T-Digital by Deutsche Telekom · official title: Senior DevOps Engineer — Cloud Infrastructure
This is a public version of my CV. For the latest role-tailored résumé, get in touch
Senior Cloud Platform Engineer with 12+ years of engineering experience and deep specialisation in Google Cloud Platform. I design, build, and operate production-grade GCP infrastructure: multi-region GKE fleets, Shared VPC architectures, Cloud Armor WAF, IAM/Org Policy governance, and cloud-native security controls. My strength is translating complex platform requirements into reliable, secure, and cost-efficient GCP deployments backed by Terraform and GitOps.
At T-Digital / Deutsche Telekom I owned the GKE platform used by multiple product teams - multi-cluster, multi-region, with HTTPS L7 load balancing, Workload Identity, Binary Authorization, and full observability via Cloud Monitoring, Cloud Logging, and OpenTelemetry. I scaled CI/CD foundations with Argo CD and standardised IaC modules across dozens of services to reduce drift and accelerate team delivery. I am deeply hands-on in cloud networking, including Shared VPC, Private Service Connect, and all major cloud load-balancer patterns (global/regional, external/internal, HTTP(S), TCP/UDP, proxy and passthrough), plus advanced Cloud Armor policy design and tuning.
Google Cloud (5x Professional Certified): Professional Cloud Architect, Professional Cloud DevOps Engineer, Professional Cloud Network Engineer, Professional Security Operations Engineer, Professional Data Engineer. I complement platform work with Cloud Security Alliance certifications (CCSK, CCZT) and regularly publish hands-on GCP architecture and engineering articles on Medium. I also bring strong practical experience with multi-region Cloud Spanner design and operations, and with building cost-effective platform architectures (FinOps-aware sizing, lifecycle policies, and reliability/cost trade-off decisions).
Email
LinkedIn
GitHubT-Digital by Deutsche Telekom · Full-time
Sep 2024 - Present · 2 yrs 2 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
T-Digital by Deutsche Telekom · Full-time
Jun 2022 - Sep 2024 · 2 yrs 4 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
Deutsche Telekom IT RUS · Full-time
Sep 2021 - Jun 2022 · 10 mos
Moscow City, Russia · On-site
Wildberries · Full-time
Jan 2019 - Aug 2021 · 2 yrs 8 mos
Moscow City, Russia · On-site
Mostransavto · Full-time
Jul 2017 - Jan 2019 · 1 yr 7 mos
Podolsky District, Moscow, Russia · On-site
Freelancer · Freelance
Jan 2015 - Jul 2017 · 2 yrs 7 mos
· Remote
A Python service running serverless on Cloud Run that continuously reconciles TLS certificate state — detecting drift and upcoming expiry across environments and driving renewals automatically, so nothing silently lapses in production.
Private production serviceA lightweight Go service that probes applications and reports whether they are live — fast, dependency-free health checks with clear up/down signalling, built to slot into any deployment as a self-contained reliability watchdog.
Private production serviceA VS Code extension that kills "works on my machine" — one-click snapshot of runtimes, Docker, ports, env vars and git state, diffed against a teammate's and turned into a Markdown fix report with ready-to-run commands. 100% local, no telemetry.
View on MarketplaceAn educational pure-Python toolkit based on the experimental IPv8 protocol (draft-thain-ipv8-02) — 58 modules, 35 CLI commands and 1 827 tests spanning address parsing, packet construction, routing simulation and companion protocols. On PyPI with a DOI and full docs.
