Senior Cloud Platform & Security Engineer with 12+ years of experience designing, securing and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering — building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.
Currently designing and operating production GCP platforms in an enterprise environment, with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.
Recognition
| Cloud-native platforms on GKE & GCP — secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments. | Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno. |
| Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise. | Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel. |
| Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript — including merged contributions to official Google Cloud open-source repositories. | Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI — with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost. |
| ☁️ Cloud & Infra | |
| ⚙️ DevOps & CI/CD | |
| 🔐 Security & Net | |
| 💻 Languages | |
| 🗄️ Data & AI | |
| 🌐 Web |
- Nouswise vs NotebookLM: When Research Becomes a Workflow · Nov 6, 2026
- Local LLMs for Cybersecurity: Choose the Brain, Limit Its Reach · Nov 5, 2026
- mTLS vs TLS Explained: Two Identities, One Connection · Nov 4, 2026
- DeepSeek V4.1 Flash Explained: The Memory Trick Behind Cheap Agents · Nov 3, 2026
- Navicat 18 Review: Is It Worth It for PostgreSQL? Tested on 10M Rows · Nov 2, 2026
- Gemini 4 Carbon Review: Benchmarks, Price, Access and Who It Is Actually For · Oct 30, 2026
- Ghidra MCP vs REA: How AI Agents Reverse Engineer Software, and What the Setup Changes on Your Machine · Oct 29, 2026
- Tailscale vs WireGuard: What the Control Plane Buys You, and What the SSH Flaws Cost · Oct 28, 2026
- GPT-6.1 Terra vs Claude Sonnet 5.5 vs GPT-6.1 Sol: Half the Price per Token Is Not Half the Bill · Oct 27, 2026
- JWT Explained: What a JSON Web Token Is and How It Breaks · Oct 26, 2026
