Scott Rooke
I build and run the cloud platforms that regulated businesses depend on. Architecture through to production: provisioned as code, wrapped in the governance that keeps it auditable, and still standing when the incident happens and the auditor arrives.
Nearly 30 years, most of it hands-on. I work through 494 Group: usually on my own, which is the right size for most of this work, and with people I have worked with before when a program needs more than one pair of hands.
What I get called for
- Stand up a cloud data platform that can pass an audit
HIPAA and HITRUST on AWS, governed, provisioned as code, and cleared through security review before anyone uses it.
- Move an installed base to the cloud without breaking customers
700 corporate tenants in four waves, cutover and rollback planned per wave.
- Run the services other businesses depend on
Key management and global object storage, upgraded and expanded without taking the service down.
- Ship software with AI coding agents without shipping the wrong thing
Agents under defined roles, automated gates and independent verification. Two products delivered through it.
Writing
- A gate that only ever passes is no gate
Most test suites prove that code works. Almost none prove that the tests would notice if it stopped.