You need senior technical ownership before hiring a full-time CTO.
Architecture and roadmap review, build-versus-buy decisions, and priorities your team can execute.
How we’d work together ↗Consulting through URN Labs ↗
Cloud platforms and AI agents that hold their boundaries in production.
I’m a CTO and fractional technical lead for B2B SaaS teams. My work sits where systems break: between tenants, between clouds, around permissions, and between an AI agent and a write.
Pick a time on Cal.com, or request one by email.
- ~50 s
- tenant provisioning, down from 8–10 min
- Multi-cloud Kubernetes platform, 2025–
- $15–20K/mo
- lower cloud spend, 10–15% of the bill
- Unifonic, AWS → OCI, 2024–25
- 10B+
- messages a year through infrastructure I helped run
- Unifonic, ~300 Kubernetes nodes
- 0
- customer-facing downtime across ~40 app moves
- Unifonic, ~10 teams
How I work
About me ↗01
Make the platform boring
Multi-cloud Kubernetes, migrations, CI/CD and cost controls that run without heroics. Downtime is the most expensive feature anyone can ship.
02
Draw the boundaries
Tenant isolation, access control and compliance designed in from the start, and failing closed. SOC 2, HIPAA and GDPR are how a company proves it to customers.
03
Let agents work inside them
AI assistants and agents that read, propose and apply through narrow, authorized tools, with human approval wherever an action matters.
- Every cutover keeps a rollback position.
- A prompt is not a permission boundary.
- Start with a written picture and a ranked list of risks with owners.
- Cost surprises are downtime that has not happened yet.
- Temporary infrastructure gets deleted when the job ends.
Where I can help
For founders and engineering leads who need a clear plan and help carrying it through.
Releases are fragile, cloud costs are unclear, or your platform needs to grow.
Kubernetes and cloud infrastructure, CI/CD, observability, migrations, and practical cost controls.
How we’d work together ↗You want an AI assistant or agent that can do useful work within clear boundaries.
Workflow design, retrieval, tool integration, evaluation, and approval gates around consequential actions.
How we’d work together ↗Selected case studies
All case studies ↗Client identities stay private. Sectors, scale and numbers are real. Full experience ↗
Multi-cloud Kubernetes platform
Ten minutes to fifty seconds: shared control planes for tenant provisioning
Redesigning tenant provisioning on a multi-cloud Kubernetes platform, from a dedicated VM per customer to shared hosted control planes.
Messaging platform (CPaaS)
Forty apps, twenty databases, ten teams, zero downtime
Moving a messaging platform that handles more than 10 billion messages a year from AWS EKS to Oracle Cloud OKE without customers noticing.
Travel
An internal assistant that can admit uncertainty
A retrieval-based knowledge assistant for a travel company of about 1,300 people, built against a board-demo deadline and taken to production.
Healthcare software
From 22 pentest findings to an audit-ready position
Turning a stalled enterprise security review for a healthcare SaaS into a SOC 2 readiness program with evidence behind it.
People I’ve worked with
Short excerpts from public LinkedIn recommendations about earlier collaboration.
“deep technical expertise, ownership, and a strong sense of accountability.”
“calm leadership, collaborative spirit, and mentoring nature.”
“Dependable, reliable, and sincere”
Notes from the work
All writing ↗- Agentic engineering in production starts with boundaries
A practical way to decide where an agent belongs, which tools it can use, what needs approval, and how to evaluate the whole workflow.
- Migrating forty apps from AWS EKS to OCI OKE without downtime
How we moved about forty applications and twenty databases from AWS EKS to OCI OKE across ten teams, and what the migration actually cost in planning.
- What fractional CTO work actually looks like: four companies, four very different problems
Four fractional CTO engagements: healthcare SOC 2 readiness, a travel-sector AI assistant, manufacturing GDPR remediation, and media operations on AWS EKS.