T-Digital by Deutsche Telekom · official title: Senior DevOps Engineer — Cloud Infrastructure
This is a public version of my CV. For the latest role-tailored résumé, get in touch
Senior Platform/Cloud Engineer (DevOps/SRE) and Senior Software Engineer with 12+ years of experience designing and operating secure, scalable cloud-native platforms and distributed systems. I bridge software engineering (Python, Go, JavaScript/TypeScript, React, Next.js) with platform engineering and infrastructure automation (Kubernetes, Terraform, CI/CD). My focus is security-first architecture (IAM), performance, reliability and observability (SLI/SLO), and developer productivity.
I have designed and operated multi-region and multi-cloud environments (GCP, AWS, Azure), built reusable delivery foundations (IaC modules and standardized deployment patterns), and implemented disaster recovery and observability stacks (Prometheus, Grafana, ELK) to improve operational stability and troubleshooting efficiency. I document architecture decisions (ADRs, design docs) and create runbooks to reduce key-person risk and support sustainable engineering velocity.
I value clean architecture, strong engineering culture, and pragmatic enablement practices.
Google Cloud (5× Professional Certified): Professional Cloud Architect, Professional Cloud Network Engineer, Professional Security Operations Engineer, Professional Cloud DevOps Engineer, Professional Data Engineer.
Complementing my cloud background, I hold Cloud Security Alliance certifications (CCSK, CCZT), reinforcing my expertise in secure cloud architecture and modern security practices. As a published Technical Author, I regularly share hands-on engineering insights on Medium and in professional publications, focusing on real-world DevOps, cloud security, software engineering, and architecture.
Email
LinkedIn
GitHubT-Digital by Deutsche Telekom · Full-time
Sep 2024 - Present · 2 yrs 2 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
T-Digital by Deutsche Telekom · Full-time
Jun 2022 - Sep 2024 · 2 yrs 4 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
Deutsche Telekom IT RUS · Full-time
Sep 2021 - Jun 2022 · 10 mos
Moscow City, Russia · On-site
Wildberries · Full-time
Jan 2019 - Aug 2021 · 2 yrs 8 mos
Moscow City, Russia · On-site
Mostransavto · Full-time
Jul 2017 - Jan 2019 · 1 yr 7 mos
Podolsky District, Moscow, Russia · On-site
Freelancer · Freelance
Jan 2015 - Jul 2017 · 2 yrs 7 mos
· Remote
A Chrome & Safari extension that keeps secrets out of AI prompts — it scans messages before they reach ChatGPT, Claude or Gemini using 110+ regex patterns plus Shannon-entropy analysis, then redacts or blocks API keys, tokens and PII. 100% local, zero telemetry.
Chrome Web StoreA VS Code extension that kills "works on my machine" — one-click snapshot of runtimes, Docker, ports, env vars and git state, diffed against a teammate's and turned into a Markdown fix report with ready-to-run commands. 100% local, no telemetry.
View on MarketplaceA Python service running serverless on Cloud Run that continuously reconciles TLS certificate state — detecting drift and upcoming expiry across environments and driving renewals automatically, so nothing silently lapses in production.
Private production serviceA full encrypted-networking toolkit — AES-256-GCM with a post-quantum hybrid key exchange (ML-KEM-768), TUN VPN, TLS 1.3 camouflage and anti-censorship transport. Shipped to Docker Hub, AUR and GHCR.
