Senior Cloud Platform & Security Engineer with 12+ years of experience designing, securing and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering — building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.
Currently working at T-Digital by Deutsche Telekom, designing and operating production GCP platforms with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.
Recognition
| Cloud-native platforms on GKE & GCP — secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments. | Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno. |
| Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise. | Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel. |
| Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript — including merged contributions to official Google Cloud open-source repositories. | Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI — with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost. |
| ☁️ Cloud & Infra | |
| ⚙️ DevOps & CI/CD | |
| 🔐 Security & Net | |
| 💻 Languages | |
| 🗄️ Data & AI | |
| 🌐 Web |
- The Cloud Bill You Did Not Estimate: FinOps Across AWS, GCP and Azure · Sep 16, 2026
- vLLM vs Ollama: Which Inference Server You Actually Need in 2026 · Sep 15, 2026
- Passkeys vs Passwords: How WebAuthn Actually Works, Who Builds What, and How to Roll It Out · Sep 14, 2026
- Scalability: The Bottleneck Is Almost Never the CPU · Sep 11, 2026
- Postgres vs MySQL in 2026: Performance, Syntax and the Real Differences · Sep 10, 2026
- npm Supply Chain Attack Mitigation: What Actually Works · Sep 9, 2026
- Iceberg vs Delta Lake in 2026: A Plain Guide to Picking One · Sep 8, 2026
- App Engine vs Cloud Run: Google Picked a Side. Your Bill Might Not Agree · Sep 7, 2026
- Claude Fable and Mythos Cost Twice as Much as Opus. For Agents, They Can Cost Less · Sep 4, 2026
- The AI Certification Market Split Into Four Bands. Only One Matches Your Job · Sep 3, 2026
