T-Digital by Deutsche Telekom · official title: Senior DevOps Engineer — Cloud Infrastructure
This is a public version of my CV. For the latest role-tailored résumé, get in touch
Senior Cloud Security Architect with 12+ years of engineering experience designing and operating secure, scalable cloud-native platforms for mission-critical systems. I combine security architecture, platform engineering, and software engineering to deliver practical, business-aligned security controls without slowing delivery.
My core expertise includes cloud network security architecture (VPC segmentation, private connectivity, zero-trust access patterns), cloud load balancing across all major models (L4/L7, internal/external, regional/global), WAF strategy and deep Cloud Armor policy tuning, and resilient data-layer design including multi-region Cloud Spanner setups. I design security controls that improve both protection and reliability, while keeping systems cost-efficient and operationally sustainable.
I can present architecture clearly to executives and engineering teams, produce high-quality architecture diagrams, and explain why each security/scalability/reliability decision matters. I lead threat modeling, architecture reviews, and implementation planning to increase security posture, scalability, and fault tolerance in production environments.
I am currently preparing for CISSP and have strong practical command across all CISSP domains, applying these principles directly in cloud architecture and delivery.
Google Cloud (5x Professional Certified): Professional Cloud Architect, Professional Cloud Network Engineer, Professional Security Operations Engineer, Professional Cloud DevOps Engineer, Professional Data Engineer.
Complementing my cloud background, I hold Cloud Security Alliance certifications (CCSK, CCZT). As a published Technical Author, I regularly share hands-on engineering insights on Medium and in professional publications, focused on cloud security, platform reliability, and modern architecture.
Email
LinkedIn
GitHubT-Digital by Deutsche Telekom · Full-time
Sep 2024 - Present · 2 yrs 2 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
T-Digital by Deutsche Telekom · Full-time
Jun 2022 - Sep 2024 · 2 yrs 4 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
Deutsche Telekom IT RUS · Full-time
Sep 2021 - Jun 2022 · 10 mos
Moscow City, Russia · On-site
Wildberries · Full-time
Jan 2019 - Aug 2021 · 2 yrs 8 mos
Moscow City, Russia · On-site
Mostransavto · Full-time
Jul 2017 - Jan 2019 · 1 yr 7 mos
Podolsky District, Moscow, Russia · On-site
Freelancer · Freelance
Jan 2015 - Jul 2017 · 2 yrs 7 mos
· Remote
A Chrome & Safari extension that keeps secrets out of AI prompts — it scans messages before they reach ChatGPT, Claude or Gemini using 110+ regex patterns plus Shannon-entropy analysis, then redacts or blocks API keys, tokens and PII. 100% local, zero telemetry.
Chrome Web StoreA quantitative model that gives leadership measurable visibility into key-person dependency, decision bottlenecks and human control-bypass risk — Bus Factor, Decision Concentration and Bypass Risk in one product. Published to PyPI with a citable DOI.
View on GitHubA Python service running serverless on Cloud Run that continuously reconciles TLS certificate state — detecting drift and upcoming expiry across environments and driving renewals automatically, so nothing silently lapses in production.
Private production serviceA full encrypted-networking toolkit — AES-256-GCM with a post-quantum hybrid key exchange (ML-KEM-768), TUN VPN, TLS 1.3 camouflage and anti-censorship transport. Shipped to Docker Hub, AUR and GHCR.
