Skip to main content

Thought Leadership

Insights on software architecture, technology leadership, and enterprise digital transformation from 20+ years of experience

10 January 202613 min read

Camunda DMN, CMMN, and Forms: Decision and Case Management

Beyond BPMN: Implementing decision tables with DMN, adaptive case management with CMMN, and user task forms in Camunda Platform 8.

CamundaDMNCMMNFormsDecision Management
Read article
3 January 202614 min read

Camunda Platform 8: BPMN and Process Orchestration

A comprehensive guide to building business process automation with Camunda Platform 8. BPMN 2.0 modeling, Zeebe engine architecture, and cloud-native process orchestration.

CamundaBPMNProcess AutomationWorkflow
Read article
27 December 202512 min read

Camunda vs Flowable: Choosing Your Process Engine

A detailed comparison of Camunda Platform 8 and Flowable for enterprise process automation. Features, architecture, licensing, and decision criteria.

CamundaFlowableBPMNComparisonProcess Automation
Read article
20 December 202514 min read

Flowable: Open-Source BPM, DMN, CMMN, and Forms

Building process automation with Flowable Community Edition. BPMN engine implementation, decision tables, case management, and Spring Boot integration.

FlowableBPMNDMNCMMNOpen Source
Read article
13 December 202515 min read

Microservices Architecture: Lessons from 20+ Years of Enterprise Delivery

Key insights on designing, implementing, and scaling microservices in large enterprises. From monolith decomposition strategies to event-driven patterns that actually work in production.

ArchitectureMicroservicesEnterpriseBest Practices
Read article
6 December 202513 min read

SAST: Static Application Security Testing in Practice

Master static application security testing with practical implementations using SonarQube, Semgrep, and CodeQL. Learn to identify vulnerabilities before code reaches production.

SecurityDevSecOpsSASTCode Quality
Read article
29 November 202514 min read

Integrating AI into Enterprise Systems: A Practical Guide

How to successfully integrate AI and ML capabilities into existing enterprise infrastructure. Covering data pipelines, model deployment, and organizational change management.

AI/MLEnterpriseIntegrationDigital Transformation
Read article
22 November 202514 min read

SCA and DAST: Dependency and Dynamic Security Testing

Implement Software Composition Analysis and Dynamic Application Security Testing to secure dependencies and detect runtime vulnerabilities in production-like environments.

SecurityDevSecOpsSCADAST
Read article
15 November 202515 min read

DevSecOps: Shifting Security Left in CI/CD Pipelines

Integrate security throughout the software development lifecycle. From pre-commit hooks to production monitoring, build a security-first culture without slowing delivery.

DevSecOpsSecurityCI/CDBest Practices
Read article
8 November 202518 min read

Building RAG Systems for Production: Beyond the Tutorial

Practical insights on implementing Retrieval-Augmented Generation systems that work reliably at scale. Covering vector databases, chunking strategies, and evaluation frameworks.

AI/MLRAGLLMArchitecture
Read article
8 November 202516 min read

ISO 27001: Implementing Information Security Management Systems

A practical guide to implementing ISO 27001 in technology organisations. From gap analysis to certification, with focus on integrating ISMS into DevOps practices.

SecurityComplianceISO27001Enterprise
Read article
1 November 202516 min read

Healthcare Interoperability: Implementing HL7 FHIR in Practice

Real-world experience implementing HL7 FHIR standards for healthcare data exchange. Lessons from building platforms that connect multiple healthcare providers.

HealthcareHL7 FHIRInteroperabilityStandards
Read article
1 November 202514 min read

NEN 7510: Healthcare Information Security in the Netherlands

Implementing NEN 7510 for healthcare organisations. Understanding Dutch healthcare security requirements, integration with ISO 27001, and practical compliance strategies.

SecurityComplianceNEN7510HealthcareNetherlands
Read article
25 October 202515 min read

SOX Compliance: IT Controls for Financial Reporting

Implementing IT General Controls (ITGCs) for Sarbanes-Oxley compliance. Access management, change control, and automated compliance in modern tech environments.

ComplianceSOXSecurityEnterpriseFinance
Read article
24 October 202517 min read

Building a Developer Portal with Backstage.io: Enterprise Lessons

How we implemented Backstage.io at Lloyds Banking Group to improve developer experience across 50+ teams. Architecture decisions, customization strategies, and adoption patterns.

