Senior Cloud Platform & Security Engineer with 12+ years of experience designing, securing and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering — building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.
Currently working at T-Digital by Deutsche Telekom, designing and operating production GCP platforms with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.
Recognition
| Cloud-native platforms on GKE & GCP — secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments. | Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno. |
| Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise. | Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel. |
| Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript — including merged contributions to official Google Cloud open-source repositories. | Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI — with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost. |
| ☁️ Cloud & Infra | |
| ⚙️ DevOps & CI/CD | |
| 🔐 Security & Net | |
| 💻 Languages | |
| 🗄️ Data & AI | |
| 🌐 Web |
- Do You Need a Graph Database? What BigQuery Graph Going GA Actually Changes · Sep 2, 2026
- Which Embedding Model Should You Use? API vs Self-Hosted in 2026 · Sep 1, 2026
- The Lethal Trifecta: A Practical Test for Prompt Injection Risk · Aug 31, 2026
- Do You Need a Vector Database? Postgres vs Dedicated in 2026 · Aug 28, 2026
- Managed Kubernetes: The Word Is Doing a Lot of Work · Aug 27, 2026
- Kubernetes Autoscaling: Three Controllers That Do Not Talk to Each Other · Aug 26, 2026
- What Actually Belongs in a Landing Zone — and What Gets Pushed Into One for No Reason · Aug 25, 2026
- Wazuh vs Microsoft Sentinel vs Google SecOps: The SIEM You Pick Is the Bill You Get · Aug 24, 2026
- Cloudflare R2 vs S3: What Egress Actually Costs You (and Where R2 Bills Instead) · Aug 21, 2026
- k3s vs k0s vs MicroK8s vs RKE2: Which Kubernetes to Install When You Don't Need the Full One · Aug 20, 2026
