Engineering
Built the way it should be built
I build enterprise-grade, AI-native SaaS platforms with clean architecture, secure by default, event-driven, and extensible — from an empty repository to production.
The platform I built
A multi-tenant SaaS platform & module marketplace
Largely solo and end to end, I designed and built a production-grade, multi-tenant SaaS platform with an installable-module marketplace — .NET on the backend, a modern Angular frontend, and a strict engineering charter. Here is what it does and how it holds together.
Multi-tenancy with complete isolation
Database-per-tenant with AES-256-encrypted per-tenant connection strings, a five-step tenant-resolution chain, and zero shared tables.
Clean Architecture · DDD · CQRS
Layer boundaries enforced at the project-reference level, a MediatR command/query pipeline with logging, validation, caching, and transactions, and the Result pattern for expected failures.
Event-driven integration
A transactional outbox with RabbitMQ via MassTransit — at-least-once delivery, idempotent consumers, and a clean split between in-process domain events and cross-process integration events.
Security by default
Short-lived JWTs with rotating refresh tokens, BCrypt at cost-factor 12, O(1) permission checks from claims, defense-in-depth authorization, TOTP 2FA, OAuth/OIDC social login with PKCE, security headers, rate limiting, and GDPR-aware audit logging.
Installable-module marketplace
Signed, versioned modules loaded at runtime into isolated AssemblyLoadContexts with no redeployment — per-module databases and migrations, dynamic navigation and permissions, and published cross-module contracts with graceful NoOp fallbacks.
Real-time
SignalR hubs — JWT-authenticated, per-tenant groups — powering notifications, chat, and token-by-token AI streaming.
i18n & white-label
Multilingual from day one, with per-tenant branding and custom domains so the platform disappears behind each client’s brand.
DevOps & production
Docker and GitHub Actions CI/CD, self-hosted on hardened Ubuntu (Nginx TLS reverse proxy, SQL Server, Redis, RabbitMQ, structured logging, UFW + fail2ban + SSH hardening) and on Azure with managed services and Kubernetes — health checks, correlation IDs, slow-query logging, and full observability.
Dependencies point inward — the domain depends on nothing.
Every state change is captured once and delivered reliably.
How I work
The intelligent way of working
I lead and build with AI agents and AI engineering as a tech lead — orchestrating, reviewing, and shipping at a speed and quality the old, manual way can’t match. It’s not a gimmick; it’s how I hold a higher bar across more surface area.
AI-agentic by method
I orchestrate AI agents across the engineering loop — design, implementation, review, and tests — and stay the architect who owns every decision.
Source-verified, always
Before I commit to a library, an API, or a pattern, I verify it against the authoritative source. I don’t ship what was true a few years ago.
A hard quality bar
Zero build warnings, the full test suite green after every change, and migrations shipped with the change that needs them. No shortcuts, no “fix it later.”
Skills
What I work with
Grouped by where it matters — architecture first, tools second.
Architecture & Practices
Languages & Frameworks
Frontend
Cloud & DevOps
Data & Messaging
Blockchain
AI Engineering
Leadership
Selected work
Case studies
A few systems I’ve taken from problem to production.
Multi-tenant SaaS platform & module marketplace
Designed and built a production-grade, multi-tenant platform with an installable-module marketplace, from an empty repository — clean architecture, an event-driven core, and security by default.
National-token ICO
Delivered the engineering for a national-token sale that drew more than 112,000 investors — secure smart contracts on Ethereum and Tron, validated by extensive security review.
Fiat-to-crypto exchange
Built a fiat-to-crypto exchange on a microservices architecture, Dockerized and deployed to Azure — removing physical-server cost.
Multi-tenant crowdfunding platform
Architected and built a multi-tenant crowdfunding platform from an empty repository to production, and lead the cross-functional team that ships it.
Blockchain microservices platform
Built distributed .NET services communicating over gRPC for a blockchain platform — clean service boundaries and reliable messaging.
News-agency CMS
Engineered a scalable CMS for a major news agency end to end, hardening data security across millions of records and tuning caching, load balancing, and queries for high traffic.
Need this level of engineering on your team or product?
Whether it’s architecture, delivery, or leading the team that ships — let’s talk.