Cloud & multi-tenant SaaS platforms

Azure, AWS and GCP platforms, multi-tenant SaaS, identity, tenant isolation and platform standards.

41 contributions across 6 experiences

Where this skill was applied

Often together withSolution & enterprise architecture AI governance, risk & regulatory compliance Data architecture, engineering & governance Generative AI & LLM solutions Agentic AI & AI-native engineering Machine learning, deep learning & MLOps

20268 contributions

Gavi, the Vaccine Alliance

Established and operates the Innovation Lab’s experimental AI tooling estate on Microsoft Frontiers models in Azure — including Cowork, Copilot Claude, MS Scout and OpenClaw for agentic-AI experimentation and architecture evaluation, alongside Cursor, Lovable, Bolt, v0, Microsoft 365 Copilot, Copilot Studio and Azure AI Foundry — under defined tool-selection rules, cost guardrails and an approved/excluded tooling list.
Designed the Azure architecture extending Gavi’s Programmatic Dashboard from reactive reporting to predictive early warning, forecasting country × vaccine stock-buffer breaches 6–12 months ahead — integrating SAP, UNICEF SD/Thrive360 and VaxNeed into Azure SQL and a row-level-secured Power BI model, with forecasting on Azure Machine Learning and grounded narrative generation on Azure OpenAI behind an API Management LLM gateway.
Coordinated architecture-board acceptance of the Governance Bot: a permission-aware knowledge assistant for audit-committee, board and governance-decision queries in Teams and SharePoint on Azure AI Foundry, with an eight-metric production-approval framework — answer accuracy ≥90%, citation coverage 100%, fallback precision ≥95%, access-control integrity 100% — so an AI service is not approved on technical completion alone.
Skills and technologies: Azure solution and security architecture (App Service, Static Web Apps, Functions, SQL, Blob, Key Vault, API Management, Data Factory, Machine Learning, AI Foundry, AI Search, Monitor) · Snowflake · Azure OpenAI, RAG, multi-agent and agentic AI · MLOps/LLMOps and AI evaluation · AI governance, Responsible AI and EU-aligned AI risk management · Entra ID, RLS, TDE/CMK, PIM, managed identities, TLS · C4 and TOGAF · Power BI, Power Platform, Copilot Studio, Purview, Sentinel · confidential-data governance · innovation portfolio governance, vendor selection and procurement · Design Thinking and rapid prototyping facilitation.
Established the reusable reference architecture for grounding Copilot agents in enterprise knowledge — SharePoint → Azure Blob → Snowflake → Azure AI Search vector index → Power Automate → Azure OpenAI → Copilot in Teams/SharePoint — secured with Entra ID RBAC, Key Vault and Purview DLP, with mandatory citation traceability and token-consumption cost controls.
Develops AI and solution architectures in full collaboration with the information-security and compliance function, as a formal pre-review and clearance gate rather than an after-the-fact sign-off; controls such as Entra ID SSO, least-privilege service access, audit logging of queries, responses and data access, restricted-content protection, Key Vault, PIM, RLS and Purview DLP are specified at design time.
Designed the secure Azure architecture for Gavi’s confidential Ombuds, Staff Counsellor and Ethics & Compliance case- and visitor-management platform: three segregated functions on Azure App Service over Azure SQL with Transparent Data Encryption and customer-managed keys in Key Vault, row-level security, Entra ID app roles enforced per request, managed identity as sole database principal and Privileged Identity Management with no standing admin access.
Defined a multi-tier Governance Copilot ecosystem separating the user-facing Governance Bot, a Governance Knowledge Hub and a Power Automate + Azure OpenAI Query Executor, with Azure Blob ingestion, Azure AI Search vector indexing, Entra ID single sign-on and Azure Monitor / Log Analytics monitoring of latency, token usage and errors.

2025–20268 contributions

Solara28

Founded, ideated, architected and single-handedly developed Solara28, an AI-native multi-tenant SaaS platform for European commerce verticals — food services, restaurants, pharmacies, grocery retailers, wine and spirits, catering, coffee shops and event ticketing — positioned under the vision “Illuminate your commerce” as a local-first, zero-commission alternative to global marketplace aggregators and platforms such as Amazon, Shopify, Just Eat, Deliveroo, PrestaShop and WooCommerce. Evidence ↗
Architected and implemented a governed Agentic Factory coordinating eight specialised virtual teams and 32 autonomous AI agents across the end-to-end software delivery lifecycle, generating 6,000,000+ lines of production-ready code, documentation and change artefacts in under one year across a polyglot stack (TypeScript, Supabase/PostgreSQL, FastAPI, Stripe, Vercel).
Designed as next-generation commerce infrastructure for local economies, combining AI-native operations, multi-tenant SaaS architecture and decentralised business ownership to support European business sovereignty and restore data sovereignty, margin control and customer ownership to independent merchants.
Established an end-to-end autonomous AI delivery model covering architecture design, code generation, testing, security validation, cloud implementation and documentation, with every artefact traceable to requirements, architecture decisions, source-control changes, code review, automated testing, security scanning and release approval; the Agentic Factory executed work across engineering, QA, DevOps, compliance, localisation, marketing, branding, e-commerce and online payments.
Architected a provider-agnostic LLM service layer (TypeScript/Node.js/Supabase) connecting OpenAI, Anthropic and Gemini APIs, with configurable provider settings, prompt governance, conversation logging and health monitoring, powering conversational and voice-enabled commerce (“Talk to Your Shop”), automated catalogue ingestion from PDFs, photos and Excel, and predictive revenue forecasting.
Architected the platform so merchants retain full ownership of all operational and customer data, with a GDPR-native multi-tenant architecture for the European market, automated audit trails and European data residency.
Engineered a secure PostgreSQL architecture with hundreds of tables and compound Row Level Security policies, enforcing deterministic tenant isolation across platform, store, staff and customer contexts, with governance-by-design audit logging, activity feeds and observability of API latency, background jobs, errors and cache performance.
Built a polyglot, high-performance stack on TypeScript, Supabase/PostgreSQL, FastAPI and Apache Spark, supporting real-time operations, analytics and scalable AI workloads.

