I build and operate the platform that backend services run on: infrastructure as code, deployment, observability, cost, and security. I come from backend engineering, so I work on both sides of that line.
Platform Engineer & DevOps · 2026-06-23 – present
- Brought an existing, console-built AWS environment under Terraform by importing live resources, with guardrails against destroy and drift
- Defined monitors and dashboards as code, moved alerting toward SLOs, and tracked down what monitoring silently missed
- Analyzed where the cloud bill comes from and cut costs without losing safety margins
- Hardened backend security: default-deny authorization in Spring Security, column-level encryption of personal data (AES-256-GCM via JPA converters), and secrets moved out of config files
TeamBind Inc. · Backend Engineer/CTO 2025-07-01 – 2026-06-22
- Designed and built microservices-based systems as the sole backend engineer, owning the full stack from infrastructure to application
- Operated a self-managed (on-premises) Kubernetes cluster, including incident response and troubleshooting
- Designed database schemas and data models for core services
- Developed both web and app-facing backend services end to end
| Project | Contribution | Pull Request |
|---|---|---|
| Spring Security | Applied the javadoc-warnings-error policy to the spring-security-aspects module, aligning it with the rest of the build |
#18855 |
| Micrometer | Documented Jakarta Mail instrumentation and registered it in the Observation instrumented-projects reference | #7256 |
| Project | Contribution | Pull Request |
|---|---|---|
| Spinnaker (Orca) | Fixed a race where a duplicate StartExecution delivery could move a completed pipeline back to RUNNING, using a conditional status update (SELECT ... FOR UPDATE) |
#8174 |
| Debezium | Fixed a regression in the generated MySQL DDL grammar where ALTER DATABASE without a database name failed to parse and stopped the connector |
#8220 |
| Debezium | Fixed the MariaDB and legacy MySQL grammars taking DEFAULT as a database name in ALTER DATABASE DEFAULT CHARSET ..., which silently skipped the charset change (follow-up requested by the maintainer) |
#8225 |
| Spring Batch | Truncated the execution context SHORT_CONTEXT by UTF-8 length so multibyte contexts no longer fail on Oracle (reproduced on Oracle 23) |
#5582 |
| Spring Cloud Config | Expired the Git refresh rate when /monitor receives a webhook, so refreshed applications get the new commit |
#3342 |
| Spring Boot | Made Docker Compose support fail fast on unsupported *_FILE credential variables instead of silently falling back to defaults |
#52120 |
| Spring AI | Added unit tests for ErrorLoggingObservationHandler |
#7125 |
