Latest Article
Guardrails That Hold: RAI Filters & a Governed MCP Gateway
Part 2 of the governed AI platform: a custom RAI content filter with harm thresholds, plus an MCP gateway that tiers tool access.
Read article Azure Cloud Engineering
by Timo Haldi
Infrastructure as Code • Security & Compliance • DevOps Automation
My experiences building with Microsoft Azure,
IaC and DevOps automation.
Day-to-day learnings, Azure updates, and practical solutions from the field.
timo@azure ~ % whoami Cloud & DevOps Engineer · Netcloud, CH timo@azure ~ % cat stack.txt Azure · IaC · Security · DevOps · AI agents timo@azure ~ %
Scroll to explore
Latest from the Blog
Azure Weekly CW33: Firewall Premium 22 Gbps & MAI-Thinking-1
Azure CW33 2026: the Firewall Premium deny-mode throughput numbers, Markdown for Agents in App Service, and MAI-Thinking-1 in Microsoft Foundry.
Building a Governed AI Platform on Microsoft Foundry
How I built an internal AI platform on Microsoft Foundry with governance first: data residency, secret-less identity, and central audit.
Azure Weekly CW32: Trusted Launch by Default & cc_v5 Sunset
Azure CW32 2026: Trusted Launch on by default for new Gen2 VMs, the cc_v5 confidential VM retirement on September 1st, and Firewall explicit proxy GA.
Explore Topics
Six areas I write about most, straight from client work
Azure
Platform services, features, and field notes.
Terraform & IaC
Reusable modules, patterns, and automation.
Cloud Security
Zero Trust, identity, and hardening.
Governance
Policy-as-code, compliance, landing zones.
DevOps
CI/CD pipelines and delivery automation.
AI on Azure
Foundry, agents, and governed AI platforms.
Why Follow This Blog?
Production Azure insights from someone who ships cloud solutions daily
Enterprise Experience
I design and deploy Azure landing zones, governance frameworks, and security architectures for real businesses. Learn from implementations, not tutorials.
Security & Governance
Deep dives into Microsoft Defender, Sentinel, zero-trust design, and compliance automation. See how enterprise security actually gets built.
Infrastructure Automation
Terraform modules, Bicep templates, and CI/CD pipelines I actually use. Battle-tested code from production environments.
What I Do
Cloud engineer building secure, scalable Azure infrastructure
Day-to-Day Work
Architecting multi-tenant Azure environments, implementing security controls, and automating everything with IaC. I turn complex requirements into reliable cloud solutions.
Community Contribution
Writing technical guides, creating open-source stuff, and sharing lessons learned. Helping cloud engineers solve real problems faster.
Knowledge Sharing
Weekly blog posts breaking down Azure updates, troubleshooting production issues, and documenting implementations. Building a community that learns together.
Ready to Build Something Great?
Whether you're looking for cloud architecture expertise, need guidance on Azure best practices, or want to explore technical insights on my blog, I'm here to help.