Petar Ivanov.
Cloud engineer. I build things on Azure.
I work with Azure Arc, Azure Automation, and infrastructure as code — mostly PowerShell, Bicep, and the occasional Terraform. I share what I build here.
Hey, I'm
About Me
I’m a Cloud & Automation Engineer based in the UK, helping enterprise teams tame hybrid infrastructure on Azure. Day to day that means Azure Arc at scale, patch lifecycle automation, and building governance frameworks that actually stick.
Outside of work I tinker with side projects, write about what I learn, and occasionally break things in dev so I don’t break them in prod.
What I work with- Azure (Arc, Automation, Update Manager, Policy, Machine Configuration)
- PowerShell & DSC
- Terraform
- Bicep / ARM Templates
- Python
- Git & CI/CD (GitHub Actions)
- Linux & Windows Server
- Docker
Projects
PowerShell
DSC
Docker
Azure Policy
Azure Machine Configuration
Authoring environment for custom Azure Machine Configuration (DSC) policies. Covers Linux, Windows, and a pre-built Docker container with PowerShell 7, OMI, and all required modules. Includes example configs, build/test/publish scripts, and CI/CD workflows.
PowerShell
Azure Arc
Automation
Azure Arc Onboarding Toolkit
PowerShell scripts for bulk onboarding servers to Azure Arc. Handles proxy environments, custom tagging, error logging, and pre-flight connectivity checks.
Bicep
KQL
Azure Update Manager
Update Manager Automation
Bicep templates, KQL queries, and runbooks for Azure Update Manager. Periodic assessment via Azure Policy, maintenance window scheduling, and Resource Graph compliance reporting.
Azure Policy
Bicep
Governance
Azure Policy Governance
Custom Azure Policy definitions and initiatives for tagging, naming, VM SKU restrictions, and diagnostics. Includes Bicep assignment template.
Bicep
Azure Landing Zones
CAF
Networking
Policy
Azure Landing Zone Starter
Lightweight CAF-aligned landing zone in Bicep. Management group hierarchy, hub-spoke networking with firewall and bastion subnets, and a baseline policy initiative for tagging, public IP denial, and storage encryption auditing.
Terraform
GitHub Actions
Azure Automation
Azure Automation Scenarios
Terraform lab with hybrid workers (Windows, Linux, RHEL), runbooks in PowerShell 5.1/7.4 and Python 3.10, and optional Graph API automation. One-click deploy from Cloud Shell.
Terraform
Azure Automation
Managed Identity
Hybrid Worker Lab
Focused Terraform config for deploying an Azure Automation Hybrid Worker with managed identity auth. Includes the workaround for the missing automationHybridServiceUrl in Terraform.
Get in Touch
I’m always up for a conversation about Azure, automation, or infrastructure as code — whether it’s a question, a collaboration, or just swapping war stories. Drop me a message.