View on GitHub
Credential ID: 8a9ddfba001e4a55bf42667a6b62da9b
Skills: Cloud Solution Architecture, Security and Compliance, Cloud Networking, +6 more
Show credentialCredential ID: eb748cbd0c904f8389d3f755f3a32584
Skills: Cloud Networking, Hybrid Connectivity, Network Security, +6 more
Show credentialCredential ID: 9dbfab8220aa43c18da297038a95d723
Skills: CI/CD, SRE, Infra Automation, +6 more
Show credentialCredential ID: c658b9bd545749a6b45f54c9982f200d
Skills: Security Operations, Incident Response, Threat Detection, SIEM, +6 more
Show credentialCredential ID: 4f3e7970bbdb4a61805a8209cfe215ed
Skills: Data Engineering, Big Data & ML Pipelines, Data Governance & Security, +6 more
Show credentialSkills: Machine Learning Model Training, AutoML Workflow, Custom Model Deployment, Vertex AI SDK Usage, Prompt Engineering
Show credentialSkills: Semantic Search, Query Understanding, Information Retrieval Optimization, Relevance Scoring, Domain-Specific Search Tuning
Show credentialSkills: Conversational AI Design, Omnichannel Engagement, Real-time Agent Assistance, Generative AI Integration, Conversational Insights Analytics
Show credential
Credential ID: CEZAJh6sCYu9XhTKmqetBZX
Skills: Cloud Security, Cybersecurity, Data Privacy and Security, Data Security and Compliance, Identity and Access Management (IAM), Zero Trust Architecture
Show credentialCredential ID: UupmmAQt69pqBF2ztSHJiS2X
Skills: Cybersecurity, Cloud Security, Identity and Access Management (IAM)
Show credentialSkills: Agent Development Kit (ADK), AI Agents, Gemini Enterprise, Memory Management
Show credentialSkills: Gemini Enterprise Deployment, AI Agents, Gemini Enterprise, Software Development
Show credential
Skills: Network Security, Firewall Administration, Application Control, Intrusion Detection & Prevention, VPN Configuration, SSL Inspection, Web Filtering, Antivirus & Malware Protection
Show credentialSkills: Network Security, Endpoint Security, Cloud Security, Threat Detection & Management, Data Privacy, Cryptography, Secure SD-WAN
Show credential
Credential ID: 32840830-3068
Skills: Agile Methodology, DevOps Practices, +5 more
Show credentialCredential ID: 62067144-0539
Skills: Agile Methodology, SAFe Framework, +3 more
Show credential
Credential ID: 01010010180803521362304
Skills: Routing & Switching, ICT Fundamentals, +2 more
Credential ID: 010200101680808058851409
Skills: Advanced Routing & Switching, Network Security, +4 more
Skills: Cloud Cost Optimization, Rightsizing, Tagging Strategy, +3 more
Show credential
Credential ID: NH40CFZFL3EQ1RG5
Skills: Networking Fundamentals, Routing and Switching, +3 more skills
Show credential
Credential ID: D73996EEB4004D47
Skills: Azure Data Services, Database Fundamentals, Big Data
Show credential
Completion certificate for the NIS-2 Deep Dive web training (28 May 2026) covering real attack scenarios (identity theft, compromised backups, user account breaches), NIS-2 requirements including risk management, reporting obligations, and supply chain security, governance structures, security roles, policies, incident response processes, vulnerability management and cyber resilience with IBM solutions, network and firewall security, SOC/SIEM/endpoint protection, and identity/access/communication protection.
ACE ID IBM-0032 (v1), 14 weeks (~200 hours), minimum passing score 70. ACE: 18 SH (6 x 3) across Web Development (HTML/CSS/JavaScript), Python for Data Science, Advanced Application Security, Intro to Cloud Computing, Intro to Python, and Microservices.
Comprehensive course covering the full spectrum of working with Anthropic models through Google Cloud's Vertex AI: authentication, model selection, prompt engineering, streaming, tool use, and production integration patterns for Claude on GCP.
Show credentialComprehensive course covering the full spectrum of working with Anthropic models using the Claude API: prompt design, system prompts, multi-turn conversations, tool use, streaming, vision, embeddings, and production best practices.
Show credential7-course professional certificate demonstrating AI fluency across brainstorming, research, communication, content creation, data analysis, and coding. Includes a portfolio of 20+ AI artifacts and a vibe-coded custom AI solution. Covers prompt engineering, output evaluation, and responsible AI practices for real workplace challenges.
Show credential
Digital badge and certificate issued by Cloud Assess Academy for completing the Advanced GDPR course, providing advanced understanding of GDPR compliance, data protection principles, and organizational obligations.
Show credential
Certificate of Completion for successfully completing the ISO/IEC 27701 Data Protection and Privacy Information Management course, covering the extension of ISO/IEC 27001 for privacy management, GDPR-related practices, and implementation of a Privacy Information Management System (PIMS).
Awareness eLearning Certificate of Completion covering ISO/IEC 23894:2023 Guidance on AI Risk Management: principles, context, identification, assessment, and mitigation of risks in AI systems for trustworthy and responsible AI.
