Published onJuly 6, 2026Terraform Module Design That Survives Three Years of Driftterraformiacdevsecopsplatform-engineeringHow to build Terraform modules that stay maintainable across three years of provider upgrades, refactors, and config drift.
Published onJuly 2, 2026What I Look For When Interviewing Senior Engineershiringengineering-leadershipinterviewingcareerAfter running hundreds of senior interviews, the signal is rarely about algorithms. It is about judgment, blast radius, and how someone reasons when the problem is underspecified.
Published onJune 30, 2026Outbox, Not Dual Writes: Getting Events and Database State to Agreedistributed-systemskafkapostgresevent-drivenfintechWhy dual writes to your database and Kafka silently lose events, and how the transactional outbox pattern fixes it in production.
Published onJune 29, 2026Idempotency Keys for Payment APIs: Surviving Retries, Timeouts, and Double-Chargesfintechdistributed-systemsapi-designpostgrespaymentsHow we built an idempotency layer on Postgres that survives client retries, gateway timeouts, and concurrent requests without double-charging anyone.
Published onJune 25, 2026Secrets Management at Scale: Killing Long-Lived AWS Credentials with OIDC and VaultsecurityvaultawsdevsecopsoidcHow we eliminated static cloud credentials across CI, EKS, and developer laptops using OIDC federation and dynamic Vault secrets.