secure-session://bestin.cloud
whoami

Azure Cloud Architect

I design, secure, automate, and deliver enterprise-grade cloud platforms on Microsoft Azure.

I help organizations turn complex cloud requirements into secure, scalable, maintainable, and cost-efficient solutions.

cat ./about

About me

I am a Senior Azure Cloud Architect and Engineer focused on designing and implementing secure cloud environments for enterprise systems, integration platforms, data solutions, and AI-driven applications.

My work combines architecture with hands-on engineering. I define reusable standards, build infrastructure as code, automate deployment processes, solve complex networking and security problems, and support development teams in delivering production-ready solutions.

Core skills

Microsoft Azure Cloud Architecture Azure Landing Zones Hub-Spoke Networking Terraform Bicep PowerShell Azure DevOps GitHub Actions CI/CD Azure Policy RBAC & Entra ID Application Gateway API Management Private Networking Azure Container Apps AKS Azure OpenAI RAG Architecture AI Infrastructure Security Architecture FinOps Monitoring & Observability

What I do

Cloud architecture

I design Azure platforms, landing zones, subscriptions, resource organization, network topology, security controls, identity boundaries, and operational standards.

Infrastructure as code

I build reusable Terraform and Bicep modules, automate cloud deployments, standardize environments, and reduce manual configuration.

Networking and security

I design hub-spoke networks, private endpoints, DNS, firewalls, Application Gateway, WAF, API exposure patterns, RBAC, policies, and secure service connectivity.

DevOps modernization

I create CI/CD standards, deployment pipelines, environment promotion models, approval gates, release evidence, and secure developer workflows.

AI and RAG platforms

I design cloud infrastructure for Azure OpenAI, AI agents, retrieval-augmented generation, vector databases, document processing, and controlled model access.

Cost and reliability

I review cloud spend, identify waste, optimize services, improve resilience, and design scalable solutions aligned with real business demand.

What I can do for you

  • Design a secure Azure architecture for a new application or platform.
  • Review and improve an existing Azure environment.
  • Build a landing zone or hub-spoke network architecture.
  • Create Terraform or Bicep infrastructure modules.
  • Design secure CI/CD pipelines and deployment standards.
  • Migrate workloads from on-premises or another cloud to Azure.
  • Modernize Azure DevOps workflows or move them to GitHub Enterprise.
  • Design API Management and Application Gateway integration patterns.
  • Implement private networking, DNS, RBAC, Policy, and security controls.
  • Architect Azure OpenAI, RAG, AI agent, and document-processing platforms.
  • Perform cloud cost, security, reliability, and architecture reviews.
  • Support engineering teams during implementation and production rollout.

Contact

Do you need help with Azure architecture, cloud security, DevOps, automation, or AI infrastructure? Let us discuss your project.

Email: admin (at) bestin.cloud
Location: Poland / Remote
Start a conversation