Security architect & technical educator

Security made clear.
From design to delivery.

I’m Goli. I bring cloud architecture, development, and security together and share what I learn along the way.

Explore my expertise Visit GoliTech on YouTube
Security by design.Considered at every step.
  1. 01Design
  2. 02Build
  3. 03Assess
  4. 04Protect
Secure delivery

Connected expertise

Architecture that connects.
Security at every layer.

Microsoft cloud, AI systems, endpoints, and infrastructure. Designed together, from the foundation to the controls that protect it.

Connected defense

Microsoft cloud security

Design an integrated Microsoft security architecture, connecting Azure, identity, SIEM, and XDR into a coherent defense.

  • Microsoft security
  • SIEM & XDR
  • Zero Trust
Explore capabilitiesHide capabilities

Architecture & controls

  • End-to-end Microsoft cloud security and Azure security architecture, guided by Zero Trust design.
  • Identity, workload, network, data, and cloud security controls designed to work together.

Detection & response

  • Microsoft Sentinel and Microsoft Defender XDR: SIEM and XDR architecture and integration.
  • Security monitoring, detection, and response across cloud and enterprise environments.

Integrated Microsoft protection

  • Microsoft Defender for Cloud and Microsoft Defender for Office 365.
  • Microsoft Defender for Identity and Microsoft Defender for Endpoint.
Intelligent systems

AI & MCP security

Secure AI systems, LLM applications, and agents from the model and data layer to MCP tools and enterprise integrations.

  • AI threat modeling
  • MCP & agents
  • Guardrails
Explore capabilitiesHide capabilities

Offensive topics are explored through defensive security research and control validation.

AI architecture & data protection

  • AI and LLM security architecture, secure RAG pipelines, and enterprise integration of AI agents.
  • Data leakage, sensitive-information exposure, and model or application abuse scenarios.

Threat modeling & security research

  • Offensive and defensive AI security, AI red teaming, and threat modeling.
  • Prompt injection and indirect prompt injection defenses, model and data poisoning risks, and agent or tool abuse scenarios.

MCP, tools & guardrails

  • Model Context Protocol (MCP) security, including MCP server and tool security.
  • Tool permissions, authorization design, and guardrail architecture for secure agent behavior.
Enterprise protection

Endpoint security

Build endpoint defenses that connect hardening, policy, detection, and response across the enterprise device estate.

  • Hardening
  • EDR
  • Control validation
Explore capabilitiesHide capabilities

Architecture & hardening

  • Enterprise endpoint security architecture, security design and deployment, and endpoint policy architecture.
  • Operating-system hardening, Windows security baselines, and attack-surface reduction.

Protection & response

  • Malware and ransomware protection with Microsoft Defender for Endpoint and Trend Micro security solutions.
  • Endpoint Detection and Response (EDR), endpoint monitoring, and incident response.

Exposure & assurance

  • Vulnerability and exposure reduction across enterprise endpoints.
  • Security control validation to assess whether endpoint protections work as intended.
Resilient foundations

Infrastructure & cloud

Start with a resilient foundation. Design secure cloud infrastructure that supports applications, platforms, and delivery pipelines.

  • Cloud architecture
  • Secure infrastructure
  • Secure delivery
Explore capabilitiesHide capabilities

Architecture by design

  • Connect infrastructure and cloud architecture with the applications and platforms they support.
  • Design a resilient foundation with security considered from the outset.

Security through delivery

  • Connect cloud security with DevSecOps, vulnerability management, and application security.
  • Bring architecture and implementation together throughout the security delivery process.

Security across delivery

The practices that turn architecture into everyday protection.

Platform & DevSecOps

Bring security into everyday development, from the first commit to the delivery pipeline.

  • DevSecOps
  • Delivery pipelines

Vulnerability management

Understand the risks, prioritize what matters, and make each release stronger.

  • Risk prioritization
  • Exposure reduction

Application security

Protect the applications people rely on, and the information they trust them with.

  • Application protection
  • Secure delivery

The person behind GoliTech

Practical experience.
Shared openly.

I’m a cloud security architect with a hands-on approach. My experience spans the German public sector, the automotive industry, and the pharmaceutical industry. I connect secure infrastructure with the applications and delivery pipelines it supports.

Through GoliTech, I turn experience with Azure security, Microsoft Sentinel, DevSecOps, and security fundamentals into clear, practical lessons. My aim is simple: help others move from theory to confident action.

Learn with GoliTech

Less theory.
More understanding.

Explore hands-on cloud security lessons, practical labs, and ideas you can put to work. Find everything on the GoliTech YouTube channel.

Visit the YouTube channel

Keep in touch

Good security starts
with a conversation.

Explore my professional background and connect with me on LinkedIn.

View my LinkedIn profile