Principal Architect & Consultant NimbleX, International
Independent practice
Independent architecture practice serving six industries across Europe, the Middle East and Africa. Engagements are typically multi-year and span target-state design, security architecture, cloud strategy, migration execution and the operational reality afterwards. I advise developers, engineering leadership and executives, and I stay hands-on, so my cost, latency and failure-mode estimates come from measurement rather than assumption.
-
PayU Payments & Financial Services 1 year
Designed and delivered a PCI DSS compliant datacenter build in Poland for a regulated payment service provider. Owned the infrastructure and network architecture: cardholder data environment scoping and segmentation, access control and segregation of duties, key and secrets management, hardened build standards, and the logging and audit evidence required for assessment.
-
Specure Regulatory Systems & Internet Infrastructure 10 years
Security and infrastructure architect across both product lines, sold to national regulators.
Spectrum auctions. Bids are legally binding, so the design had to hold bid integrity, non-repudiation and an audit trail a court can reconstruct, and stay available through timed rounds on fixed dates. Delivered in nine jurisdictions, including UKE (Poland) and Traficom (Finland), in SMRA and Combinatorial Clock formats. Mechanism design sat with Specure; I owned the infrastructure beneath it.
Measurement platform (nettest). Moved it onto AWS, then onto private cloud years later as cost and data sovereignty shifted.
-
Zniper Real-Time Transaction Risk & Betting 5 years
Architected the infrastructure for a streaming and big-data platform serving operators in high-transaction industries. Use cases include notifying risk teams of suspicious card transactions, alerting on unusual purchase behaviour and wallet value, and warning on capacity thresholds, correlating live streams with historical data under fine-grained access control. The same patterns apply to fraud detection, AML monitoring and payment risk alerting.
-
TitleCapture / Netsheet Real-Estate Settlement Fintech 5+ years
Architected and built the AWS infrastructure for a multi-tenant US real-estate settlement platform used by 1500+ title agencies, whose closing-cost and net-sheet output feeds lenders' Loan Estimates, a regulated consumer disclosure. Modernised the CI/CD pipelines, added security controls and tuned performance across the platform.
-
eRepublik Labs Gaming 16 years
Sixteen years of platform ownership across several technology generations, and my longest client relationship. Grew the estate from a few physical hosts with little automation to ~200 cloud instances across multiple projects and environments, fully automated. Introduced continuous integration to support a reliable QA and release process, configuration management for repeatable provisioning, and monitoring throughout. Advised developers on scalability and introduced profiling to direct optimisation.
-
Kape Technologies Privacy Software & Advertising 2 years
Built and ran consumer privacy infrastructure for an LSE-listed security software group (CyberGhost VPN, Crossrider). Operated a large server fleet across many jurisdictions and designed to data minimisation and no-log constraints, where a logging decision is a privacy commitment rather than an operational preference. Very high traffic volumes with big scalability swing in infrastructure shaped the architecture throughout.