Developer ExperienceBackstage.ioPlatform EngineeringBanking
Read article
18 October 202514 min read

CMMI: Building Mature Software Development Processes

Implementing CMMI for software development excellence. From Initial to Optimizing maturity levels, with practical guidance for agile organisations.

CMMIProcess ImprovementQualityEnterpriseBest Practices
Read article
17 October 202520 min read

Kubernetes in Production: Hard-Won Lessons from Enterprise Deployments

Practical insights from deploying and operating Kubernetes clusters in enterprise environments. Covering security, networking, observability, and disaster recovery.

KubernetesDevOpsCloudInfrastructure
Read article
11 October 202515 min read

AWS Lambda: Building Serverless Applications

A comprehensive guide to AWS Lambda for serverless computing. Function design patterns, cold starts, performance optimization, and production best practices.

AWSLambdaServerlessCloud
Read article
10 October 202516 min read

Event-Driven Architecture: Choosing Between Kafka and NATS

A practical comparison of Apache Kafka and NATS for event-driven systems. When to use each, architectural patterns, and real-world performance considerations.

ArchitectureKafkaNATSEvent-Driven
Read article
4 October 202514 min read

AWS Fargate: Serverless Container Orchestration

Running containers without managing servers using AWS Fargate. ECS vs EKS integration, task definitions, networking, and cost optimization strategies.

AWSFargateContainersECSServerless
Read article
3 October 202518 min read

Smart Metering at Scale: Data Architecture for 2.5M+ Customers

How we built a data platform to process smart meter readings for millions of energy customers at Vattenfall. Time-series data, aggregation strategies, and analytics pipelines.

EnergyData ArchitectureBig DataAnalytics
Read article
27 September 202514 min read

AWS API Gateway: Building REST and HTTP APIs

A complete guide to AWS API Gateway. REST APIs vs HTTP APIs, authentication strategies, rate limiting, and integration patterns with Lambda and other services.

AWSAPI GatewayRESTServerlessCloud
Read article
26 September 202514 min read

TypeScript vs Go: When to Use Each in Enterprise Systems

A practical comparison of TypeScript and Go for backend services. Performance characteristics, developer experience, and use case recommendations.

TypeScriptGoBackendArchitecture
Read article
20 September 202513 min read

AWS CloudFront: CDN and Edge Computing

Accelerating content delivery with AWS CloudFront. Edge locations, caching strategies, Lambda@Edge, CloudFront Functions, and security best practices.

AWSCloudFrontCDNEdge ComputingPerformance
Read article
19 September 202516 min read

GraphQL in Enterprise: Adoption Patterns and Pitfalls

Lessons from implementing GraphQL APIs in banking and telecom environments. Schema design, federation strategies, and performance optimization.

GraphQLAPI DesignEnterpriseArchitecture
Read article
13 September 202515 min read

AWS VPC: Networking and Security Architecture

Designing secure network architectures with AWS VPC. Subnets, route tables, security groups, NACLs, VPC endpoints, and multi-account networking strategies.

AWSVPCNetworkingSecurityCloud
Read article
12 September 202514 min read

PCI Compliance in Practice: Building Secure Payment Integrations

Real-world experience implementing PCI-compliant payment systems. IVR integration, tokenization strategies, and audit preparation.

SecurityPCI-DSSPaymentsCompliance
Read article
6 September 202514 min read

AWS Cognito: User Identity and Access Management

Implementing authentication and authorisation with AWS Cognito. User pools, identity pools, OAuth flows, MFA, and integration with API Gateway.

AWSCognitoAuthenticationSecurityIdentity
Read article
5 September 202510 min read

Oracle RAC: Lessons from High-Availability Database Deployments

Practical experience deploying Oracle RAC for mission-critical retail systems. Clustering, Data Guard configuration, and operational best practices.

OracleDatabaseHigh AvailabilityInfrastructure
Read article
30 August 202515 min read

Keycloak: Open-Source Identity and Access Management

Implementing enterprise IAM with Keycloak. User federation, SSO, OAuth2/OIDC, SAML, and integration with modern applications and microservices.

