destination buckets under Object Lock in about 50 hours.
Read the client story
Migration Acceleration Program assessment
The client received a 6-phase plan across 2 regions, with an expected monthly cost below its current AWS bill.
Read the client story
Real-time market prediction pipeline
Continual online training time is down to about 60 seconds, with live prediction streams.
Read the client storyFixed-Price Engagements
Four problems, the same two shapes. A written plan in two weeks, or a measured result in six.
Certifications
Professional-level certified.
Across the whole stack.
Two AWS Professional certifications, a Security Specialty, data engineering and AI credentials, and Azure Fundamentals. Held by the person who does the work. Domains below are listed as the issuer defines them, and under each is where the credential shows up in my work.
- 2 AWS Professional
- 1 AWS Specialty
- 2 AWS Associate & Foundational
- 1 Azure Fundamentals
Amazon Web Services
AWS Certified Solutions Architect — Professional
Validates
- Designing solutions for organizational complexity
- Designing for new solutions
- Continuous improvement of existing solutions
- Accelerating workload migration and modernization
In practice
Every multi-account landing zone, network design, and migration plan I deliver is drawn to this standard, by the person who holds it.
Amazon Web Services
AWS Certified DevOps Engineer — Professional
Validates
- SDLC automation
- Configuration management and infrastructure as code
- Resilient cloud solutions
- Monitoring, logging, and incident response
- Security and compliance in the delivery pipeline
In practice
The infrastructure-as-code modules, CI/CD pipelines, and monitoring behind them are designed by a certified professional, not assembled from templates.
Amazon Web Services
AWS Certified Security — Specialty
Validates
- Threat detection and incident response
- Security logging and monitoring
- Infrastructure security
- Identity and access management
- Data protection
- Management and security governance
In practice
HIPAA, GxP, PCI-DSS, and SOC 2 controls are implemented by someone certified in how AWS security actually works, from IAM boundaries to data protection.
Amazon Web Services
AWS Certified AI Practitioner
Validates
- Fundamentals of AI and machine learning
- Fundamentals of generative AI
- Applications of foundation models
- Guidelines for responsible AI
- Security, compliance, and governance for AI solutions
In practice
Generative AI work on Bedrock, including the retrieval pipelines and guardrails in my engagements, follows AWS's responsible-AI and governance guidance.
Amazon Web Services
AWS Certified Data Engineer — Associate
Validates
- Data ingestion and transformation
- Data store management
- Data operations and support
- Data security and governance
In practice
The Kinesis, Glue, and data lake pipelines in my data engagements are designed by a certified data engineer.
Microsoft
Microsoft Certified: Azure Fundamentals
Validates
- Cloud concepts
- Azure architecture and services
- Azure management and governance
In practice
Most regulated enterprises run more than one cloud. I can hold the Azure side of the conversation and design the AWS side accordingly.
What this means for your engagement
01
Designed by the certified, not reviewed by them.
I hold the Professional certifications, and I am the one drawing your account structure, network, and migration plan. Nothing is handed down for a junior team to build.
02
Current, not historical.
AWS certifications are valid for three years and must be re-earned against the current exam guide. What I hold reflects the platform as it is today, not as it was.
03
Fluent in more than one cloud.
Most regulated enterprises run more than one cloud. Azure Fundamentals means I can hold the Azure side of the conversation and design the AWS side accordingly.
AWS and AWS Certified are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and Azure are trademarks of the Microsoft group of companies.
Technology
The platforms and languages behind the practice areas.
AWS Core
- EC2
- ECS
- EKS
- Fargate
- Lambda
- Batch
- Step Functions
- EventBridge
Data & Analytics
- S3
- Redshift
- Snowflake
- EMR
- Glue
- Athena
- Lake Formation
- Kinesis
AI / ML
- SageMaker
- Bedrock
- Rekognition
- Textract
- PyTorch
- LangChain
- RAG
Security
- Organizations
- Control Tower
- GuardDuty
- WAF
- Shield
- Secrets Manager
- Config
DevOps
- CodePipeline
- CodeBuild
- Terraform
- AWS CDK
- CloudFormation
- Docker
- GitHub Actions
Languages
- Python
- TypeScript
- C#
- Go
- Swift
- bash
Industries I Serve
- Energy
- Healthcare
- Pharma / Life Sciences
- Banking
- Insurance
- Financial Services
- Auto Manufacturing
- Airlines
- Retail
- Education
The next conversation
Let's define the result.
Tell Charles which challenge is in front of you. He will scope the work and make the result he will measure clear before you sign.
Book a 15-minute call with Charles
Remote engagements nationwide.
Serving clients since 2020.