Awareness eLearning Certificate of Completion covering ISO/IEC 42001:2023 Artificial Intelligence Management Systems: key concepts, structure, controls, governance, and jurisdiction-specific considerations.
Show credential
Intro course and exam covering ISO/IEC 27001:2022 fundamentals: ISMS scope & context, Annex SL structure, Statement of Applicability (SoA), mandatory controls, audit program basics and step-by-step implementation guidance.
Show credential
Intermediate badge from Cisco Networking Academy focused on ethical hacking. Covers vulnerability assessment, penetration testing, exploitation techniques, IoT security, social engineering, and reporting. Includes up to 34 hands-on activities with Kali Linux, WebSploit, and other tools.
Show credential
Apply OpenSSF Scorecard to improve project security posture and SDLC controls.
Show credentialZero Trust fundamentals with SPIFFE/SPIRE; identity-based authN/Z, microsegmentation and policy design.
Show credentialAPI description with OpenAPI: design fundamentals, versioning, validation and linting, documentation and governance patterns that enable consistent, secure and evolvable APIs.
Show credentialEvent-driven autoscaling with KEDA: triggers, ScaledObjects and interplay with HPA; scaling from zero for queues, streams and cloud services; patterns for resilient, cost-efficient workloads.
Show credentialCilium as an eBPF-powered CNI for Kubernetes: datapath basics, NetworkPolicies, L7 visibility, Hubble observability and advanced features (ingress/load-balancing) for secure and performant clusters.
Show credentialCore concepts of OpenTelemetry for metrics, traces and logs: SDKs and auto-instrumentation, context propagation, Collector pipelines, processors and exporters — with practical integration into modern backends.
Show credentialHands-on introduction to SBOM standards (SPDX/CycloneDX), artifact signing and attestations (Sigstore/Cosign), and CI/CD automation patterns to secure the software supply chain.
Show credentialOverview of EU CRA obligations for manufacturers and suppliers: secure-by-design, vulnerability handling and reporting, SBOM requirements, conformity assessment, and lifecycle compliance practices for connected products.
Show credentialIntroductory badge focused on the OWASP Top 10. Covers key web application security concepts and common vulnerabilities, risk assessment and mitigation, secure coding practices, and the confidentiality–integrity–availability (CIA) triad; includes guidance on applying appropriate security measures.
Show credentialCompliance- and risk-focused training for conversational AI. Covers the EU AI Act, NIST AI RMF, and ISO/IEC 42001:2023 requirements; methods to identify, analyze, and mitigate ethical, technical, and regulatory risks; and practices for trustworthy, responsible AI implementations.
Show credentialFoundations of GDPR and privacy program governance: data mapping & ROPA, DPIA, data subject request workflows, incident response and policy design. Includes shareable certificates.
Professional, non-credit certificate covering cybersecurity fundamentals: security principles, access control, network security, incident response, business continuity and disaster recovery, and security operations. Includes hands-on labs and a capstone project. Provides foundational preparation aligned with the ISC2 Certified in Cybersecurity (CC) domain.
Introduction to eBPF and Calico’s pluggable eBPF data plane: benefits, recommended scenarios, and live labs across multiple deployment patterns.
Show credentialPractical course on designing and deploying microservices and serverless applications. Covers service decomposition, API design, event-driven communication, containers and Functions-as-a-Service, API gateway and messaging basics, CI/CD and observability. Includes hands-on labs that build a small microservice with serverless triggers and deploy it to the cloud.
Foundational training in observability with Datadog: metrics, logs, traces (APM), dashboards and monitors, SLI/SLOs, alerting and integrations. Introduces tagging strategy, service maps, synthetic tests and basic Real User Monitoring (RUM). Guided exercises instrument an app and build actionable dashboards and alerts.
Professional Certificate program covering Python scripting, automation of system administration tasks, configuration management, version control with Git, troubleshooting and debugging, and using cloud APIs to automate IT infrastructure at scale.
Advanced course on Python automation for network engineers: working with network-device APIs, asynchronous connections, data parsing, and building automation scripts and tooling for large-scale network operations.
Intermediate routing course on the Junos OS: OSPF, BGP, IP tunneling, high availability, and routing policy on Juniper platforms for enterprise and service-provider networks.
Huawei HCIP-level training on improving enterprise network performance: QoS, traffic engineering, network optimization, and reliability for large-scale routing and switching environments.
