Posts
Three posts shipping in the next two months. The schedule drops to roughly every three weeks after.
-
Building a single API for Email and WhatsApp without becoming a CPaaS
Email through Resend, WhatsApp through a separate BSP. Two SDKs, two bills, two ways delivery breaks. We collapsed it into one contract without becoming a CPaaS. The dual-store decision — Postgres for facts, DynamoDB for the message hot path — is the part most teams get wrong.
Read the post -
Every production SaaS app we run. One ECS cluster. One ALB. Here's how.
Heroku is too expensive. Kubernetes is too heavy. ECS Fargate is where most 10–40-engineer teams land, but the public reference architectures are thin. This is a real one — shared ALB with host-based routing, the GitHub OIDC deploy role, the alarm pack that catches what AWS-native monitoring misses, and the cost economics at the cluster shape we actually run.
-
Productizing platform engineering: from one-off Terraform to a service line
Most platform teams have a Slack channel and tribal knowledge. We productized ours into a five-skill Claude Code plugin — aws-readonly, aws-infra, ci-pipeline, knowledge-base, platform-allowlist — backed by a cross-account AI_AGENT_READONLY IAM role and an allowed-commands.yaml registry that compiles to native permissions. Different category from Backstage / Port.
If you came here from the offer side
The engineering posts are the work; the engagements are the same work, packaged for your team. Most clients buy two or three together — combinations are negotiated per deal.
- AWS Foundation + Hardening (Core+) 6 weeks
- The preferred tier — for an active audit deadline or an enterprise security questionnaire on the desk.
- ECS Application Platform & Deployment 5–6 weeks
- For shipping an app on AWS in weeks, not quarters. Shorter when the ECS substrate already exists, and each additional app on the same account reuses it.
- Software Engineering Application Bootstrap 5 weeks
- The inside of the repo — typed multi-tenant Bun / TS monorepo with a drift-checked API client, Clerk auth, worker idempotency, and the test harness we run on our own production apps.