This is a public version of my CV. For the latest role-tailored résumé, get in touch
Senior Cloud Platform Engineer with 12+ years of engineering experience and deep specialisation in Google Cloud Platform. I design, build, and operate production-grade GCP infrastructure: multi-region GKE fleets, Shared VPC architectures, Cloud Armor WAF, IAM/Org Policy governance, and cloud-native security controls. My strength is translating complex platform requirements into reliable, secure, and cost-efficient GCP deployments backed by Terraform and GitOps.
At T-Digital / Deutsche Telekom I owned the GKE platform used by multiple product teams - multi-cluster, multi-region, with HTTPS L7 load balancing, Workload Identity, Binary Authorization, and full observability via Cloud Monitoring, Cloud Logging, and OpenTelemetry. I scaled CI/CD foundations with Argo CD and standardised IaC modules across dozens of services to reduce drift and accelerate team delivery. I am deeply hands-on in cloud networking, including Shared VPC, Private Service Connect, and all major cloud load-balancer patterns (global/regional, external/internal, HTTP(S), TCP/UDP, proxy and passthrough), plus advanced Cloud Armor policy design and tuning.
Google Cloud (5x Professional Certified): Professional Cloud Architect, Professional Cloud DevOps Engineer, Professional Cloud Network Engineer, Professional Security Operations Engineer, Professional Data Engineer. I complement platform work with Cloud Security Alliance certifications (CCSK, CCZT) and regularly publish hands-on GCP architecture and engineering articles on Medium. I also bring strong practical experience with multi-region Cloud Spanner design and operations, and with building cost-effective platform architectures (FinOps-aware sizing, lifecycle policies, and reliability/cost trade-off decisions).
LinkedIn
GitHubT-Digital by Deutsche Telekom · Full-time
Sep 2024 - Present · 1 yr 11 mos
Thessaloniki, Central Macedonia, Greece · Hybrid
A Python service running serverless on Cloud Run that continuously reconciles TLS certificate state — detecting drift and upcoming expiry across environments and driving renewals automatically, so nothing silently lapses in production.
Private production serviceA lightweight Go service that probes applications and reports whether they are live — fast, dependency-free health checks with clear up/down signalling, built to slot into any deployment as a self-contained reliability watchdog.
Private production service
Credential ID: 8a9ddfba001e4a55bf42667a6b62da9b
Skills: Cloud Solution Architecture, Security and Compliance, Cloud Networking, +6 more
Show credentialCredential ID: eb748cbd0c904f8389d3f755f3a32584
Skills: Cloud Networking, Hybrid Connectivity, Network Security, +6 more
Show credential
Completion certificate for the NIS-2 Deep Dive web training (28 May 2026) covering real attack scenarios (identity theft, compromised backups, user account breaches), NIS-2 requirements including risk management, reporting obligations, and supply chain security, governance structures, security roles, policies, incident response processes, vulnerability management and cyber resilience with IBM solutions, network and firewall security, SOC/SIEM/endpoint protection, and identity/access/communication protection.
ACE ID IBM-0032 (v1), 14 weeks (~200 hours), minimum passing score 70. ACE: 18 SH (6 x 3) across Web Development (HTML/CSS/JavaScript), Python for Data Science, Advanced Application Security, Intro to Cloud Computing, Intro to Python, and Microservices.
Engineer's Degree, Automation Management Systems
Engineer's Degree, Translation
Recognized by the KMK Central Office for Foreign Education (ZAB) as equivalent to a German Bachelor's degree
Time Management · Self-discipline · Communication and Collaboration
Bachelor's Degree, Law
Data Privacy and Security · Compliance and Regulations · Communication and Collaboration · Technical Analysis
8articles published onDataDrivenInvestor · Google Cloud - Community · Level Up Coding
Level Up CodingMar 20, 2026
Deep dive into PodDisruptionBudgets: how they protect availability during node drains, upgrades and autoscaling events, with practical configuration patterns for resilient Kubernetes platforms.
Show publicationLevel Up Coding
Comparison of Kubernetes ingress controllers in 2026 — NGINX, Gateway API, Cilium and cloud-native options — covering performance, security, TLS, and when each fits a production platform.
6distinctionsselected by Google & the developer community
One of only a handful of engineers Google names Ambassador for Infrastructure — a recognition it reserves for the very top tier of its global Cloud community. Awarded for sustained, hands-on mastery of Google Cloud infrastructure, proven in the console rather than on paper.
Recognised by Google as a Security Champion — a distinction given to practitioners who consistently demonstrate deep, applied expertise in securing Google Cloud environments and raising the security bar across the community.
