_experience

Experience

Staff engineer with 10+ years shipping production systems. I work spec-first, with agents, and still ship code every week.

// skills

AI engineering
LLM features in product, AI agents and tool use, MCP servers, retrieval and knowledge bases, prompt engineering (grounding, constrained output), Claude Code (skills, hooks, agents), Cursor, Copilot, OpenAI, Azure OpenAI and Anthropic SDKs
Backend and APIs
Node.js, TypeScript, Express, Azure Functions, REST and OpenAPI, GraphQL, Kotlin and Spring Boot (hexagonal), Prisma, Flyway, Laravel/PHP
Distributed systems
Event-driven architecture, Event Hubs, Storage Queues, SQS, transactional outbox, idempotent consumers, backfill and replay, Durable Functions
Data
PostgreSQL, MySQL, relational modeling and migrations, Redis, InfluxDB, Snowflake, MongoDB, DynamoDB
Frontend
React, Next.js (App Router, SSR), React Native, Tailwind, React Hook Form + Zod
Cloud and DevOps
Azure (Functions, Container Apps, IoT Hub, Key Vault, Application Insights), AWS (Lambda, SQS, SAM), Kubernetes, Terraform, Docker, GitHub Actions with OIDC
Quality and observability
Playwright, Cypress, Vitest, Jest, contract and integration tests, Datadog RUM, Bugsnag, Application Insights, incident response
Security and identity
OAuth 2.0, OIDC, PKCE, SSO, RBAC, Open Policy Agent, PII handling, CSP and dependency hardening
Leadership
Technical direction, architecture decisions, mentoring, code review, engineering standards, ADRs, spec-driven development, partner coordination, Scrum and Jira

// employment-history

  1. November 2024 to Present · Remote

    US consumer lending: loan origination, underwriting, fraud and abuse, identity and income verification, bank linking. I work spec-first: the spec, the technical design and the ADR come before the code.

    • Specified and built a manual bank-entry fallback to the bank-aggregation provider across the origination and decisioning services: hexagonal Kotlin and Spring Boot, PostgreSQL with Flyway, explicit aggregates and invariants, and transactional outbox events. Filed the ERD and the ADR.
    • Modernised the fraud-label taxonomy in the underwriting platform (Clojure), made labelling a first-class underwriting command, and wrote the matching Open Policy Agent authorization policies.
    • Shipped the identity-verification flow with a manual document-request fallback, and real-time feedback on uploaded paystubs, bank statements, tax returns and W2s through a document-intelligence integration.
    • Built the end-to-end test platform from nothing (Playwright, scheduled GitHub Actions runs, failure notifications, test-health reporting) and moved suites off Cypress. Published a shared metrics package adopted by five consumers.
    • Migrated the income-verification journey to Next.js end to end, built the prequalification journey (React Hook Form + Zod) with PII masking, ran a security-hardening pass (CSP, SRI, dependency and cipher upgrades) and moved staging onto new Kubernetes infrastructure.
    • Authored the team's shared agent skills and maintain the engineering knowledge base that agents and people read.
    • TypeScript
    • React
    • Next.js
    • Kotlin
    • Spring Boot
    • PostgreSQL
    • Flyway
    • Clojure
    • OPA/Rego
    • Laravel/PHP
    • GraphQL
    • Terraform
    • Kubernetes
    • Playwright
    • GitHub Actions
    • Datadog

  2. 7bf3fab Merge branch 'contract/exit83': nClarity direct hire · June 2023

  3. September 2021 to October 2024 · Medellín, remote

    Contracted through EXIT83 Consulting until June 2023, direct afterwards.

    A distributed IoT analytics SaaS platform on Azure for HVAC and refrigeration companies. Field devices stream telemetry through Event Hubs into Node.js services, a rules engine turns it into alerts, and React dashboards deliver it to customers.

    • Designed the backend as a TypeScript monorepo (pnpm, Turborepo): an Express REST API with 230+ documented routes, event-driven Azure Functions on Event Hubs and Storage Queues, Durable Functions for long-running exports, and shared contracts and adapter packages over MySQL (Prisma), InfluxDB, Redis and a Snowflake export.
    • Built the Next.js monorepo for the customer dashboard and the operations app, including the App Router and server-rendering migration. Led the database migrations, including a move off a document store to a relational model, and published typed contracts every frontend consumes.
    • Ran telemetry ingestion for a fleet that reached ~10k devices, was consolidated and is scaling again, plus firmware rollouts. After a 16-hour ingestion outage, I proved a zero-loss replay.
    • Modernised identity end to end: customer identity with MFA and account recovery, staff SSO over OIDC with just-in-time provisioning, OAuth authorization code + PKCE for the mobile app, and delegated access that retired shared support accounts.
    • Moved every deployment pipeline to OIDC federated identity with no stored credentials, wrote the Terraform re-platforming plan and brought hand-provisioned production resources under infrastructure as code.
    • Set engineering standards across in-house and partner teams (spec-driven development, CODEOWNERS, review gates), mentored engineers through code review, set technical direction with the COO and the Director of Product, and managed incident response across the platform, from security incidents to P0/P1 outages, with postmortems.
    • TypeScript
    • Node.js
    • Express
    • Azure Functions
    • IoT Hub
    • Event Hubs
    • Container Apps
    • Prisma
    • MySQL
    • InfluxDB
    • Redis
    • Snowflake
    • Next.js
    • React
    • Terraform
    • GitHub Actions

// education-and-certifications

  • Systems Engineer, Instituto Tecnológico Metropolitano, Medellín

    2012 to 2017

  • Microsoft Certified: Azure Developer Associate

    Earned March 2023