Designing secure, scalable and production-inspired Microsoft Azure platforms through Enterprise Architecture, Cloud Governance, Platform Engineering and Infrastructure as Code.
I am a Cloud Solutions Architect with a background in automotive and embedded systems engineering, where complex systems, integration and technical coordination shaped my systems-engineering approach.
Today, I apply this perspective to enterprise cloud platforms on Microsoft Azure, combining Enterprise Architecture, Cloud Strategy, Governance, Security, Networking and Infrastructure as Code.
I work across the full cloud architecture lifecycle:
Business Requirements
↓
Cloud Strategy
↓
Enterprise Architecture
↓
Governance & Security
↓
Architecture Decisions
↓
Reference Architecture
↓
Terraform / IaC
↓
Azure Platform
My focus is on building platforms that are secure, scalable, governed and maintainable.
| Project | Architecture Focus |
|---|---|
| 🏛️ Azure Enterprise Cloud Foundation | Enterprise Architecture · Governance · Landing Zones · Platform Engineering · Terraform |
| 🚗 EV Fleet Monitoring Platform | Azure IoT · Serverless · Event-Driven Architecture · Observability |
| 📚 ReadIt – Azure Event-Driven Microservices | Cloud-Native · Event-Driven Architecture · Azure |
| 🔐 Azure Secure Connectivity | Enterprise Networking · Security · Private Connectivity |
| Area | Focus |
|---|---|
| Enterprise Architecture | Cloud Strategy · Azure Landing Zones · Architecture Decisions |
| Governance | Cloud Governance · Azure Policy · Management Groups |
| Platform Engineering | Azure Platform · Shared Services · Landing Zones |
| Security | Zero Trust · RBAC · Microsoft Entra ID · Key Vault |
| Networking | Hub & Spoke · Private Link · Private DNS · Azure Firewall |
| Operations | Azure Monitor · Log Analytics · Observability |
| Infrastructure as Code | Terraform · Bicep · GitHub Actions |
| Cloud-Native | Serverless · Event-Driven Architecture · IoT |
| Domain | Technologies |
|---|---|
| Cloud | Microsoft Azure |
| IaC & Automation | Terraform · Bicep · GitHub Actions |
| Governance & Security | Azure Policy · RBAC · Microsoft Entra ID · Key Vault |
| Networking | Hub & Spoke · Private Link · Private DNS · Azure Firewall |
| Platform | Azure Functions · AKS · Cosmos DB · Azure IoT |
| Observability | Azure Monitor · Log Analytics · Application Insights · Grafana |
| Development | Python · REST APIs · MQTT |
| Certification | Level |
|---|---|
| AZ-305 | Azure Solutions Architect Expert |
| AZ-104 | Azure Administrator Associate |
| AZ-900 | Azure Fundamentals |
- Enterprise Azure Architecture
- Azure Landing Zones
- Platform Engineering
- Cloud Governance
- Infrastructure as Code
- Secure Cloud Networking
- Cloud Security & Operations
My repositories document not only the technical implementation, but also the architectural reasoning behind it through requirements, principles, governance, ADRs and reference architectures.
Cloud Architecture · Solution Architecture · Azure Platform Engineering · Enterprise Architecture
Feel free to explore my repositories and architecture work.