Security and infrastructure engineering, from hands-on to leadership.
I build and harden cloud platforms, delivery pipelines and security tooling for NZ teams. You can engage me as a contract engineer, for a fixed-scope review, or as your fractional CTO or CSO.
Senior hands on the work, and on the decisions.
Some teams need an extra senior engineer who can own security and platform work end to end. Others need someone to set direction without a full-time executive hire. I do both, working alongside engineering, security and founding teams to line up architecture, security and delivery with what the business actually needs next.
Architecture direction
Guardrails and decisions made early, so the team isn't rebuilding the same thing in six months.
Roadmap & prioritisation
A 30/60/90-day plan realistic enough for your team to actually run with, no re-planning required.
Security & risk reduction
Practical hardening that improves your posture without grinding delivery to a halt.
Hands-on delivery
Pipelines, hardening and platform work built properly, then documented and handed over so your team owns it.
Four areas, one consistent standard of delivery.
Security Engineering
Detection and response, identity and access, hardening and vulnerability management, built into the platform instead of bolted on afterwards.
DevSecOps & Delivery
CI/CD with security gates, infrastructure as code, automation and observability: the light-touch governance that keeps releases boring.
Platform & Cloud
Resilient AWS, Azure and hybrid environments, including production containers across Windows and Linux, built to hold up under real load.
Technical Leadership
Architecture direction, security strategy and realistic roadmaps, as a fractional CTO or CSO or a straight advisor.
Judgement that holds up under real deadlines.
"He cut through the debate fast and got us shipping again."
"Security-minded without ever slowing us down — practical and calm under pressure."
"Guided a safe modernisation and made the right calls when it mattered."
Contract Engineering
Hands-on security, DevSecOps or platform engineering on a day rate, typically for 3–12 months. Embedded in your team and shipping from week one.
Fractional CTO / CSO
Ongoing leadership under whichever title fits your org chart — roughly half a day to two days a week, for teams scaling, modernising, or lifting security maturity.
Architecture / Security Review
A target architecture plus a 90-day roadmap. High-signal, no drama.
Stabilisation Advisory
Short-term production recovery and risk reduction, with a plan so it doesn't happen again.
Tom Bosworth
I'm Tom Bosworth, an Auckland-based security and infrastructure engineer with 15+ years across infrastructure, systems and cybersecurity. In 2011 I founded Round IT, which provides everyday IT support for New Zealand small businesses. Most recently I've worked as an Enterprise Cybersecurity Engineer at New Zealand Trade and Enterprise, and as a DevSecOps Security Engineer and Senior Infrastructure Engineer at 9 Spokes.
My focus is secure architecture, sensible automation, and operational resilience — backed by hands-on depth in Linux, Active Directory, SIEM, and cloud/on-prem infrastructure, and CompTIA certifications across Linux and networking.
I take on hands-on contract engineering, fixed-scope architecture and security reviews, and, when a team needs it, ongoing leadership as a fractional CTO or CSO.
Need a senior security or platform engineer, or CTO/CSO-level judgement?
Send a short note on what you're building, your current stack, and whether you're after contract help, a review or ongoing leadership. I'll reply directly on fit, availability and next steps.