Christopher Law (BSc Hons)

• Iterative modernisation where practical.
• Design for maintainability, operability, and security from the start.
• Apply SOLID principles and object-oriented design patterns pragmatically to keep systems testable, extensible, and easier to evolve.
• Set projects up with warnings as errors, full code analysis, and unit testing from the start.
• Keep architecture grounded in delivery reality.
• Use automation to reduce manual effort, improve consistency, and shorten feedback loops.
• Treat CI/CD, testing, provenance, and trusted builds as part of engineering quality.
• Favour clear boundaries, explicit ownership, and pragmatic patterns over unnecessary complexity.

• NHS Scotland Workforce Systems and SSTS (2022 - Current)
  Role: Application Architect for Workforce and SSTS
  • Since joining this project I have been asked to lead the modernisation and transformation of one of the largest enterprise applications on the NHS Scotland account. This involves redirecting the solution and addressing significant technical debt, improving engineering practices, and establishing a modern delivery approach.
  • Oversee both Workforce Systems and SSTS technical direction, including tooling, DevOps, Git, CI/CD and application architecture, ensuring the technical roadmap supports long-term modernisation.
  • Workforce Systems is a payroll and expenses suite of applications. SSTS is a national time and rostering system. These are some of the largest and most business-critical enterprise applications on the account.
  • Lead modern engineering adoption such as automated pipelines, release management improvements, improved branching strategies, and platform approaches.
  • Manage development teams and provide a joined-up approach between Workforce and SSTS systems, ensuring alignment and reuse where possible across platform services, tooling and technical patterns.
• NHS Scotland Workforce Systems (2022 - 2023)
  Role: Development Manager / Technical Architect
  • Managed a team of developers for the NHS Scotland Payroll system, a highly complex suite of applications processing payroll nationally across Scotland.
  • Involved in modernisation and transformation with a view to establish future strategic direction and improve quality gates and delivery practices.
  • Moved legacy areas toward modern architecture patterns and improved tooling and CI/CD pipelines to increase delivery confidence and throughput.
• National Crime Agency (NCA) Suspicious Activity Reports (SARs) (2021 - 2022)
  Role: Cloud Architect / Consultant
  • Produced architecture and design documentation for a new Azure-based platform for processing and managing Suspicious Activity Reports, working across multiple teams in a lead architecture and senior delivery role.
  • Favoured Azure PaaS services where practical, including Cosmos DB and API gateway patterns, to keep the operating model simpler and reduce ongoing running costs.
  • Worked closely with adjacent teams on integration boundaries, access models, and platform responsibilities, including Azure RBAC and wider service-to-service design concerns.
• Northumbrian Water Ltd (2020 - 2021)
  Role: Migration Architect / Consultant
  • Phased migration of on-premise data centre to Azure cloud for this utilities company.
  • Responsible for producing the solution and migration approach from on-premise to Azure.
• NHS Scotland eOphthalmic and eDental Systems (2014 - 2020)
  Role: Architect / Designer / Developer
  • Produced architecture, design documentation and work packages to feed into the development process, including critical infrastructure design for GP and Pharmacy infrastructure and supporting applications.
  • Responsible for producing the architecture and design for two national medical systems written in C# MVC with code analysis, automated testing and recognised patterns such as dependency injection and Entity Framework.
  • Designed and delivered changes to large scale medical systems with parallel work streams, multiple deployments and branch / merge strategies.
• NHS Scotland Cloud Applications (2017 - 2018)
  Role: Architect / Designer / Developer
  • Designed and developed national medical cloud applications built on C# .NET Core App Services.
  • This involved PaaS and IaaS services, including Azure SQL, Azure DNS, Azure AD and VM / network provisioning.
  • Used Azure deployment slots and configuration management to enable zero downtime deployments and environment switching between Live, Test and Staging.
  • Involved in initial setup of Azure subscriptions and infrastructure including vNets, VMs, VPNs and DNS.

See Personal, Open Source and Small Business Projects for additional platform, automation, infrastructure, and product work outside client delivery.

Open Source Projects

• Promethix Cloudflare Tunnel Operator (2025 - Present)
  • Designed and built a Kubernetes operator for publishing cluster services through Cloudflare Tunnel using explicit cluster-declared intent and safe reconciliation.
  • Supports ingress-backed and direct-origin publication models, route lifecycle management, and multi-tenant hostname ownership controls.
  • Built with production-minded engineering practices including CI/CD, container signing, SBOM generation, and provenance attestation.
• AdoScope (2023 - Present)
  • Built and maintain AdoScope, a lightweight library for Dapper and ADO.NET that manages connection and transaction lifecycles through scoped ambient contexts.
  • Supports nested scopes, multiple database contexts, provider-agnostic usage, and distributed transaction scenarios for enterprise-style data access patterns.
  • Focused on reducing boilerplate and keeping repository and service code clean while preserving explicit transaction boundaries.
• docker-bitcoin-wallet (2018 - Present)
  • Contributed to a Bitcoin wallet application, with work focused on improving the security of its remote-access and operational model.
  • Updated and maintained container-based deployment approaches around the platform as part of wider self-hosted service work.

