Enterprise Architecture
Target-state design that survives the next reorg. Bridges board strategy and engineering reality without losing either.
Platforms
people trust.
Enterprise architecture, cloud, DevSecOps and GenAI — from ambitious strategy to live, audited production.
0+
Years across
enterprise tech
enterprise tech
0books
Published with
Apress & Packt
Apress & Packt
0US patent
USPTO
US11334348B2
US11334348B2
0+
Keynotes & talks
delivered
delivered
0continents
ASEAN · Europe
North America
North America
Top0
Most influential
DevSecOps · global
DevSecOps · global
02 — About
/ about
A practitioner who has shipped the things he writes about.
“I bridge the gap between vision and execution — turning ambitious digital, data and AI strategy into platforms that actually ship, perform and survive audit.”
FDE — Technology Transformation & AI · Accenture, ANZ. Based in Melbourne. Previously Associate Director, CIO Advisory (Cloud & DevSecOps) at KPMG Singapore, and Principal Technology Architect at Accenture ASEAN; earlier stops at Oracle, REAN, Infosys, Attune and TCS.
Four disciplines that compound: enterprise architecture (SAFe, BIAN, multi-cloud reference models), platform engineering & DevSecOps (paved paths, policy-as-code, security in CI/CD), data modernisation (trusted, lineage-aware, analytics-ready), and applied GenAI (architecture, evals, governance for regulated environments) — written up as The 4‑Discipline Stack.
Five books with Apress & Packt. US patent Specs Monster — an intelligent design collaboration tool. Thirty‑plus talks across ASEAN, Europe and the US. Named on the Top 50 DevSecOps Influencers list; internal Bunsen Burner and Delivery Heroes awards.
03 — Expertise
/ expertise
Six disciplines, one operating principle: depth before breadth.
Cloud & Modernisation
Multi-cloud migration, landing zones and cost discipline at FSI and government scale — no lift-and-shift theatre.
DevSecOps
Security shifted left without slowing teams down. Top-50 globally on the practice; the methods are public, the outcomes measurable.
Site Reliability & SRE
Error budgets, blast-radius design and on-call hygiene — the unglamorous work that keeps regulated platforms standing.
Generative AI
LLM systems with guardrails, evals and audit trails. AI you can put in front of a customer — and a regulator.
Platform Engineering
Internal developer platforms that engineers actually adopt. Golden paths over golden cages.
04 — Selected work
/ work
Five engagements that shipped — and stayed shipped.
01
Banking · Payments
Read case study →
02
Banking · EA Governance
Read case study →
03
Banking · Digital Lending
Read case study →
04
Retail · Modernisation
Read case study →
05
Enterprise · Data
Read case study →
Delivering a multi‑region banking payment platform in three months.
A case study in leadership, alignment and execution under pressure — cross-region payment rails stood up against a hard regulatory deadline.
Establishing enterprise architecture governance at Asia’s largest bank.
Capability model, target-state reference architecture and a design-authority engineers didn’t route around — built inside one of the region’s most regulated banks.
Building a high‑speed digital‑lending platform at scale.
Leading Asian bank. 200+ engineers across 50+ squads; delivery & platform leadership for an event-driven lending core engineered for throughput and audit.
Retail platform modernisation & innovation roadmap.
Global retail giant. Platform, architecture and delivery leadership for a multi-year decomposition of a legacy estate into product-aligned services.
Enterprise‑grade data archival platform transformation.
Consolidating legacy retention obligations into a single audited archival fabric — regulator-aligned, retrieval-grade, run-cost out.
05 — In their words
/ voices
What people who’ve worked with me actually say.
What do you do when you have a project with no requirements, an owner with no time, technology never used before, an unrealistic deadline and not enough money — but a vision so grand you feel compelled to deliver? Call Uchit. His technical skills, although exemplary, are not what set him apart — it’s the ability to accept rapid change, pivot with calm, and keep moving no matter what gets thrown at the team.
When I think of Uchit, I think of a techno-businessman. Few technical people understand words like ‘delivering value’ and ‘business growth’ — Uchit is one of those rare people who can balance technology with a business goal.
06 — Published
/ books
Five books and one US patent — written for practitioners.
US Patent US11334348B2 — full inventor list, abstract and claims on Google Patents.
07 — On stage
/ speaking
Thirty‑plus talks across three continents. A few that travelled.
Named among the 50 Most Influential DevSecOps Professionals globally. 30+ sessions delivered across ASEAN, Europe and the US — consistently rated for technical depth and practical takeaways engineers can act on the next day.
HashiConf
Scaling under pressure — Terraform · Packer · Chef
Sep 2015 · Portland, USA
USA
APIDays
API design collaboration
Apr 2021 · Singapore
Singapore
Cloud Expo
The journey to DevSecOps
Oct 2017 · Singapore
Singapore
TopConf
Let’s democratise deployments
Nov 2016 · Tallinn, Estonia
Estonia
All 8 talks, with recordings → see the talks page.
08 — Diagnostics
/ tools
Six practitioner diagnostics. Ten minutes each.
DevSecOps Maturity.
Pipeline, secrets, supply chain, scanning, ownership, baselines, identity, patching, observability, product integration.
Run the diagnostic →GenAI Readiness.
Data, model selection, RAG, prompts, evals, guardrails, observability, cost, governance, audit, operating model.
Run the diagnostic →SRE Programme.
SLOs, error budgets, blast radius, on-call, postmortems, runbooks, chaos, capacity, toil, golden signals.
Run the diagnostic →Three more — Cloud Cost, Platform Engineering, EA Operating Model → see all six. Or browse the practitioner glossary.
09 — Writing
/ writing
Long‑form notes on what actually works.
Enterprise architecture in the GenAI era.
Reference architectures stopped reflecting reality the day vector databases entered the diagram. A working model for EA teams that haven’t rewritten theirs yet.
Read essay →The DevSecOps maturity model I wish I’d had at level 1.
Five levels, no vendor logos, scored against work I’ve seen in production at four banks and two telcos. Use it as a self-assessment, not a sales tool.
Read essay →GenAI guardrails for regulated environments.
What an LLM-powered customer-facing feature needs before legal and risk will sign it off — written for the engineer being asked the question, not the consultant selling around it.
Read essay →More essays + RSS → all writing
Also on this site
10 — Get in touch
A half hour. Your problem, on the desk.
No pitch deck. No discovery dance. Bring the question you keep putting on the next agenda — thirty minutes on what would actually move it. If advisory is a fit, we’ll talk shape after. If it isn’t, you leave with a sharper view of the next two moves either way.