Voller WorksStart a project

Independent Engineering & Security practice

Cloud infrastructure and systems engineering, from architecture to audit.

Voller Works designs, hardens, and runs production infrastructure on AWS and GCP. Carrying teams from zero to compliance. One accountable engineer, end to end.

carl@voller.worksExplore services

ISO 27001

led from gap analysis to audit, from scratch

2 clouds

production depth across AWS and GCP

18 services

operated at startup scale as sole engineer

450K users

lifetime, on a platform founded and run solo

Services

Three ways to engage.

01

Cloud Security & Compliance

Hardening AWS and GCP estates, and carrying organisations from zero to certification. I've led an ISO/IEC 27001 implementation from scratch. From gap analysis, ISMS design, control implementation, and audit preparation, alongside the zero-trust identity platform behind it. Misconfigurations are treated as engineering failures and fixed at the architecture level, not papered over.

  • IAM & org policy
  • Zero-trust identity
  • ISO/IEC 27001 ISMS
  • PII architecture
  • Audit preparation

02

Infrastructure Consulting

Architecture and platform engineering for teams that need production-grade foundations: internal platforms, CI/CD, Kubernetes, and hard workload isolation. From air-gapped military DevSecOps environments to Firecracker microVM isolation per customer connection, the design starts from the constraint you actually have. Then, I build the tooling to keep it running.

  • Platform architecture
  • CI/CD pipelines
  • Kubernetes
  • Firecracker microVMs
  • Cost optimisation

03

Web Development & Hosting

Contract product engineering with managed hosting to match. Full-stack builds in TypeScript and React, backed by Go or Rust services where performance matters, and deployed on infrastructure I run and stand behind, with secure defaults from the first commit. One engineer, accountable for the whole stack.

  • Next.js & React
  • Go & Rust services
  • Managed hosting
  • Ongoing operations

The practice

One engineer, end to end.

Voller Works is run by Carl Voller, a platforms infrastructure and security engineer based in Singapore. I build and secure the foundations various engineering teams stand on. I’ve even done it in unforgiving places: a ten-person B2B AI startup as its only infrastructure and security engineer, the Republic of Singapore Air Force, and Singapore’s Government Technology Agency.

That background shapes the work. Systems ship with strong secure defaults and minimal trust boundaries. Compliance is treated as an engineering artefact, not paperwork. And everything I hand over is something I’d be willing to operate myself - because usually, I do.

  1. Voller Works

    Independent practice

    Infrastructure consulting, systems engineering, security compliance and contract development & hosting.

  2. MetaLearner Pte Ltd (B2B AI Startup)

    Sole infrastructure & security engineer

    ISO 27001 from scratch, a zero-trust identity platform, Golang PII services, and a Firecracker-isolated FlightSQL data gateway. Over 18 production services, one engineer.

  3. Republic of Singapore Air Force

    DevSecOps engineer

    Translated research POCs into operational AWS services across the military. Involved CI pipelines, SageMaker ML pipelines, and air-gapped DevSecOps environments.

  4. GovTech Singapore

    Cyber security engineer

    Built a Kubernetes security training platform used across Singapore Government agencies, with custom microVM engine for virtualised environments provisioned in under five seconds.

  5. CodeCollab

    Founder

    Real-time collaborative coding platform grown to 450K lifetime users, with a microVM compilation engine supporting 26 languages. Led infrastructure, security, and web platform development.

Selected work

Proof, in public.

Open-source systems work, held to the same standard as client engagements.

excel-rs

SIMD-accelerated XLSX engine in Rust. Its up to 45x faster than Pandas exports, in production use.

rust · pyo3 · simd

kanshi

Cross-platform filesystem events library over FSEvents, inotify and fanotify, with Node bindings.

rust · n-api

snowflakedb-rs

Async-first Snowflake driver for Rust, built to power an ADBC adapter.

rust · async

secure-enclave-rs

Rust & Python bindings to Apple's Secure Enclave for hardware-backed client assertions.

rust · swift

cuml_rfext

GPU-accelerated recursive feature elimination that's over 100x faster than CPU scikit-learn.

cuda · python

More on GitHub

Contributions to various popular Rust crates, experiments with newer or nicher technologies, and everything else in public.

github.com/carlvoller

Contact

Precision work for teams who can’t afford surprises.

Most engagements begin with a short call to scope the problem. This could be an upcoming audit, an architecture decision, or a product that needs building. If it’s outside my depth, I’ll say so and point you to someone better.

carl@voller.works