KeycloakIAMSecuritySSOOAuth2
Read article
29 August 202517 min read

Legacy Modernization: Strategies That Actually Work

Practical approaches to modernizing legacy systems without big-bang rewrites. Strangler fig pattern, API layering, and incremental migration.

Legacy ModernizationArchitectureMigrationEnterprise
Read article
23 August 202516 min read

Terraform: Infrastructure as Code Best Practices

Mastering Terraform for cloud infrastructure management. Module design, state management, workspaces, and patterns for multi-environment deployments.

TerraformIaCDevOpsCloudAWS
Read article
22 August 202517 min read

CI/CD at Enterprise Scale: Patterns for Large Organizations

Building CI/CD pipelines that work across hundreds of repositories and dozens of teams. Pipeline templates, security scanning integration, and deployment strategies.

CI/CDDevOpsEnterpriseAutomation
Read article
16 August 202514 min read

GitHub Actions: Building Modern CI/CD Pipelines

Creating efficient CI/CD workflows with GitHub Actions. Reusable workflows, matrix builds, security scanning, and deployment strategies.

GitHub ActionsCI/CDDevOpsAutomation
Read article
15 August 202518 min read

Agentic Workflows: Building AI Agents for Enterprise Automation

Practical experience building autonomous AI agents for business process automation. Tool integration, guardrails, and human-in-the-loop patterns.

AI/MLAgentic AIAutomationEnterprise
Read article
9 August 202514 min read

GitLab CI/CD: Enterprise Pipeline Configuration

Building robust CI/CD pipelines with GitLab. Pipeline architecture, stages, environments, and integration with Kubernetes deployments.

GitLabCI/CDDevOpsKubernetes
Read article
8 August 202515 min read

React Performance: Optimization Patterns for Enterprise Applications

Practical techniques for optimizing React applications at scale. Virtualization, code splitting, state management patterns, and profiling strategies.

ReactFrontendPerformanceJavaScript
Read article
2 August 202513 min read

GCP API Gateway and Cloud Endpoints

Building and managing APIs on Google Cloud Platform. API Gateway configuration, Cloud Endpoints, authentication strategies, and integration patterns.

GCPAPI GatewayCloud EndpointsCloud
Read article
1 August 202514 min read

API Design Best Practices: Lessons from Building Enterprise APIs

Principles for designing APIs that developers love. Consistency, versioning strategies, error handling, and documentation approaches.

API DesignRESTArchitectureBest Practices
Read article
26 July 202514 min read

Firebase: Building Real-Time Backend Services

Implementing serverless backends with Firebase. Firestore, Authentication, Cloud Functions, and real-time data synchronisation for modern applications.

FirebaseGCPServerlessReal-time
Read article
25 July 20259 min read

Terraform Patterns for Multi-Cloud Enterprise Infrastructure

Practical patterns for managing infrastructure as code across AWS, Azure, and GCP. Module design, state management, and team workflows.

TerraformInfrastructure as CodeCloudDevOps
Read article
19 July 202513 min read

GCP Cloud Run: Serverless Containers

Running containerised applications on Cloud Run. Auto-scaling, traffic management, CI/CD integration, and cost optimisation strategies.

GCPCloud RunContainersServerless
Read article
18 July 202516 min read

Observability for Modern Applications: Beyond Monitoring

Implementing comprehensive observability with metrics, logs, and traces. From OpenTelemetry to custom dashboards that actually help you debug issues.

ObservabilityMonitoringOpenTelemetryDevOps
Read article
12 July 202515 min read

OpenTelemetry: The Observability Standard

Implementing distributed tracing and metrics with OpenTelemetry. Instrumentation patterns, collector configuration, and integration with observability backends.

OpenTelemetryObservabilityTracingMetrics
Read article
11 July 202515 min read

Docker Best Practices: Building Production-Ready Containers

Practical guidelines for building secure, efficient Docker containers. Multi-stage builds, security hardening, and image optimization.

DockerContainersDevOpsSecurity
Read article
5 July 202514 min read

Prometheus and Grafana: Metrics and Visualisation

Building monitoring infrastructure with Prometheus and Grafana. PromQL queries, alerting rules, dashboard design, and Kubernetes integration.

PrometheusGrafanaMonitoringObservability
Read article
4 July 20259 min read

Spring Boot in Enterprise: Patterns for Large-Scale Applications

Architectural patterns for Spring Boot applications in enterprise environments. Configuration management, security integration, and testing strategies.

