to now
CloudLinux · Director of Infrastructure
Executive scope and organization
I report to the CloudLinux CEO and direct the global infrastructure organization serving CloudLinux and TuxCare: hybrid data centers and cloud platforms, global networks, CI/CD and developer platforms, observability, infrastructure security and incident response. I authored the 2026 infrastructure strategy, restructured the department into service-aligned platform, storage, IaaS and automation teams, established transparent incident and postmortem governance, and scaled engineering leadership across networking, databases and Kubernetes.
Enterprise AI transformation
I proposed and led the company-wide engineering move to Claude Code as its standard AI coding tool, establishing the governance, security rules and budget controls for AI subscriptions, API keys and agent-assisted software delivery, alongside read-only-by-default agentic verification across our infrastructure and observability estate.
Cloud economics and platform architecture
I own the multi-year capacity and spend architecture with the CEO and product leaders: annual capacity planning, 12-month financial forecasting, investment governance for material purchases, one-year cloud commitments and department-level FinOps attribution. Architecturally, I drive the evolution of our compute, storage and network footprint: piloting bare-metal KubeVirt as our next virtualization platform, re-architecting high-throughput build and storage tiers across Ceph and NVMe, unifying observability on Grafana, Loki, Mimir and Tempo with service SLOs, and operating redundant multi-site BGP and IPsec fabrics with automated disaster recovery validation across our OpenNebula estate.
Interim CSO and supply chain security
In autumn 2025 I also covered the chief security officer role for CloudLinux and TuxCare on an interim basis, alongside my infrastructure mandate, until the permanent CSO joined in November after I redesigned the role profile, led the executive interviews and recommended the hire. I directed security operations and incident response, defined our code-enforced zero-trust access architecture with automated drift detection, delivered infrastructure's part of the SOC 2 Type II audit, aligned incident governance with NIS2, the EU Cyber Resilience Act, GDPR and ISO 27001, and architected SLSA Build Level 3 software supply chain security with isolated ephemeral runners and cryptographically signed daily provenance audits.