View on GitHub
Credential ID: 8a9ddfba001e4a55bf42667a6b62da9b
Skills: Cloud Solution Architecture, Security and Compliance, Cloud Networking, +6 more
Show credentialCredential ID: eb748cbd0c904f8389d3f755f3a32584
Skills: Cloud Networking, Hybrid Connectivity, Network Security, +6 more
Show credentialCredential ID: 9dbfab8220aa43c18da297038a95d723
Skills: CI/CD, SRE, Infra Automation, +6 more
Show credentialCredential ID: c658b9bd545749a6b45f54c9982f200d
Skills: Security Operations, Incident Response, Threat Detection, SIEM, +6 more
Show credentialCredential ID: 4f3e7970bbdb4a61805a8209cfe215ed
Skills: Data Engineering, Big Data & ML Pipelines, Data Governance & Security, +6 more
Show credentialSkills: Machine Learning Model Training, AutoML Workflow, Custom Model Deployment, Vertex AI SDK Usage, Prompt Engineering
Show credentialSkills: Semantic Search, Query Understanding, Information Retrieval Optimization, Relevance Scoring, Domain-Specific Search Tuning
Show credentialSkills: Conversational AI Design, Omnichannel Engagement, Real-time Agent Assistance, Generative AI Integration, Conversational Insights Analytics
Show credential
Skills: Network Security, Firewall Administration, Application Control, Intrusion Detection & Prevention, VPN Configuration, SSL Inspection, Web Filtering, Antivirus & Malware Protection
Show credentialSkills: Network Security, Endpoint Security, Cloud Security, Threat Detection & Management, Data Privacy, Cryptography, Secure SD-WAN
Show credentialCredential ID: BKin5QXywl
Skills: Network Security, Core Security Solutions, +3 more
Credential ID: CEZAJh6sCYu9XhTKmqetBZX
Skills: Cloud Security, Cybersecurity, Data Privacy and Security, Data Security and Compliance, Identity and Access Management (IAM), Zero Trust Architecture
Show credentialCredential ID: UupmmAQt69pqBF2ztSHJiS2X
Skills: Cybersecurity, Cloud Security, Identity and Access Management (IAM)
Show credentialSkills: Agent Development Kit (ADK), AI Agents, Gemini Enterprise, Memory Management
Show credentialSkills: Gemini Enterprise Deployment, AI Agents, Gemini Enterprise, Software Development
Show credential
Credential ID: 32840830-3068
Skills: Agile Methodology, DevOps Practices, +5 more
Show credentialCredential ID: 62067144-0539
Skills: Agile Methodology, SAFe Framework, +3 more
Show credential
Skills: Cloud Cost Optimization, Rightsizing, Tagging Strategy, +3 more
Show credential
Credential ID: NH40CFZFL3EQ1RG5
Skills: Networking Fundamentals, Routing and Switching, +3 more skills
Show credential
Credential ID: D73996EEB4004D47
Skills: Azure Data Services, Database Fundamentals, Big Data
Show credential
Completion certificate for the NIS-2 Deep Dive web training (28 May 2026) covering real attack scenarios (identity theft, compromised backups, user account breaches), NIS-2 requirements including risk management, reporting obligations, and supply chain security, governance structures, security roles, policies, incident response processes, vulnerability management and cyber resilience with IBM solutions, network and firewall security, SOC/SIEM/endpoint protection, and identity/access/communication protection.
ACE ID IBM-0032 (v1), 14 weeks (~200 hours), minimum passing score 70. ACE: 18 SH (6 x 3) across Web Development (HTML/CSS/JavaScript), Python for Data Science, Advanced Application Security, Intro to Cloud Computing, Intro to Python, and Microservices.
Comprehensive course covering the full spectrum of working with Anthropic models through Google Cloud's Vertex AI: authentication, model selection, prompt engineering, streaming, tool use, and production integration patterns for Claude on GCP.
Show credentialComprehensive course covering the full spectrum of working with Anthropic models using the Claude API: prompt design, system prompts, multi-turn conversations, tool use, streaming, vision, embeddings, and production best practices.
Show credential7-course professional certificate demonstrating AI fluency across brainstorming, research, communication, content creation, data analysis, and coding. Includes a portfolio of 20+ AI artifacts and a vibe-coded custom AI solution. Covers prompt engineering, output evaluation, and responsible AI practices for real workplace challenges.
Show credential
Digital badge and certificate issued by Cloud Assess Academy for completing the Advanced GDPR course, providing advanced understanding of GDPR compliance, data protection principles, and organizational obligations.
