Cloud / platform · May 2026
Multi-region Azure platform for intelligent document processing
Active-passive, multi-region Azure deployment of an IDP platform replacing a legacy OCR product, across two US regions.
What it did, and what it measured
- Authored the complete deployment as phased, idempotent infrastructure-as-code, runnable end to end in 30-45 minutes: network → Key Vault → data → compute → validation.
- Dual AKS clusters (primary autoscaling, secondary warm standby) with Workload Identity and Key Vault CSI - no secrets in code or images. Private Endpoints on Key Vault, Storage, PostgreSQL and ACR; geo-replicated registry; cross-region read replica; Front Door Premium with WAF and bot management in front.
- Ran a documented cost/risk trade-off on the messaging tier that saved ~$1,330/month on the dev environment, with the manual-failover procedure written up as a runbook.
Stack
Azure (AKS, Key Vault, Front Door, Service Bus, Event Grid, PostgreSQL Flexible Server, ACR, Log Analytics, Defender)Bicep / ARMPowerShellKubernetesHelmDocker
Repo and demo
This is client work, so the source is not public. Happy to walk through the architecture, the scorecards and the trade-offs on a call.