Huawei HCIP-level training on planning and implementing enterprise network engineering projects: design, deployment, and end-to-end delivery of routing and switching infrastructure.
Huawei HCIP-level training on implementing enterprise routing and switching networks: advanced routing protocols, VLANs, redundancy, and large-scale L2/L3 network operations.
Engineer's Degree, Automation Management Systems
Additional qualification: Translator in the Field of Professional Communication (English) — awarded alongside the Engineer's Degree
Engineer's Degree recognized by the KMK Central Office for Foreign Education (ZAB) as equivalent to a German Bachelor's degree
Time Management · Self-discipline · Communication and Collaboration
Bachelor's Degree, Law
Data Privacy and Security · Compliance and Regulations · Communication and Collaboration · Technical Analysis
10publications onDataDrivenInvestor · Google Cloud - Community · Level Up Coding · W3C · GitHub · IETF Datatracker
W3C · GitHubOct 16, 2026
Contributor to WebMCP (document.modelContext), the browser API that lets AI agents call tools a web page registers. I take part in the W3C Web Machine Learning Community Group as an individual, in a personal capacity, contributing to the specification and to the discussion on measuring agent tool use in production. Community Group work, not a W3C Standard.
Show publicationIETF Datatracker
Co-author of an individual Internet-Draft (work in progress, not an IETF standard), done independently in a personal capacity. Tested the Linux kernel implementation in my own VM lab under functional and adversarial load, on kernels built with KASAN, KCSAN and lockdep, and reported defects with minimal fixes. The findings became correctness requirements in the draft: Local Address uniqueness within a broadcast domain, a duplicate-address alarm and transit source-RN preservation.
Level Up Coding
Deep dive into PodDisruptionBudgets: how they protect availability during node drains, upgrades and autoscaling events, with practical configuration patterns for resilient Kubernetes platforms.
Level Up Coding
Comparison of Kubernetes ingress controllers in 2026 — NGINX, Gateway API, Cilium and cloud-native options — covering performance, security, TLS, and when each fits a production platform.
DataDrivenInvestor
Practical guide to writing maintainable Terraform: keep local workflows reproducible, design modules with both devs and platform teams in mind, compress complexity with abstractions, and structure repos with modules → stacks → deployments.
DataDrivenInvestor
Why GitOps with Argo CD became the default delivery model for Kubernetes: pull-based reconciliation, drift prevention, auditable Git history, and a practical path to multi-cluster continuous delivery.
Google Cloud - Community
Hands-on walkthrough of GKE Autopilot: how Google-managed node provisioning, scaling and security defaults reduce operational overhead while keeping full Kubernetes compatibility for production workloads.
Google Cloud - Community
How managed Cloud Service Mesh delivers global traffic control, mTLS between services, and seamless upgrades on GKE — without the operational burden of self-hosting Istio.
Google Cloud - Community
FinOps-oriented guide to right-sizing Compute Engine: machine family selection, CUDs and spot VMs, autoscaling, and lifecycle automation to cut cloud spend without sacrificing performance.
DataDrivenInvestor
A real-world migration playbook for consolidating multiple Kubernetes clusters without downtime: traffic shifting, workload migration, DNS and ingress cutover, and validation strategy.
4distinctionsselected by Google & the developer community
One of 41 practitioners worldwide selected by Google Cloud as Ambassador for Infrastructure — listed in the official Google Cloud Ambassadors directory. Awarded for sustained, hands-on mastery of Google Cloud infrastructure and community impact, proven in production rather than on paper.
Recognised by Google as a Security Champion — a distinction given to practitioners who consistently demonstrate deep, applied expertise in securing Google Cloud environments and raising the security bar across the community.
Won 1st place at the 3rd RIL AI Hackathon, hosted by the Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Our team built a production-ready data uploader tailored for RAG-based chatbots. It supports PDF document ingestion, offers multiple adaptive chunking strategies, works autonomously with uploaded corpora, and automatically selects the best strategy using LLM-driven evaluation. We also instrumented RAGAS for response-quality measurement. The solution improves efficiency, reduces redundancies, and raises the overall quality of chatbot answers.
Won 1st place at the 2nd RIL AI Hackathon, hosted by Research Innovation Lab and associated with T-Digital (Deutsche Telekom). Developed an AI solution that analyzes user stories and test cases, providing insights to improve quality and efficiency in software development.