Spring BootJavaEnterpriseBackend
Read article
28 June 202514 min read

Azure Cloud Services: Building Enterprise Applications

An overview of key Azure services for enterprise development. App Service, Functions, Container Apps, and integration with Microsoft ecosystem.

AzureCloudEnterpriseMicrosoft
Read article
27 June 20258 min read

Database Migration Strategies: Zero-Downtime Schema Changes

Techniques for evolving database schemas without service interruption. Expand-contract pattern, feature flags, and blue-green database deployments.

DatabaseMigrationDevOpsArchitecture
Read article
21 June 202516 min read

Multi-Cloud Architecture: AWS vs Azure vs GCP

Comparing cloud providers for enterprise architecture. Service mapping, pricing models, and strategies for multi-cloud and hybrid deployments.

Multi-CloudAWSAzureGCPArchitecture
Read article
20 June 202516 min read

Technical Leadership: Lessons from 20 Years of Building Teams

Insights on growing from individual contributor to technical leader. Delegation, mentorship, and balancing hands-on work with strategic thinking.

LeadershipCareerTeam ManagementMentorship
Read article
13 June 202510 min read

Digital Transformation in Energy: Lessons from Vattenfall

How energy companies are modernizing legacy systems and embracing digital customer experiences. Smart metering, customer portals, and trading integration.

EnergyDigital TransformationEnterpriseCase Study
Read article
6 June 20259 min read

Vector Databases in Enterprise: Selection and Implementation Guide

Practical guide to selecting and implementing vector databases for AI applications. Comparing Pinecone, Weaviate, Milvus, and pgvector.

AI/MLVector DatabaseArchitectureDatabase
Read article
30 May 202514 min read

E-Commerce Scalability: Handling 10x Traffic Spikes

Lessons from building retail platforms that handle holiday traffic surges. Caching strategies, database optimization, and capacity planning.

E-CommerceScalabilityRetailArchitecture
Read article
23 May 202516 min read

Prompt Engineering for Production Systems

Moving beyond playground prompts to production-ready prompt engineering. Version control, testing strategies, and prompt optimization techniques.

AI/MLPrompt EngineeringLLMBest Practices
Read article
16 May 202515 min read

Redis in Enterprise: Caching Patterns and Pitfalls

Practical patterns for using Redis in enterprise applications. Cache invalidation strategies, cluster deployment, and common anti-patterns.

RedisCachingDatabaseArchitecture
Read article
9 May 202514 min read

Agile in Enterprise: Reality vs Textbook

Practical experience implementing Agile methodologies in large organizations. What works, what doesn't, and how to adapt frameworks to enterprise constraints.

AgileProject ManagementEnterpriseTeam Management
Read article
2 May 202510 min read

PostgreSQL Performance Tuning: Practical Guide for Enterprise Applications

Essential PostgreSQL performance optimization techniques. Query analysis, index strategies, and configuration tuning for enterprise workloads.

PostgreSQLDatabasePerformanceBackend
Read article
25 April 20259 min read

Understanding MCP: The Model Context Protocol for AI Agents

Deep dive into the Model Context Protocol and its role in building interoperable AI agents. Architecture, tool definitions, and integration patterns.

AI/MLMCPAgentic AIStandards
Read article
18 April 202514 min read

Banking API Standards: Open Banking and Beyond

Implementing banking APIs that comply with Open Banking standards. PSD2 requirements, security considerations, and consent management.

BankingAPI DesignOpen BankingSecurity
Read article
11 April 20258 min read

Zero Touch Automation: Building Self-Healing Infrastructure

Strategies for achieving zero-touch operations through automation. Self-healing patterns, automated remediation, and operational excellence.

AutomationDevOpsInfrastructureAI/ML
Read article
4 April 20259 min read

Next.js for Enterprise Applications: Architecture Patterns

Building enterprise-grade applications with Next.js. Server components, data fetching strategies, and deployment patterns for large teams.

Next.jsReactFrontendArchitecture
Read article
29 March 202510 min read

Implementing Enterprise Search with Elasticsearch

Building effective search experiences with Elasticsearch. Index design, query optimization, and relevance tuning for enterprise data.

ElasticsearchSearchBackendArchitecture
Read article