View on GitHub
Credential ID: 8a9ddfba001e4a55bf42667a6b62da9b
Skills: Cloud Solution Architecture, Security and Compliance, Cloud Networking, +6 more
Show credentialCredential ID: eb748cbd0c904f8389d3f755f3a32584
Skills: Cloud Networking, Hybrid Connectivity, Network Security, +6 more
Show credentialCredential ID: 9dbfab8220aa43c18da297038a95d723
Skills: CI/CD, SRE, Infra Automation, +6 more
Show credentialCredential ID: c658b9bd545749a6b45f54c9982f200d
Skills: Security Operations, Incident Response, Threat Detection, SIEM, +6 more
Show credentialCredential ID: 4f3e7970bbdb4a61805a8209cfe215ed
Skills: Data Engineering, Big Data & ML Pipelines, Data Governance & Security, +6 more
Show credentialSkills: Machine Learning Model Training, AutoML Workflow, Custom Model Deployment, Vertex AI SDK Usage, Prompt Engineering
Show credentialSkills: Semantic Search, Query Understanding, Information Retrieval Optimization, Relevance Scoring, Domain-Specific Search Tuning
Show credentialSkills: Conversational AI Design, Omnichannel Engagement, Real-time Agent Assistance, Generative AI Integration, Conversational Insights Analytics
Show credential
Skills: Network Security, Firewall Administration, Application Control, Intrusion Detection & Prevention, VPN Configuration, SSL Inspection, Web Filtering, Antivirus & Malware Protection
Show credentialSkills: Network Security, Endpoint Security, Cloud Security, Threat Detection & Management, Data Privacy, Cryptography, Secure SD-WAN
Show credentialCredential ID: BKin5QXywl
Skills: Network Security, Core Security Solutions, +3 more
Credential ID: CEZAJh6sCYu9XhTKmqetBZX
Skills: Cloud Security, Cybersecurity, Data Privacy and Security, Data Security and Compliance, Identity and Access Management (IAM), Zero Trust Architecture
Show credentialCredential ID: UupmmAQt69pqBF2ztSHJiS2X
Skills: Cybersecurity, Cloud Security, Identity and Access Management (IAM)
Show credentialSkills: Agent Development Kit (ADK), AI Agents, Gemini Enterprise, Memory Management
Show credentialSkills: Gemini Enterprise Deployment, AI Agents, Gemini Enterprise, Software Development
Show credential
Credential ID: 32840830-3068
Skills: Agile Methodology, DevOps Practices, +5 more
Show credentialCredential ID: 62067144-0539
Skills: Agile Methodology, SAFe Framework, +3 more
Show credential
Skills: Cloud Cost Optimization, Rightsizing, Tagging Strategy, +3 more
Show credential
Credential ID: NH40CFZFL3EQ1RG5
Skills: Networking Fundamentals, Routing and Switching, +3 more skills
Show credential
Credential ID: D73996EEB4004D47
Skills: Azure Data Services, Database Fundamentals, Big Data
Show credential
Completion certificate for the NIS-2 Deep Dive web training (28 May 2026) covering real attack scenarios (identity theft, compromised backups, user account breaches), NIS-2 requirements including risk management, reporting obligations, and supply chain security, governance structures, security roles, policies, incident response processes, vulnerability management and cyber resilience with IBM solutions, network and firewall security, SOC/SIEM/endpoint protection, and identity/access/communication protection.
ACE ID IBM-0032 (v1), 14 weeks (~200 hours), minimum passing score 70. ACE: 18 SH (6 x 3) across Web Development (HTML/CSS/JavaScript), Python for Data Science, Advanced Application Security, Intro to Cloud Computing, Intro to Python, and Microservices.
Comprehensive course covering the full spectrum of working with Anthropic models through Google Cloud's Vertex AI: authentication, model selection, prompt engineering, streaming, tool use, and production integration patterns for Claude on GCP.
Show credentialComprehensive course covering the full spectrum of working with Anthropic models using the Claude API: prompt design, system prompts, multi-turn conversations, tool use, streaming, vision, embeddings, and production best practices.
Show credential7-course professional certificate demonstrating AI fluency across brainstorming, research, communication, content creation, data analysis, and coding. Includes a portfolio of 20+ AI artifacts and a vibe-coded custom AI solution. Covers prompt engineering, output evaluation, and responsible AI practices for real workplace challenges.
Show credential
Digital badge and certificate issued by Cloud Assess Academy for completing the Advanced GDPR course, providing advanced understanding of GDPR compliance, data protection principles, and organizational obligations.
