Martin Opedal

Cloud Solution Architect at Microsoft. 15 years building Azure platforms for regulated Nordic enterprises. Patterns, code, and lessons here.

15 years in cloud · Azure Solutions Architect Expert · Public Speaker · Open source on GitHub

See selected work Email me

Profile

About

I've been working with Azure, Entra and M365 since 2011. Spent 15 years across Norwegian systems integrators and global consultancies before joining Microsoft.

More about how I got here →

Work

What I Work On

Azure Landing Zones

End-to-end ALZ Corp deployments with Terraform and Bicep. 135+ automated checklist validations via Azure Resource Graph. Security and compliance built in from day one, not bolted on. Capacity, quota, and multi-region planning for large estates.

See deployment patterns

Networking & Connectivity

Hub-and-spoke and Virtual WAN designs, routing intent, private endpoints and DNS, central firewall egress. Routing behavior validated up front so segmentation and traffic paths stay predictable.

See networking patterns

AI Platforms & Agents

Microsoft Foundry and Azure OpenAI behind private networking, API Management as the model gateway, MCP tooling, and SRE-style agents for operations. Built to run inside enterprise guardrails, not as isolated demos.

See AI patterns

AKS & Kubernetes

AKS Automatic clusters with ALZ Corp networking. BYO VNet, Application Gateway for Containers, NGINX, Istio with multiple ingress and egress patterns documented with full Terraform parity.

See AKS patterns

IaC Security

Terraform modules built to run inside ALZ Corp landing zones: no public IPs, central firewall egress, managed identity everywhere. PSRule and azqr integrated into CI pipelines.

See security patterns

GitHub Runners & CI/CD

GitHub-hosted and self-hosted runners with Azure VNet integration, Container Apps, and ALZ Corp firewall egress. GHE.com EU data residency patterns.

See runner patterns

Tools I Ship

Open Source

Terraform modules, ARG queries, and tooling that came out of real customer engagements.

Azure Governance & Assessment

PowerShell

azure-analyzer

Bundled assessment runner that unifies azqr, PSRule, AzGovViz, and 135 ALZ graph queries into one portable JSON + HTML report

PowerShell

alz-graph-queries

Automated ALZ checklist validation: 135 Azure Resource Graph queries that take coverage from 49 to 135 items

GitHub Runners & Private Networking

Terraform

avm-ptn-cicd-agents-and-runners

Official AVM pattern module for self-hosted ADO agents and GitHub runners with PAT and UAMI auth, no public IP egress

Terraform

ghec-vnet-runners-azure

GitHub-hosted runners with Azure VNet integration for GHE.com, EU data residency and private endpoint connectivity

Terraform

terraform-azurerm-github-runners-alz-corp

Self-hosted GitHub Actions runners that run inside ALZ Corp landing zones with central firewall egress

Terraform Platform Modules

Terraform

terraform-azapi-aks-automatic

AKS Automatic with ALZ Corp networking, BYO VNet, multiple ingress options (AGC/NGINX/Istio), managed identity everywhere

Terraform

avm-ptn-aiml-ai-foundry

Official AVM pattern module for Azure AI Foundry (formerly AI Studio) with network isolation and private endpoints

AKS Automation

PowerShell

aks-automatic-ingress-migration

Automated migration from NGINX Ingress to Application Gateway for Containers on AKS Automatic clusters

Other Tooling

Python

linkedin-auto-poster

RSS to LinkedIn pipeline, ingests tech feeds, scores relevance, drafts in your voice, publishes through a GitHub PR approval workflow

All repos

See everything on GitHub →

Terraform modules, ARG queries, MCP servers, and CI/CD tooling from real customer engagements

Talks & Training

Speaking

NIC 2026, October: "No More Spec-ulation: AI Agent Teams Building Production-Grade IaC". Spec-driven development with Speckit and Squad agent teams, with real Terraform and Bicep deployed to Azure. Session details

Agentic AI & DevOps Days, June 2026: "Where does code generation stop and InfraOps start?" Event page

Earlier talks include a Level 300, live-streamed session at Nordic Infrastructure Conference (NIC) on Terraform, GitHub Copilot, and IaC security (94% approval), plus Microsoft customer sessions on GHAS, GitHub and Azure DevOps, and Azure Arc and Azure Local.