Personal Projects

• Promethix DataCentre and Platform Engineering (2022 - Present)
  • Designed and evolved a private platform spanning Proxmox virtualisation, segmented networking, shared storage, Kubernetes, automation, and hosted workloads.
  • Delivered workload migrations across multiple platform generations, including Xen to Red Hat oVirt / OLVM and later Red Hat oVirt to Proxmox.
  • Built out GPU-backed workstation and compute patterns including PCI passthrough, NVIDIA GRID / vGPU implementation, and mixed remote workstation, rendering, and AI-style workloads.
• RKE2 Delta GitOps Platform (2025 - Present)
  • Built and maintain a GitOps-managed RKE2 platform with Flux, SOPS, environment overlays, and cluster-local application delivery patterns.
  • Deployed and integrated platform services including Cilium, Vault, Velero, CrowdSec, monitoring, ingress, GPU operator support, and secure secret handling.
  • Used the platform for staged workload migration, controlled cutover planning, and more production-aligned operational patterns than a typical lab setup.
• AI and LLM Hosting Experiments (2025 - Present)
  • Configured and deployed local LLM-serving workloads using vLLM and related tooling, including GPU-backed inference patterns and supporting web interfaces.
  • Used these environments for practical experimentation with self-hosted AI services, developer tooling, and operational patterns around GPU scheduling and service exposure.
• Infrastructure Provisioning and VM Automation (2025 - Present)
  • Built validation-first infrastructure automation for Proxmox using Terraform and Ansible, with particular focus on workstation-class VM provisioning and repeatable guest configuration.
  • Implemented automation patterns for GPU and vGPU attachment, staged Windows guest bootstrap, controlled configuration rollout, and safer handling of secrets and live-state changes.
• Storage and Data Platform Work (2019 - Present)
  • Designed and operated shared storage platforms using TrueNAS, NFS-backed virtualisation storage, tiered SSD and HDD pools, and backup-oriented storage separation.
  • Worked on storage designs that support migration, resilience, backup, and mixed workload placement across virtualisation and Kubernetes environments.
• Telephony and Communications Systems (2018 - Present)
  • Deployed and maintained multi-user VoIP and PBX environments using FreePBX and Asterisk, including SIP trunking, internal routing, provisioning, and migration planning.
  • Delivered staged migration work such as legacy chan_sip to PJSIP transition and FreePBX generation upgrades while preserving existing inbound and outbound call behaviour.

Small Business Projects

• Promethix VM Control Plane (2025 - Present)
  • Building a .NET-based control plane for VM-oriented operations and supporting business-adjacent platform workflows.
  • Focused on clearer operational boundaries between platform services, automation, and virtual machine lifecycle concerns.
• Multi-Tenant RKE2 Client Platforms (2025 - Present)
  • Running RKE2 in a multi-tenant model and providing client-facing Flux GitOps repositories to support clearer ownership, repeatable delivery, and controlled platform changes.
  • Applying the same platform patterns across hosted workloads so smaller clients can benefit from a more structured operational model without carrying full platform overhead themselves.
• WatchPage and Utility Hosting (2018 - Present)
  • Designed and built small utility applications and hosted services used for monitoring, operations, and internal workflow support.
  • Used these projects to apply practical delivery patterns around containers, reverse proxying, automation, and lightweight service hosting.
• Small Business Site and Service Hosting (2018 - Present)
  • Hosting and operating small business sites and services, including platforms such as grid53.io, with the same emphasis on repeatability, controlled change, and pragmatic supportability.

• NHS Scotland
  Practitioner Counter Fraud Services

  Further to my comments when I saw you in Livingston a few weeks ago, I would like to put on record my appreciation for all of Chris Law's efforts throughout the eOphthalmic project. It is fair to say that he has been central to the successful delivery of this project. He has always been extremely helpful and willing to go the extra mile to get things done. He has been a pleasure to work with.

• NHS Scotland
  Atos Programme Manager

  Chris has been vital to Iain's eOphthalmic project and it is down to his expertise and customer focus that result in Atos being given more business.

• NHS Scotland
  Atos Project Manager

  eOphthalmic, eDental and next eOrtho are regarded within the NHSS account as important and successful projects. My feedback to you is that this is largely down to the efforts of one person, Chris, who has worked tirelessly over the last 3.5 years on this series of projects.

• Kubernetes - Rancher / K3S / GitOps
• RKE2
• Virtualisation - Proxmox / XEN / KVM
• Microservices - Ocelot / Consul / RabbitMQ
• Cloud - OpenStack / Azure
• Containers and Container Orchestration
• Build Provenance
• Telecoms - FreePBX and Asterisk
• Linux - Gentoo, Ubuntu, Arch and NixOS
• Python
• AI / LLM Tooling - model serving and automation experiments

• Rowing - Teesside Rowing Club
• Bodybuilding
• Music - Brass
• Homelabbing and self-hosting