2024–20254 contributions

EPAM Systems

Directed engagements in data engineering and cloud platforms, defining enterprise data-platform strategies on Snowflake, BigQuery and Synapse and advising on data contracts, service tiering and pipeline monitoring.
Global energy leader, Saudi Arabia: designed scalable AWS AI cloud platforms and end-to-end architectures across upstream, downstream, R&D, engineering, finance, HR, safety and supply chain, with LLM orchestration, multi-agent systems, RAG and LSTM models for R&D.
Global industrial materials firm, UK: defined the architecture for freight anomaly detection — hybrid statistical, ML and GenAI models with RAG for contextual validation on AWS and GCP, feature engineering, prompt design for anomaly justification and EPAM AI accelerators.
Introduced AI FinOps to monitor and optimise cloud spend, GPU consumption, token usage, model routing, embedding costs, vector-store capacity and cost-to-serve by product or client.

2013–20182 contributions

Nespresso (Nestlé)

Supported the global restructuring of Nespresso’s data analytics function, migrating operations and technologies to a centralised analytics hub.
Supported local markets in implementing data-driven marketing-mix optimisation, with experimentation run on Adobe Marketing Cloud.

2019–20241 contribution

DSM-Firmenich

Managed a cross-disciplinary team of data scientists, PhD students, contractors and cloud developers (15+ FTEs), delivering commercial and R&D projects with over €70 million in projected value, recognised by DSM’s scientific community and leadership; nurtured international R&D partnerships with client partners up to C-level.

2002–20111 contribution

United Nations CGIAR

Developed data-visualisation portals for Asian tropical fruits and other agricultural datasets, launched in Tashkent (Uzbekistan) to support research in Central Asia and developing countries.

Profile10 contributions

Across the career

Authors and coordinates RFP and RFI responses for complex enterprise AI, data, cloud and digital-transformation opportunities.
Builds, manages and leads high-performing Swiss-based and international AI, data, architecture, engineering and analytics teams; has built and scaled distributed AI and data organisations spanning data science, machine learning, analytics engineering, cloud, architecture and product roles.
Designs enterprise data architectures combining DAMA and FAIR governance, data engineering, data mesh, event-driven design, cloud platforms and secure multi-tenant design.
Works across AWS, Azure, GCP, Snowflake, BigQuery, Synapse, Kafka, Solace and other enterprise data platforms.
Designs secure, observable, governance-by-design data platforms supporting auditability, feature flags, monitoring, subscriptions, billing, analytics and cross-tenant operations.
Applies Row Level Security and controlled access patterns to protect data across complex enterprise and multi-tenant environments.
Designs enterprise-grade multi-tenant SaaS platforms with secure tenant isolation, session-based access control and governance-by-design.
Combines multi-tenant architecture with audit trails, feature flags, operational observability, GDPR-aligned governance and controlled data access.
Balances scalability, security, maintainability, compliance and user experience in European SaaS platforms.
Combines full-stack engineering with enterprise SaaS architecture, API-first design, Stripe payments, e-invoicing, customer analytics and operational workflows.

Skills7 contributions

Skills & applied knowledge

AI and Generative-AI technologies: GANs, LLMs, agentic AI, FinOps, Trustworthy AI, MLOps, LLMOps, AI Factory strategy, MCP, A2A, multi-agent systems and Azure AI Foundry.
Enterprise productivity, automation and security: Microsoft 365, Project, Visio, Power Automate, Copilot, Entra, Azure Key Vault, Defender for Cloud, Sentinel, Azure Policy and Purview.
Data-science and engineering technologies: Tableau, SQL, AWS, Visual Studio Code, Eclipse, Python, PyTorch, Keras, Apache Spark, Kafka and Kafka Streams.
Cloud platforms: Amazon Web Services, Google Cloud Platform and Microsoft Azure, with five years of cloud-computing experience.
Data engineering and governance: Apache Spark, Apache Airflow, MySQL, Microsoft SQL Server, Supabase/PostgreSQL, Kafka, MariaDB, SQL, Power BI, Databricks, Hadoop and NiFi.
Digital commerce and marketing technologies: Adobe Creative Cloud, Experience Cloud, Analytics, Target, Campaign, Audience, Experience Manager and Dreamweaver, Monetate, SAP Hybris, SAP BW, Marketo, Google Analytics, Google Marketing Platform, Google Ads, Criteo, Nosto, Numberly, Stripe and Stripe Connect.
Multi-country sensor-data pipelines integrating field-station IoT devices with central HPC and cluster environments.

All skills

Artificial intelligence

AI governance, risk & regulatory compliance 81 Machine learning, deep learning & MLOps 53 Data Strategy for AI 44 Generative AI & LLM solutions 43 Agentic AI & AI-native engineering 29

Architecture & data platforms

Solution & enterprise architecture 62 Data architecture, engineering & governance 54 Semantic engineering & knowledge management 50 Cloud & multi-tenant SaaS platforms 41

Leadership & business

Innovation & change management 42 Team leadership & talent development 31 Business value & financial management 29 Programme, project & vendor management 27 Executive advisory & pre-sales 19 Entrepreneurship & venture building 13

Product, marketing & communication

Digital marketing & customer analytics 27 Product & full-stack engineering 23 Communication & thought leadership 10