About
Security engineer who empowers teams to work securely and stay compliant.
I like solving problems, especially the ones where engineering and security meet.
For most of my career I've worked closely with platform teams and developers, building the platform services they depend on. The goal has always been the same: a platform that doesn't block developers, but lets them ship faster and more securely. I've built these platforms on-prem on bare metal and on every kind of cloud, from the big hyperscalers to smaller providers.
I'm an old pentester at heart, and I've worked both sides of security. I've written iptables rules and Snort signatures to keep attackers out. I've also written scanners and inspected traffic to find my own way into applications. That background shapes how I build: I know how systems get broken, so I know where to put the defences.
As a security professional I cover the whole compliance path, from securing the platform and the applications to writing the policies that turn security practice into compliance work. I believe compliance belongs in the foundation and in everyday practice, not in a binder that comes out once a year. Build it into the base, and security can grow from the ground up. That includes working hands-on with developers and platform teams to build security into what they make.
To me, a security practitioner's job is to help. Developers and everyone else should be able to work as easily as possible and as securely as possible, with security clearing the way rather than standing in it.
I use AI tools every day. They run as a dark factory that turns planned work into pull requests, and they work next to me as an assistant. Together they let me get more done than ever before.
I wrote the book Ubuntu System Administration Guide (BPB Publications, 2025): a hands-on guide from the first Ubuntu install to Kubernetes and CI/CD on your own servers.
I host the DevSecOps Talks podcast, run a small cluster at home that is more production than it should be, and fly drones that turn fields and forests into maps. This site is where I write it down.
Head of Security · Stockholm (remote)
Responsible for security across the company: security management and operations, compliance with SOC 2 and HIPAA, and physical security.
Founder · Stockholm (remote)
Building and running a platform that turns drone flights into maps, 3D models and live video, on a Talos Linux cluster at Hetzner run fully with ArgoCD and GitOps.
Podcast host
Conversations about DevSecOps, platform engineering and cloud native security.
Author
Wrote a 270-page, hands-on guide to Ubuntu Desktop, Server, security and DevOps automation, from the first install to Kubernetes and CI/CD on your own servers.
DevOps Engineer / SRE · Stockholm
Set up the platform team, moved the services to highly available Kubernetes in AWS, and built CI/CD, an on-prem Talos cluster, security tooling and the logging pipeline.
System Operations (Jun 2008 – Mar 2020) · PCI DSS (2016 – Mar 2020) · Stockholm
Built and ran an on-prem, PCI DSS level 1 card payment platform on CentOS and KVM, then moved it through OpenStack, OpenShift and Kubernetes to Google Cloud (GKE) and AWS (EKS), fully as infrastructure as code. Fareoffice was bought by Enterprise Rent-A-Car, and I stayed on through the move.
After-school teacher and IT · Jakobsberg
Worked with student health at the school, and in the evenings built out its IT. Many hours in the school basement in front of a glowing screen.
Support technician · Jakobsberg
Repaired HP printers, desktops and laptops.
Drone mapping, live video and AI workflows for the people who fly.
Ollebo turns drone flights into maps, 3D models and live video that a whole team can work in. Upload photos or GeoTIFFs and they become fast web maps; fly a DJI enterprise drone and it shows up live on the map, with every flight saved as a mission.
Open source on GitHub
Kubernetes-native security scanning, with the results in your own SIEM.
Samma runs open-source security scanners from inside your Kubernetes cluster. The operator finds your Ingresses and targets and scans them with Nmap, Nikto, Tsunami and a set of small always-on checks for TLS, DNS, headers and changes over time.
Drone photography, and the maps and models made from it.
A podcast about DevSecOps, platforms and cloud native security.
A community for robotics, automation and security.