Lead Platform & Security Engineer. I build, run and secure production platforms end to end: infrastructure, application and identity security, and incident response. I modernize legacy systems and make them secure, automated and boring to operate.
What I work on
- Security: hardening of Kubernetes, containers and web stacks, container-image scanning (Trivy) in CI, same-day vulnerability response (critical PHP and Node.js RCE advisories), WAF and Cloudflare Access, rate limiting and anti-abuse, secrets rotation
- Identity & access: Keycloak (realms, clients, token exchange, impersonation), OAuth 2.0 / OIDC, SSO, least-privilege service accounts
- Platform: Kubernetes, Helm, OpenTofu / Terraform, GitLab CI/CD, zero-downtime deployments
- Privacy & compliance: GDPR data-rights systems (export, erasure, retention)
- Backend: TypeScript, Node.js, Fastify, PHP, PostgreSQL, Elasticsearch
Recent work: moving a decade-old PHP monolith from bare metal to Kubernetes, managing Keycloak as code, and building an end-to-end GDPR data-rights platform.
Building
- FoPost: an AI agent for social media. Write once, publish to 30+ platforms, with a REST API and an MCP server for AI assistants
Open source
- FoPost-social-Laravel: Laravel package for publishing to 11 social platforms · 440+ ⭐ · 100+ forks · maintained since 2017, recently rebuilt as a framework-agnostic core with a thin Laravel wrapper
- fopost-mcp: MCP server exposing 14+ tools to Claude, Cursor and other MCP clients
- notice.js: lightweight, dependency-free JavaScript notification library
Connect