Show credential
Certificate of Completion for successfully completing the ISO/IEC 27701 Data Protection and Privacy Information Management course, covering the extension of ISO/IEC 27001 for privacy management, GDPR-related practices, and implementation of a Privacy Information Management System (PIMS).
Awareness eLearning Certificate of Completion covering ISO/IEC 23894:2023 Guidance on AI Risk Management: principles, context, identification, assessment, and mitigation of risks in AI systems for trustworthy and responsible AI.
Awareness eLearning Certificate of Completion covering ISO/IEC 42001:2023 Artificial Intelligence Management Systems: key concepts, structure, controls, governance, and jurisdiction-specific considerations.
Show credential
Intro course and exam covering ISO/IEC 27001:2022 fundamentals: ISMS scope & context, Annex SL structure, Statement of Applicability (SoA), mandatory controls, audit program basics and step-by-step implementation guidance.
Show credential
Intermediate badge from Cisco Networking Academy focused on ethical hacking. Covers vulnerability assessment, penetration testing, exploitation techniques, IoT security, social engineering, and reporting. Includes up to 34 hands-on activities with Kali Linux, WebSploit, and other tools.
Show credential
Apply OpenSSF Scorecard to improve project security posture and SDLC controls.
Show credentialZero Trust fundamentals with SPIFFE/SPIRE; identity-based authN/Z, microsegmentation and policy design.
Show credentialAPI description with OpenAPI: design fundamentals, versioning, validation and linting, documentation and governance patterns that enable consistent, secure and evolvable APIs.
Show credentialEvent-driven autoscaling with KEDA: triggers, ScaledObjects and interplay with HPA; scaling from zero for queues, streams and cloud services; patterns for resilient, cost-efficient workloads.
Show credentialCilium as an eBPF-powered CNI for Kubernetes: datapath basics, NetworkPolicies, L7 visibility, Hubble observability and advanced features (ingress/load-balancing) for secure and performant clusters.
Show credentialCore concepts of OpenTelemetry for metrics, traces and logs: SDKs and auto-instrumentation, context propagation, Collector pipelines, processors and exporters — with practical integration into modern backends.
Show credentialHands-on introduction to SBOM standards (SPDX/CycloneDX), artifact signing and attestations (Sigstore/Cosign), and CI/CD automation patterns to secure the software supply chain.
Show credentialOverview of EU CRA obligations for manufacturers and suppliers: secure-by-design, vulnerability handling and reporting, SBOM requirements, conformity assessment, and lifecycle compliance practices for connected products.
Show credentialIntroductory badge focused on the OWASP Top 10. Covers key web application security concepts and common vulnerabilities, risk assessment and mitigation, secure coding practices, and the confidentiality–integrity–availability (CIA) triad; includes guidance on applying appropriate security measures.
Show credentialCompliance- and risk-focused training for conversational AI. Covers the EU AI Act, NIST AI RMF, and ISO/IEC 42001:2023 requirements; methods to identify, analyze, and mitigate ethical, technical, and regulatory risks; and practices for trustworthy, responsible AI implementations.
Show credentialFoundations of GDPR and privacy program governance: data mapping & ROPA, DPIA, data subject request workflows, incident response and policy design. Includes shareable certificates.
Professional, non-credit certificate covering cybersecurity fundamentals: security principles, access control, network security, incident response, business continuity and disaster recovery, and security operations. Includes hands-on labs and a capstone project. Provides foundational preparation aligned with the ISC2 Certified in Cybersecurity (CC) domain.
Introduction to eBPF and Calico’s pluggable eBPF data plane: benefits, recommended scenarios, and live labs across multiple deployment patterns.
Show credentialPractical course on designing and deploying microservices and serverless applications. Covers service decomposition, API design, event-driven communication, containers and Functions-as-a-Service, API gateway and messaging basics, CI/CD and observability. Includes hands-on labs that build a small microservice with serverless triggers and deploy it to the cloud.
Foundational training in observability with Datadog: metrics, logs, traces (APM), dashboards and monitors, SLI/SLOs, alerting and integrations. Introduces tagging strategy, service maps, synthetic tests and basic Real User Monitoring (RUM). Guided exercises instrument an app and build actionable dashboards and alerts.
