Senior Cloud Platform & Security Engineer with 12+ years of experience designing, securing and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering — building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.
Currently designing and operating production GCP platforms in an enterprise environment, with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.
Recognition
| Cloud-native platforms on GKE & GCP — secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments. | Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno. |
| Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise. | Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel. |
| Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript — including merged contributions to official Google Cloud open-source repositories. | Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI — with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost. |
| ☁️ Cloud & Infra | |
| ⚙️ DevOps & CI/CD | |
| 🔐 Security & Net | |
| 💻 Languages | |
| 🗄️ Data & AI | |
| 🌐 Web |
- Muse Spark Open vs GLM 5.3 vs Kimi K3: Meta's Open Model Isn't the Smartest. It's the Cheapest to Run · Oct 16, 2026
- NIS2 for Cloud Teams, Part 1: Requirements Checklist for AWS, Azure and Google Cloud · Oct 15, 2026
- OpenTelemetry Explained: Traces, Metrics, Logs and the Collector · Oct 14, 2026
- Webhooks Explained: How They Work, How to Secure Them, How to Scale Them · Oct 13, 2026
- Mistral Large 4 vs Kolibri vs Beam: Three Open-Weight LLMs in Four Days — Which One to Self-Host · Oct 12, 2026
- Google reCAPTCHA Explained: v2 vs v3 vs Enterprise, Pricing, Scores and Every Key Type · Oct 9, 2026
- Claude Haiku 5.5 vs Sonnet 5.5 vs Opus 5.5: 20× Cheaper Than Sonnet — and a 100K-Token Price Cliff · Oct 8, 2026
- shadcn/ui vs MUI vs Mantine: I Built the Same Screen Five Ways and Measured It · Oct 7, 2026
- GPT-6.1 Sol vs Claude Opus 5.5: Half the Price, a Different Tier — and Where the Gap Disappears · Oct 6, 2026
- Cilium vs Calico: Which Kubernetes CNI Should Run Your Production Cluster? · Oct 5, 2026
