Ciao, I'm Marco. I build cloud platforms, and lately the agents that ship on them.
Platform engineer with sixteen AWS certifications. I lead the engineering on an agentic delivery platform built on Amazon Bedrock AgentCore, and I built my company's most-used internal tool.
Selected work
Most of what I build is for clients or runs inside my company, so these are write-ups rather than screenshots.
Software Toolkit
A Terraform scaffold that provisions serverless infrastructure, mocks APIs locally with AWS SAM and gives every developer their own sandbox per branch.
Agentic delivery platform
Moving a Jira ticket to Agent Ready hands it to agents on Amazon Bedrock AgentCore, which take it through requirements, architecture, implementation and code review.
Alarms for a whole AWS organisation
A Python data source finds resources across every account at plan time, and Terraform generates their CloudWatch alarms from per-service specs. A daily GitHub Actions run keeps it current.
Terraform with guard rails
The starting point for new AWS projects: agent skills for Terraform work, a plan review that flags IAM widening, replacements and cost changes, and tested hooks that block destructive changes.
Experience
Storm Reply UK
Senior Cloud Consultant
- Lead engineer on an agentic product-development platform for a global travel company, including the layer that makes Claude Code, Codex and Kiro interchangeable.
- Architected hybrid networking for a global glass manufacturer and set up agentic development on their repository, delivering 10+ full-stack screens to a tight deadline.
- Lead the Product Guild, which owns the Software Toolkit, and wrote the company's Terraform template for new AWS projects.
- Lead technical interviewer for graduate hiring, line manager to a graduate consultant, and org admin for AWS, GitHub, Atlassian, Figma and Slack.
Cloud Consultant I → III (skip-level promotion)
- Requested by a UK national lottery operator to join their monitoring and alerting team: organisation-wide CloudWatch alarms, Grafana dashboards and Sensu checks still in daily use.
- Owned their Amazon Connect and ServiceNow contact-centre platform: infrastructure, security and platform code.
- Reworked their Terraform GitHub Actions workflows and wrote the reusable Docker pipeline with Trivy scanning used across their GitHub Enterprise.
- Closed 55% more tickets than the team average in 2024.
Sky
Associate DevOps Engineer, placement year
- Designed and built ALPI, a serverless log-processing platform across AWS and Azure, used department-wide.
- Designed and led the migration of the team's first application to AWS.
- Refactored the team's GitLab CI/CD pipelines into shared templates reused by every repository.
University of Surrey
BSc Computer Science, First Class Honours
Final mark 86, with five courseworks at 100. Dissertation on private digital transactions in Rust.
Projects
CandleAlpha
A game that trains you to read candlestick charts. Built alone in 10 days of development through an agentic loop, with Codex reviewing Claude Code working from Linear tickets.
NetNotes
A protocol for fully private transactions built on Mimblewimble and One-out-of-Many proofs, and an optimised Rust implementation of those proofs, the fastest in any language.
POCoin
A cryptocurrency with Paxos consensus across replicated Elixir nodes
FreshFarm
A farmers' marketplace on Azure Functions with a Vue frontend
AIDO Bolzano
Website for the Bolzano branch of the Italian organ donation association
NightLyfe
A real-time nightlife map for groups, on Firebase
Certifications
Winner of Reply Group's 2025 Certification Challenge, across 17,000 consultants in 14 countries.
Hover a badge to read it. Press and rub to polish.
All 20 of them. Tap one to read it, rub it to polish it.
- AWS Certified Solutions Architect – Professional. Valid until Jul 2028.
- AWS Certified DevOps Engineer – Professional. Valid until Jun 2027.
- AWS Certified Security – Specialty. Valid until Aug 2029.
- AWS Certified Advanced Networking – Specialty. Valid until Jun 2027.
- AWS Certified Database – Specialty. Renew by Nov 2026.
- AWS Certified Machine Learning – Specialty. Renew by Jan 2027.
- AWS Certified Data Analytics – Specialty. Renew by Jan 2027.
- AWS Certified: SAP on AWS – Specialty. Valid until Mar 2027.
- AWS Certified Solutions Architect – Associate. Valid until Jul 2028.
- AWS Certified Developer – Associate. Valid until Jun 2027.
- AWS Certified SysOps Administrator – Associate. Valid until Jun 2027.
- AWS Certified Data Engineer – Associate. Valid until Apr 2027.
- AWS Certified Machine Learning Engineer – Associate. Valid until Oct 2027.
- AWS Certified Cloud Practitioner. Valid until Oct 2027.
- AWS Certified AI Practitioner. Valid until Oct 2027.
- Microsoft Certified: Azure Administrator Associate. Valid until Oct 2027.
- Microsoft Certified: Azure Developer Associate. Expired Sep 2025.
- HashiCorp Certified: Terraform Associate (003). Valid until Sep 2027.
- GitHub Actions. Valid until Jul 2027.
- AWS Certified CloudOps Engineer – Associate. Valid until Oct 2028.
Beyond the code
Recognition
People
Stack
- Cloud
- AWS (Lambda, ECS, EKS, VPC, IAM, DynamoDB, EventBridge, Bedrock AgentCore), Azure
- Infrastructure
- Terraform, Kubernetes, Docker, Helm, Ansible
- Delivery
- GitHub Actions, GitLab CI/CD, Jenkins
- Monitoring
- CloudWatch, Grafana, Sensu
- AI engineering
- Claude Code, Codex, Kiro, multi-agent orchestration and cost tracking
- Languages
- Python, TypeScript, SQL, Rust, React, Vue
Writing
How I let AI run my life (and what it isn't allowed to see)
I keep my finances, plans, health and journal in a markdown wiki that Claude maintains. Here is how it is built, and the four rules that made it safe enough to trust.
Serverless on AWS without a serverless framework
Terraform owns every resource, the frontend gets its config from Terraform outputs, Lambda functions are pnpm workspace packages, and one zod contract drives the API gateway, the client and the handlers. The template I start every serverless project from, and the parts worth stealing.
The whole engagement in one folder
A consulting team's context lives in Teams threads and three people's heads. Here is how we moved it into a SharePoint library, synced it to every laptop with OneDrive, and let Claude Code keep it as an LLM wiki.