Engineer's Degree, Automation Management Systems
Additional qualification: Translator in the Field of Professional Communication (English) — awarded alongside the Engineer's Degree
Engineer's Degree recognized by the KMK Central Office for Foreign Education (ZAB) as equivalent to a German Bachelor's degree
Time Management · Self-discipline · Communication and Collaboration
Bachelor's Degree, Law
Data Privacy and Security · Compliance and Regulations · Communication and Collaboration · Technical Analysis
10publications onGoogle Cloud - Community · W3C · GitHub · IETF Datatracker · Dev Genius · DataDrivenInvestor
W3C · GitHubOct 16, 2026
Contributor to WebMCP (document.modelContext), the browser API that lets AI agents call tools a web page registers. I take part in the W3C Web Machine Learning Community Group as an individual, in a personal capacity, contributing to the specification and to the discussion on measuring agent tool use in production. Community Group work, not a W3C Standard.
Show publicationIETF Datatracker
Co-author of an individual Internet-Draft (work in progress, not an IETF standard), done independently in a personal capacity. Tested the Linux kernel implementation in my own VM lab under functional and adversarial load, on kernels built with KASAN, KCSAN and lockdep, and reported defects with minimal fixes. The findings became correctness requirements in the draft: Local Address uniqueness within a broadcast domain, a duplicate-address alarm and transit source-RN preservation.
Dev Genius
Why perimeter firewalls no longer anchor security architecture: the shift to identity-centric Zero Trust, microsegmentation, and workload-level controls in modern cloud networks.
Google Cloud - Community
Designing data exfiltration defenses on GCP: VPC Service Controls perimeters, private Google access, and endpoint policies to keep sensitive data inside a trusted boundary.
Google Cloud - Community
Using Security Command Center as the central CSPM layer: surfacing misconfigurations, attack paths and AI/cloud risks, and turning findings into prioritized remediation before incidents occur.
Google Cloud - Community
Deep dive into Principal Access Boundaries: how this IAM control caps what an identity can ever access, hardening against privilege escalation and lateral movement across a GCP organization.
Google Cloud - Community
How Workload Identity Federation removes static service account keys from CI/CD and workloads, using short-lived federated credentials to close one of the most common cloud attack vectors.
Google Cloud - Community
Seven battle-tested GCP IAM patterns: removing the Editor role, eliminating long-lived service account keys, enforcing least privilege, and replacing standing access with just-in-time privileges.
Google Cloud - Community
Mapping Cloud Armor WAF capabilities to the OWASP Top 10: preconfigured rules, rate limiting, Adaptive Protection, and tuning strategies to mitigate the most common web application risks.
DataDrivenInvestor
Why mutual TLS is baseline hygiene for service-to-service trust: identity-based encryption, certificate rotation, and a pragmatic setup that fits Zero Trust architectures.
4distinctionsselected by Google & the developer community
One of 41 practitioners worldwide selected by Google Cloud as Ambassador for Infrastructure — listed in the official Google Cloud Ambassadors directory. Awarded for sustained, hands-on mastery of Google Cloud infrastructure and community impact, proven in production rather than on paper.
Recognised by Google as a Security Champion — a distinction given to practitioners who consistently demonstrate deep, applied expertise in securing Google Cloud environments and raising the security bar across the community.
Won 1st place at the 3rd RIL AI Hackathon, hosted by the Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Our team built a production-ready data uploader tailored for RAG-based chatbots. It supports PDF document ingestion, offers multiple adaptive chunking strategies, works autonomously with uploaded corpora, and automatically selects the best strategy using LLM-driven evaluation. We also instrumented RAGAS for response-quality measurement. The solution improves efficiency, reduces redundancies, and raises the overall quality of chatbot answers.
Won 1st place at the 2nd RIL AI Hackathon, hosted by Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Developed an AI solution that analyzes user stories and test cases, providing insights to improve quality and efficiency in software development.
