I build and operate environments across AWS (including IAM policies and roles), Google Cloud, Oracle Cloud and Azure, covering networking, storage buckets and tenancy setup. Edge and delivery run on Cloudflare Workers, Pages, DNS and WAF, with Contabo VPS hosts behind them, provisioned with Terraform and managed with Docker, Nginx, systemd and PM2. I also deploy on Netlify and Hugging Face.
I ship production backends in Node.js, TypeScript, FastAPI and Fastify on PostgreSQL and Redis, with Zod validation and OAuth 2.0 flows. Frontends are React and React Native (Expo), and delivery runs through GitHub Actions with real test coverage rather than vibes.
I run agents, RAG pipelines and multi-step automation in production using LangChain, MCP servers and n8n, with Gemini and self-hosted Qwen2.5-7B on Hugging Face. A deterministic trigger layer in front of the model stops casual chat from firing real-world actions.
Zero-trust network design, iptables hardening, Cloudflare WAF and AES-256-GCM encryption, with keys and data on separate hosts. I add monitored runtimes and an automated return-to-source routine so a tampered server restores itself from GitHub instead of staying compromised.
I design, build and ship websites: layout and visual systems, motion, responsive front-ends and the hosting underneath them — Cloudflare Pages and Workers, Netlify, Hugging Face, or a hardened VPS with Nginx. That includes DNS, TLS, WAF rules and self-hosted email on the same domain, so a client gets a site that is live and reachable, not just a design file.