Infrastructure, Code & Security
Transitioning into backend development and cybersecurity. I build on a decade of corporate IT operations to learn and apply modern cloud and security technologies.
A Go wallet that moves balances over HTTP and an SQS queue without giving up its guarantees: money stored as integers, idempotency keys, an append-only ledger and a transactional outbox, checked with property-based and linearizability tests. Every phase is measured with k6: 392 req/s with a 30 ms p99 and zero 5xx errors on a 4-vCPU laptop. A React console follows the API live and runs load tests that reconcile the money at the end.
A Java 21 and Spring Boot API that runs the vulnerability remediation lifecycle: the CVSS score sets the severity and the deadline, each role does only its part of the workflow (whoever fixes doesn't verify), the same CVE can't be opened twice on the same asset, and every status change goes to an audit trail. JWT login, per-IP limits on login attempts and integration tests with Testcontainers.
A finance SaaS live on Vercel, with managed PostgreSQL on Neon and secrets kept out of Git. The Stripe webhook is only accepted with a verified signature, and only then unlocks the plan in Clerk. Postgres in Docker and versioned migrations reproduce the database on a local machine.
A FastAPI ticketing API that triages on its own: category, priority and SLA are set by Claude or, if the AI fails, by keywords, and the ticket is always created. User text goes to the AI as data, with defenses against prompt injection, and a report measures SLA compliance and how many triages needed correction. 102 tests with Pytest.
A cloud security investigation lab, with KQL queries that trace access to sensitive blobs and audit authentication in Log Analytics.
An end-to-end lakehouse on Databricks: from 10 messy CSV files (over 300,000 rows) to the app where the director decides who to call on Monday. In the first week, 41.7% of the calls made turned into orders, vs. 10.1% when calling at random.
A Go CLI for network reconnaissance: it looks up IPs and maps a domain's NS servers. DNS queries use context.WithTimeout so the terminal never hangs on a network failure, and IPv4/IPv6 parsing is covered by table-driven tests.
A Fastify REST API with JWT and role-based access control. Login doesn't reveal which emails exist, 401 and 403 are kept separate, and 22 integration tests run against PostgreSQL. CI builds the Docker image and tests the running API for real.
User sign-up built to practice SOLID: the use case only knows interfaces, notification channels are interchangeable strategies, and the database guarantees unique emails even under concurrent requests. The use case is tested without a database.
Immersive landing page in HTML, CSS and JavaScript, focused on layout and typography.
Company landing page focused on visual hierarchy and typography.
My journey in tech began on the front line of IT support and operations. That day-to-day corporate experience taught me to look at technology in a practical way, valuing stability and understanding how systems affect the real business.
Today, while studying for an associate degree in Systems Analysis and Development, I connect that background to building and protecting software. I develop projects focused on good practices such as Clean Code and SOLID. To experiment in the real world, I run a personal lab on a VPS, where I set up environments with Docker and databases and learn the application lifecycle hands-on.
My goal is to join a backend, cloud or cybersecurity team. I'm looking for an opportunity to keep growing technically, combining my operations background with a drive to learn and build secure code.