Show credential
Certificate of Completion for successfully completing the ISO/IEC 27701 Data Protection and Privacy Information Management course, covering the extension of ISO/IEC 27001 for privacy management, GDPR-related practices, and implementation of a Privacy Information Management System (PIMS).
Awareness eLearning Certificate of Completion covering ISO/IEC 23894:2023 Guidance on AI Risk Management: principles, context, identification, assessment, and mitigation of risks in AI systems for trustworthy and responsible AI.
Awareness eLearning Certificate of Completion covering ISO/IEC 42001:2023 Artificial Intelligence Management Systems: key concepts, structure, controls, governance, and jurisdiction-specific considerations.
Show credential
Intro course and exam covering ISO/IEC 27001:2022 fundamentals: ISMS scope & context, Annex SL structure, Statement of Applicability (SoA), mandatory controls, audit program basics and step-by-step implementation guidance.
Show credential
Intermediate badge from Cisco Networking Academy focused on ethical hacking. Covers vulnerability assessment, penetration testing, exploitation techniques, IoT security, social engineering, and reporting. Includes up to 34 hands-on activities with Kali Linux, WebSploit, and other tools.
Show credential
Apply OpenSSF Scorecard to improve project security posture and SDLC controls.
Show credentialZero Trust fundamentals with SPIFFE/SPIRE; identity-based authN/Z, microsegmentation and policy design.
Show credentialAPI description with OpenAPI: design fundamentals, versioning, validation and linting, documentation and governance patterns that enable consistent, secure and evolvable APIs.
Show credentialEvent-driven autoscaling with KEDA: triggers, ScaledObjects and interplay with HPA; scaling from zero for queues, streams and cloud services; patterns for resilient, cost-efficient workloads.
Show credentialCilium as an eBPF-powered CNI for Kubernetes: datapath basics, NetworkPolicies, L7 visibility, Hubble observability and advanced features (ingress/load-balancing) for secure and performant clusters.
Show credentialCore concepts of OpenTelemetry for metrics, traces and logs: SDKs and auto-instrumentation, context propagation, Collector pipelines, processors and exporters — with practical integration into modern backends.
Show credentialHands-on introduction to SBOM standards (SPDX/CycloneDX), artifact signing and attestations (Sigstore/Cosign), and CI/CD automation patterns to secure the software supply chain.
Show credentialOverview of EU CRA obligations for manufacturers and suppliers: secure-by-design, vulnerability handling and reporting, SBOM requirements, conformity assessment, and lifecycle compliance practices for connected products.
Show credentialIntroductory badge focused on the OWASP Top 10. Covers key web application security concepts and common vulnerabilities, risk assessment and mitigation, secure coding practices, and the confidentiality–integrity–availability (CIA) triad; includes guidance on applying appropriate security measures.
Show credentialCompliance- and risk-focused training for conversational AI. Covers the EU AI Act, NIST AI RMF, and ISO/IEC 42001:2023 requirements; methods to identify, analyze, and mitigate ethical, technical, and regulatory risks; and practices for trustworthy, responsible AI implementations.
Show credentialFoundations of GDPR and privacy program governance: data mapping & ROPA, DPIA, data subject request workflows, incident response and policy design. Includes shareable certificates.
Professional, non-credit certificate covering cybersecurity fundamentals: security principles, access control, network security, incident response, business continuity and disaster recovery, and security operations. Includes hands-on labs and a capstone project. Provides foundational preparation aligned with the ISC2 Certified in Cybersecurity (CC) domain.
Introduction to eBPF and Calico’s pluggable eBPF data plane: benefits, recommended scenarios, and live labs across multiple deployment patterns.
Show credentialPractical course on designing and deploying microservices and serverless applications. Covers service decomposition, API design, event-driven communication, containers and Functions-as-a-Service, API gateway and messaging basics, CI/CD and observability. Includes hands-on labs that build a small microservice with serverless triggers and deploy it to the cloud.
Foundational training in observability with Datadog: metrics, logs, traces (APM), dashboards and monitors, SLI/SLOs, alerting and integrations. Introduces tagging strategy, service maps, synthetic tests and basic Real User Monitoring (RUM). Guided exercises instrument an app and build actionable dashboards and alerts.
