---

👋 About Me

Senior Cloud Platform & Security Engineer with 12+ years of experience designing, securing and operating cloud-native platforms in enterprise environments. My work sits at the intersection of platform engineering, cloud security, and software engineering — building delivery foundations that are secure by default, predictable under change, and easy for engineering teams to operate at scale.

Currently designing and operating production GCP platforms in an enterprise environment, with a focus on IAM architecture, Zero Trust, Kubernetes security, and cloud-native observability.

Recognition

---

💪 Strengths

🏗️ Platform & Cloud Engineering Cloud-native platforms on GKE & GCP — secure-by-default foundations, multi-region deployment patterns, GitOps promotion workflows, and standardized IaC across environments.	🔐 Security-First Delivery Zero Trust with Workload Identity Federation, Binary Authorization for supply-chain integrity, Cloud Armor WAF tuning at scale, secrets management, and policy enforcement via OPA/Kyverno.
📊 Reliability & Observability Practical SLI/SLO design, structured alerting with clear ownership, incident runbooks, and dashboards that surface signal rather than noise.	⚙️ Automation & Enablement Reusable IaC modules, CI/CD templates, and deployment patterns that reduce drift, lower change risk, and help teams ship without reinventing the wheel.
🐍 Software Engineering Internal tooling, security automations, and developer-facing services in Python, Go & TypeScript — including merged contributions to official Google Cloud open-source repositories.	☁️ Google Cloud Depth Multi-region GKE, IAM architecture, VPC/network security, FinOps at org level, and AI infrastructure on Vertex AI — with 1,000+ hands-on labs and Diamond League on Cloud Skills Boost.

---

🛠️ Tech Stack

☁️  Cloud & Infra
⚙️  DevOps & CI/CD
🔐  Security & Net
💻  Languages
🗄️  Data & AI
🌐  Web

---

✍️ Latest Writing

• TypeScript 7 vs TypeScript 6: What Changed, What Breaks and How to Upgrade  ·  _{Oct 21, 2026}
• DuckDB Explained: When a Database on Your Laptop Beats SQLite, Polars and BigQuery  ·  _{Oct 20, 2026}
• The Outbox Pattern: Reliable Events Without Distributed Transactions  ·  _{Oct 19, 2026}
• Muse Spark Open vs GLM 5.3 vs Kimi K3: Meta's Open Model Isn't the Smartest. It's the Cheapest to Run  ·  _{Oct 16, 2026}
• NIS2 for Cloud Teams, Part 1: Requirements Checklist for AWS, Azure and Google Cloud  ·  _{Oct 15, 2026}
• OpenTelemetry Explained: Traces, Metrics, Logs and the Collector  ·  _{Oct 14, 2026}
• Webhooks Explained: How They Work, How to Secure Them, How to Scale Them  ·  _{Oct 13, 2026}
• Mistral Large 4 vs Kolibri vs Beam: Three Open-Weight LLMs in Four Days — Which One to Self-Host  ·  _{Oct 12, 2026}
• Google reCAPTCHA Explained: v2 vs v3 vs Enterprise, Pricing, Scores and Every Key Type  ·  _{Oct 9, 2026}
• Claude Haiku 5.5 vs Sonnet 5.5 vs Opus 5.5: 20× Cheaper Than Sonnet — and a 100K-Token Price Cliff  ·  _{Oct 8, 2026}

→ Read all articles on alekseialeinikov.com

---

📈 GitHub Stats

---