Expertise
Deep specialist work in AI security, governance, and evaluation — across the full AI value chain — backed by production AI architecture and a dozen years in software engineering.
AI Security, Governance & Evaluation
The centre of the practice. Hands-on work on AI systems that need to hold up to a regulator, an auditor, a customer, or an attacker.
Agent Red-Teaming
Adversarial evaluation of AI agents in design and in production. Tool chain exploitation, multi-phase trust attacks, multi-agent coordination testing, prompt injection, data poisoning, exfiltration.
Practice tooling
LLM-level coverage
Frameworks
EU AI Act Conformity
Engineering-led interpretation of the regulation. Classification under Article 6, conformity assessment pathways, Annex IV technical file preparation. The specific articles that map to the specific controls in the system.
Regulation
Management system
Risk frameworks
Security Architecture for AI
Threat modelling on the system being built. Data pipeline security, RAG and retrieval hardening, agent tool-chain design review, boundary controls, Annex IV scaffolding written alongside the code.
Methods
Pipeline
Vector stores
Agentic Systems & Interoperability
Architecture for agents that wield tools, retain memory, and chain reasoning across protocols. Writing on tradeoffs between emerging standards.
Protocols
Frameworks
Patterns
Technical Foundation
The specialist work is grounded in years of shipping AI systems, cloud platforms, and enterprise software. These are not separate offerings, they are what makes the specialism defensible.
Production AI Architecture
Generative AI, agentic systems, RAG, fine-tuning, evaluation, MLOps and LLMOps. Authored the AI Reference Architecture at PostNL AI Centre of Excellence. Prior WatsonX architecture work at IBM across the NCEE market.
Tools
Cloud & Platform Engineering
How AI systems actually deploy. Serverless architectures, Kubernetes, infrastructure as code, multi-cloud deployment patterns.
Tools
Software Engineering Depth
15+ years across software engineering, including system design, API architecture, and enterprise software delivery. Knowing what secure code looks like is a precondition for advising on AI security.
Languages
Tools and frameworks
Organised by role in the specialist work, not by category. Tools listed are in active use, not an exhaustive career inventory.