Our Work

We delivered the first secure mobile service based on commercial technology operating at high security classifications for a central government department. The solution included private mobile APN infrastructure, cross-domain device management, and containerised secure messaging and voice services integrated across multiple security boundaries.

We extend open-source real-time communications platforms for deployment in classified and air-gapped environments - adding collaboration features, media processing, self-hosted AI transcription, and autoscaling infrastructure that operates without external dependencies.

As part of a consortium we built an Apache Hadoop/Cloudera/HortonWorks-based big data stack with Kerberised authentication, deployed across Docker, KVM, Azure, and air-gapped bare metal environments. The solution included custom NiFi processors, Java Spring Boot applications, and comprehensive configuration management using Ansible and Ambari blueprints.

We developed a secure communications system enabling cross-domain audio communication integrated into an open-source video conferencing stack. The project required extensive R&D to overcome undocumented third-party components, evaluation of multiple SBC solutions, and custom RTP transcoding to achieve reliable communication across security boundaries.

We are researching smartphone-based health monitoring applications that combine RGB and depth camera analysis with AI-enhanced pose estimation. Our work explores multi-modal sensing approaches and integration with established treatment methodologies to enable effective home-based patient monitoring.

We developed Lattice, a modular Ansible-driven framework for deploying production-ready Kubernetes clusters in air-gapped environments. Security-hardened and extensively tested, the platform is designed for reusability and extensibility - providing a consistent foundation that can be tailored to specific requirements. Lattice integrates kubernetes, storage, service mesh, and comprehensive observability, with built-in test suites ensuring reliable deployments across secure enterprise environments.

We are developing an intelligence-led AI testing and evaluation platform that identifies required tests, generates test cases, and provides continuous threat awareness across multiple AI architectures. The platform supports rapid revalidation at speed of relevance, addressing a critical capability gap in defence AI assurance.

We supported implementation of data governance and quality platforms for a defence sector client, including Data Quality Hub, Metadata Portal, and Governance Portal within the Foundry platform. All work adhered to Defence Digital strategies, HMG standards, and NCSC Cloud Security Principles.

We built an enterprise GDPR data catalogue using containerised Python microservices and serverless functions for automated data discovery. The platform scans infrastructure, databases, and third-party integrations to maintain compliance visibility across the organisation's data estate.

Working with an enterprise IoT provider, we designed and built security and compliance capabilities for connected device ecosystems. This included a REST API for AWS IAM cross-account management integrating with Cognito, RDS, API Gateway, and Systems Manager, enabling automated identity governance and GDPR compliance across complex multi-account AWS environments.

We delivered analytical capability for complex admin-based migration datasets, developing Python-based analytical scripts and adjustment models for national statistics. Our work ensured data quality across linked datasets while operating within disclosive environments and Government Analysis Function guidelines.

We designed and delivered a highly available containerised identity and access management platform on Kubernetes/AWS for a major government department. The Forgerock-based solution provided enterprise SSO, multi-factor authentication, and comprehensive access governance at scale.

We developed an innovative solution for distributing user credentials without exposing them to enrollers, end users during setup, or any intermediary handling the data. The project required novel cryptographic approaches to achieve zero-knowledge distribution within the constraints of existing government infrastructure and security standards.

We developed a cross-domain capable messaging and calendaring technology stack with shared scheduling capabilities. The platform was designed to operate across security boundaries while maintaining compliance with government security requirements. This work included developing a business plan and applying for InnovateUK grant funding.

We performed systematic reviews of cryptosystems and protocols for managing sensitive data, along with assessments of SSO mechanisms and autonomous root of trust establishment on commercial operating systems. This advisory work informed security architecture decisions for government clients.

We've provided technology leadership for fast-moving startups and scale-ups, taking products from concept through to production. Our work has included consultant CTO and VP Engineering roles, building development teams, developing system architectures, establishing DevOps practices, and delivering platforms that scale with business growth.

We provided leadership for a complex digital transformation programme, supporting 24x7 operations across multiple suppliers and legacy integrations. Our team delivered cloud migration to Azure, Kubernetes adoption, GitOps implementation, and CI/CD pipeline development while mentoring the next generation of DevSecOps professionals.

We designed and deployed a Ping-based identity and access management stack for Motability. Using an Ansible-driven deployment approach, the platform delivered enterprise SSO, federation, and access management capabilities supporting their digital services.