Senior Platform Security Engineer with 12+ years of experience designing, securing, and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering β building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.
Currently working at T-Digital by Deutsche Telekom, designing and operating production GCP platforms with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.
Recognition
Ambassador GCP Product Expert Security Champion CCSK CCZT AWS
Cloud-native platforms on GKE & GCP β secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments.
Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno.
Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise.
Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel.
Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript β including merged contributions to official Google Cloud open-source repositories.
Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI β with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost.
- Build a Tiny Linux Container without Docker in 2026 Β· Jul 17, 2026
- I Became a Google Cloud Ambassador β Infrastructure: Here Is What It Actually Takes in 2026 Β· Jun 16, 2026
- Kafka vs Pub/Sub in 2026: When Managed Messaging Saves a Fintech Launch Β· Jun 15, 2026
- LinkedIn Scraper vs. Dataset Marketplace: A Data Engineer's Honest Review (2026) Β· Jun 1, 2026
- Python Web Scraping Without Proxy Management: Bright Data Web Unlocker API (2026) Β· May 29, 2026
- Stop Storing JWTs in LocalStorage: Cookie Auth for SPAs in 2026 Β· May 26, 2026
- Python Error Handling in 2026: Try-Except or If-Checks? Β· May 24, 2026
- Secure GitLab CI/CD in 2026: A Practical Hardening Playbook Β· May 9, 2026
- How Many Threads Does Go Really Use? A 2026 Runtime Investigation Β· May 2, 2026
- 10 Node.js NPM Packages Worth Mastering in 2026 Β· May 2, 2026