Building systems
that scale.

Responsible for identity, authentication, access control, security and billing on a cloud platform running AI agents and developer workloads.

Identity & access

• Designed and delivered enterprise SSO: per-tenant identity providers, domain-based login routing, directory sync and SCIM user lifecycle management.
• Led a zero-downtime migration of production authentication between identity providers using dual token validation, staged rollout flags and issuer discovery.
• Built a bidirectional identity sync service in Go that keeps users, organizations, memberships and roles consistent with an external identity provider, with idempotent event handling.

Security

• Built a real-time policy service in Go that enforces configurable risk thresholds with fail-open semantics.
• Hardened SSO flows and keep dependencies with known CVEs patched.

Billing

• Delivered invoicing, payment collection and entitlements on usage-based billing platforms, including tier-driven entitlement sync and token-based service-to-service auth.

Platform & operations

• Ported the identity and access-control stack and authored its multi-tenant user and organization migration plan.
• Structured, correlated logging with OpenTelemetry; Helm charts and GitHub Actions pipelines.

AI engineering

• Building internal services with MCP servers and AWS Bedrock embeddings.
• Run a multi-agent workflow: parallel coding agents in isolated git worktrees with scoped tasks, coordinated through shared written plans and a persistent engineering knowledge base.
• Use agents for code review, security review and test generation; design decisions and final review stay human.

• Go
• Rust
• NestJS
• React
• PostgreSQL
• Redis
• AWS
• Bedrock
• MCP
• Kubernetes
• OpenTelemetry
• OIDC
• SAML
• SCIM

Developed high-performance Go backend services for a multi-tenant online gaming platform.

• Built distributed services supporting more than 10,000 concurrent users.
• Worked across payments, wallets, authentication, multiplayer services and platform integrations.
• PostgreSQL and MongoDB for storage, Redis for caching, Kafka for asynchronous messaging, Elasticsearch and Kibana for search and metrics.
• Mock-based testing for broad coverage; Docker, Helm and Kubernetes with GitOps for consistent, auditable deployments.
• Have a Slack reaction emoji with my face named after me. Hard to find better proof of being a team player.

• Go
• Node.js
• Kafka
• PostgreSQL
• MongoDB
• Redis
• Elasticsearch
• Kubernetes

Built Go services with REST APIs, maintained Jenkins CI/CD pipelines, containerized with Docker and automated infrastructure with Ansible on Linux.

• Go
• REST
• Jenkins
• Docker
• Ansible
• Linux

Developed Go backend services for betting systems.

• Developed subsystems of the core Go backend framework and maintained its PostgreSQL data model.
• Built distributed, asynchronous microservices with Kafka, Protobuf and ETCD; documented APIs with OpenAPI 2.0.
• End-to-end testing with Python and Selenium; delivery through GitLab CI/CD.
• Led “Greendesk”, the internal side project where developers practise new skills, and mentored student interns.

• Go
• PostgreSQL
• Kafka
• Protobuf
• ETCD
• Python
• Selenium

Banking systems for card payments in an Agile team: Oracle PL/SQL development, C programs on AIX, APEX front ends and payment feature design.

• Oracle
• PL/SQL
• C
• AIX
• APEX

Worked on LTE (4G) telecommunications systems, contributing to production C++ base-station radio software and cross-system test automation.

• Developed and maintained C++ components for production radio systems.
• Worked with Erlang and Python to build and maintain cross-system test suites.

• C++
• Erlang
• Python
• LTE
• 4G

Remote diagnosis, repair and reconfiguration of the fixed access network.

• Fixed ADSL and VDSL (8b, 17a) faults and reconfigured Siemens, Ericsson and Huawei DSLAMs remotely.
• Configured IPTV services, bitstream access for other operators and customer CPE devices.

• ADSL
• VDSL
• DSLAM
• IPTV
• CPE