Engineer's Degree, Automation Management Systems
Additional qualification: Translator in the Field of Professional Communication (English) — awarded alongside the Engineer's Degree
Engineer's Degree recognized by the KMK Central Office for Foreign Education (ZAB) as equivalent to a German Bachelor's degree
Time Management · Self-discipline · Communication and Collaboration
Bachelor's Degree, Law
Data Privacy and Security · Compliance and Regulations · Communication and Collaboration · Technical Analysis
10publications onDataDrivenInvestor · W3C · GitHub · IETF Datatracker · Level Up Coding
W3C · GitHubOct 16, 2026
Contributor to WebMCP (document.modelContext), the browser API that lets AI agents call tools a web page registers. I take part in the W3C Web Machine Learning Community Group as an individual, in a personal capacity, contributing to the specification and to the discussion on measuring agent tool use in production. Community Group work, not a W3C Standard.
Show publicationIETF Datatracker
Co-author of an individual Internet-Draft (work in progress, not an IETF standard), done independently in a personal capacity. Tested the Linux kernel implementation in my own VM lab under functional and adversarial load, on kernels built with KASAN, KCSAN and lockdep, and reported defects with minimal fixes. The findings became correctness requirements in the draft: Local Address uniqueness within a broadcast domain, a duplicate-address alarm and transit source-RN preservation.
DataDrivenInvestor
A production hardening checklist for Docker: non-root users, minimal and distroless base images, read-only filesystems, dropped capabilities, and image scanning to shrink the attack surface.
Level Up Coding
Integrating HashiCorp Vault with Argo CD GitOps: injecting secrets safely, avoiding template rendering pitfalls, and keeping secrets out of Git while preserving declarative delivery.
DataDrivenInvestor
How to secure the delivery pipeline itself: hardened runners, signed artifacts and provenance (SLSA), least-privilege tokens, and controls to stop supply-chain attacks before they reach production.
DataDrivenInvestor
How leaked secrets survive in hidden Docker image layers, how to detect them, and how multi-stage builds and build-time secret handling keep credentials out of shipped images.
DataDrivenInvestor
End-to-end DevSecOps blueprint: shifting security left from the IDE through CI/CD to cloud runtime — SAST/DAST, secret scanning, dependency and container security in a single continuous loop.
DataDrivenInvestor
Hands-on hardening strategies for GitLab CI/CD in fintech and SaaS: securing secrets, containers, runners, and pipelines. Covers recent CVEs, human error patterns, and six habits for resilient GitLab clusters in 2025.
DataDrivenInvestor
Practical guide to wiring SAST and DAST into GitLab CI/CD: static and dynamic scanning, gating merge requests on findings, triaging results, and automating application security testing.
DataDrivenInvestor
Complete guide to running HashiCorp Vault on Kubernetes with GCS storage backend and GCP KMS auto-unseal: high availability, secret injection, and secure key management on GCP.
4distinctionsselected by Google & the developer community
One of 41 practitioners worldwide selected by Google Cloud as Ambassador for Infrastructure — listed in the official Google Cloud Ambassadors directory. Awarded for sustained, hands-on mastery of Google Cloud infrastructure and community impact, proven in production rather than on paper.
Recognised by Google as a Security Champion — a distinction given to practitioners who consistently demonstrate deep, applied expertise in securing Google Cloud environments and raising the security bar across the community.
Won 1st place at the 3rd RIL AI Hackathon, hosted by the Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Our team built a production-ready data uploader tailored for RAG-based chatbots. It supports PDF document ingestion, offers multiple adaptive chunking strategies, works autonomously with uploaded corpora, and automatically selects the best strategy using LLM-driven evaluation. We also instrumented RAGAS for response-quality measurement. The solution improves efficiency, reduces redundancies, and raises the overall quality of chatbot answers.
Won 1st place at the 2nd RIL AI Hackathon, hosted by Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Developed an AI solution that analyzes user stories and test cases, providing insights to improve quality and efficiency in software development.
