This is a public version of my CV. For the latest role-tailored résumé, get in touch
Senior Cloud Security Architect with 12+ years of engineering experience designing and operating secure, scalable cloud-native platforms for mission-critical systems. I combine security architecture, platform engineering, and software engineering to deliver practical, business-aligned security controls without slowing delivery.
My core expertise includes cloud network security architecture (VPC segmentation, private connectivity, zero-trust access patterns), cloud load balancing across all major models (L4/L7, internal/external, regional/global), WAF strategy and deep Cloud Armor policy tuning, and resilient data-layer design including multi-region Cloud Spanner setups. I design security controls that improve both protection and reliability, while keeping systems cost-efficient and operationally sustainable.
I can present architecture clearly to executives and engineering teams, produce high-quality architecture diagrams, and explain why each security/scalability/reliability decision matters. I lead threat modeling, architecture reviews, and implementation planning to increase security posture, scalability, and fault tolerance in production environments.
I am currently preparing for CISSP and have strong practical command across all CISSP domains, applying these principles directly in cloud architecture and delivery.
Google Cloud (5x Professional Certified): Professional Cloud Architect, Professional Cloud Network Engineer, Professional Security Operations Engineer, Professional Cloud DevOps Engineer, Professional Data Engineer.
Complementing my cloud background, I hold Cloud Security Alliance certifications (CCSK, CCZT). As a published Technical Author, I regularly share hands-on engineering insights on Medium and in professional publications, focused on cloud security, platform reliability, and modern architecture.
LinkedIn
GitHubT-Digital by Deutsche Telekom · Full-time
Sep 2024 - Present · 1 yr 11 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
A Chrome & Safari extension that keeps secrets out of AI prompts — it scans messages before they reach ChatGPT, Claude or Gemini using 110+ regex patterns plus Shannon-entropy analysis, then redacts or blocks API keys, tokens and PII. 100% local, zero telemetry.
Chrome Web StoreA quantitative model that gives leadership measurable visibility into key-person dependency, decision bottlenecks and human control-bypass risk — Bus Factor, Decision Concentration and Bypass Risk in one product. Published to PyPI with a citable DOI.
View on GitHub
Credential ID: 8a9ddfba001e4a55bf42667a6b62da9b
Skills: Cloud Solution Architecture, Security and Compliance, Cloud Networking, +6 more
Show credentialCredential ID: eb748cbd0c904f8389d3f755f3a32584
Skills: Cloud Networking, Hybrid Connectivity, Network Security, +6 more
Show credential
Completion certificate for the NIS-2 Deep Dive web training (28 May 2026) covering real attack scenarios (identity theft, compromised backups, user account breaches), NIS-2 requirements including risk management, reporting obligations, and supply chain security, governance structures, security roles, policies, incident response processes, vulnerability management and cyber resilience with IBM solutions, network and firewall security, SOC/SIEM/endpoint protection, and identity/access/communication protection.
ACE ID IBM-0032 (v1), 14 weeks (~200 hours), minimum passing score 70. ACE: 18 SH (6 x 3) across Web Development (HTML/CSS/JavaScript), Python for Data Science, Advanced Application Security, Intro to Cloud Computing, Intro to Python, and Microservices.
Engineer's Degree, Automation Management Systems
Engineer's Degree, Translation
Recognized by the KMK Central Office for Foreign Education (ZAB) as equivalent to a German Bachelor's degree
Time Management · Self-discipline · Communication and Collaboration
Bachelor's Degree, Law
Data Privacy and Security · Compliance and Regulations · Communication and Collaboration · Technical Analysis
8articles published onGoogle Cloud - Community · Dev Genius · DataDrivenInvestor
Dev GeniusApr 18, 2026
Why perimeter firewalls no longer anchor security architecture: the shift to identity-centric Zero Trust, microsegmentation, and workload-level controls in modern cloud networks.
Show publicationGoogle Cloud - Community
Designing data exfiltration defenses on GCP: VPC Service Controls perimeters, private Google access, and endpoint policies to keep sensitive data inside a trusted boundary.
6distinctionsselected by Google & the developer community
One of only a handful of engineers Google names Ambassador for Infrastructure — a recognition it reserves for the very top tier of its global Cloud community. Awarded for sustained, hands-on mastery of Google Cloud infrastructure, proven in the console rather than on paper.
Recognised by Google as a Security Champion — a distinction given to practitioners who consistently demonstrate deep, applied expertise in securing Google Cloud environments and raising the security bar across the community.
