~/bpabatao

OPERATIONAL - 8 TENANTS · AWS · REMOTE (ITALY)

I build the platformother engineers ship on.

Lead Platform Engineer - 8+ years in software, 5+ hands-on with AWS. I own a multi-tenant portal fleet end to end: the Terraform that provisions it, the core API it runs on, and the AI tooling that keeps it moving.

view resume ↗
github ↗linkedin ↗email
8+
years in software
8
tenant portals
78%
core API authorship
$110K/yr
AWS under management

Operating principles

how the work gets done

Boring, proven tech.

Clever is what someone decodes at 3am. Standard library before a dependency, a dependency before a framework.

Root cause, not symptom.

Bugs get reproduced end to end before they get fixed. One guard in the shared path beats a patch in every caller.

Security is the default.

Every endpoint ships with authorization checks. IDOR is assumed possible until proven otherwise.

Smallest change that works.

Tight scope, flagged adjacencies, verified before commit. The best code is the code never written.

Experience

2018 - present
Jun 2023 - Present
New York, USA (Remote)

Lead Platform Engineer

ESC Partners / HometownHUB
  • Primary author (78%) of the core API middleware connecting 8 utility tenant portals to Oracle CCS via OAuth 2.0 - the auth, data-access, and integration patterns the whole fleet is built on.
  • Sole author of the internal developer platform: a Terraform control-plane (9 stacks, ~60 AWS resource types) with a Fastify/React dashboard that self-service provisions every client environment.
  • De-facto technical lead of a 5-engineer team, reporting to the COO/CEO - set the platform standards the fleet adopts.
  • Own ~$110K/yr of AWS across the production and test fleet - CI/CD, Datadog/CloudWatch observability, and FinOps tooling driving right-sizing and Fargate-Spot savings.
  • Built the team's AI tooling: Bedrock auto-remediation that opens fix PRs, a Claude PR reviewer in CI, and an agentic AI-SDLC pipeline with human approval gates.
  • Owned production go-live readiness for 6 client launches.
TypeScript · Fastify · React · Terraform · AWS · MongoDB · Oracle CCS
Mar 2024 - Present
Remote (freelance)

Senior Full-Stack Engineer

Nmblr
  • One of 3 core engineers on an ISO 27001-certified biopharma strategy SaaS in private beta with enterprise pharma clients.
  • Originated two subsystems from scratch: a DMMF-driven strategy clone engine and the Edge archive/restore isolation system.
  • Contributed to real-time collaboration (GraphQL subscriptions), OpenAI-backed generation features, and platform security (OWASP/IDOR, JWT sessions).
React · TypeScript · Node · GraphQL · Prisma · PostgreSQL · AWS
▸ earlier roles (5)
2022 - 2023
Senior Software Engineer (contract) - Ordermentum. Restaurant ordering and payment management for hospitality clients.
2022 - 2023
Senior Software Engineer - CoDev. GIS-based hunting/mapping systems and an internal talent-management portal.
2020 - 2022
Senior Software Engineer II - HCL Technologies. Product features at scale on HCL DX; automated test suites; led code reviews.
2019 - 2020
Software Developer - Zencomputes. Full-stack development, Singapore.
2018 - 2019
Mobile App Developer - Halcyon Digital. Mobile applications, Philippines.
2014 - 2018
BS Information Technology - Polytechnic University of the Philippines

Selected work

3 case studies · 7 portals · 14 more

Multi-Tenant Core API

One API, eight utility portals. OAuth 2.0 into Oracle CCS, per-tenant behavior composed from config, and authorization gates on every endpoint.

PRIMARY AUTHOR · 78%Fastify 5 · TypeScript · Zod · MongoDB · ECS Fargate
case study →

Terraform Control-Plane & IDP

Nine Terraform stacks and a provisioning dashboard that turn tenant onboarding into a templated workflow - Cognito to CloudFront, WAF to KMS.

SOLE AUTHORTerraform · Fastify · React · ~60 AWS resource types
case study →

AI-Augmented SDLC

Bedrock auto-remediation that opens fix PRs, a Claude reviewer in CI, and an agentic ticket-to-PR pipeline where humans keep every approval gate.

SOLE AUTHORAWS Bedrock · Claude · GitHub · Jira
case study →

Fleet portals

7 tenant portals in production on the core API and control-plane.

Delta Utilities
mydu.com ↗

Also shipped

Nmblr ↗

Biopharma strategy and real-time collaboration platform - clone engine, archive/restore, GraphQL subscriptions.

Campaign Manager

Multi-channel notifications - Twilio SMS + IVR voice and AWS SES email with CSV lists and templated messaging.

CCS ↔ Invoice Cloud Sync

Batch pipeline syncing multi-account customers in 5K-record batches - idempotent, tracked, self-reporting.

Bedrock Knowledge Base

Pipeline converting Oracle CCS reference docs into LLM training data - validated JSONL to S3/Bedrock.

Tenant Go-Lives

Primary engineer on MVU, Web Aruba, NEP, and Carmel launches; core contributor on Alex Renew and DelCo.

Earlier work

Ordermentum ↗

Wholesale food and beverage ordering and payments platform (contract).

HCL Digital Experience ↗

Enterprise digital-experience platform - product features and test automation at scale.

Basemap ↗

GIS mapping and hunting platform.

Hope Technik ↗

Click-and-collect AGV system - web and control UI.

Bambini Photography ↗

Portrait studio site and booking.

CoDev Internal Portal

Talent recruitment and management portal.

Kickstart Express

Parcel delivery mobile app for customers and riders (React Native).

Luckyah · Soon Beng Huat

Scrap and metal trading management systems.

Sobida Motors

Marketing site for a truck manufacturer.

Capabilities

cloud → frontend

Cloud & Infra

  • AWS - ECS Fargate, CloudFront, Cognito, RDS, ElastiCache, KMS, Secrets Manager, WAFv2, SES, Route 53, Bedrock
  • Terraform
  • Docker
  • Linux

Platform & DevOps

  • Internal Developer Platform
  • Multi-tenant provisioning
  • Bitbucket Pipelines · GitHub Actions
  • FinOps - Cost Explorer

AI on the Platform

  • AWS Bedrock (Claude)
  • AIOps auto-remediation
  • Agentic SDLC pipelines
  • AI code review · LLM knowledge bases

Backend & Data

  • Node.js - Fastify, Express
  • TypeScript · GraphQL · Prisma
  • PostgreSQL · MongoDB · Redis/BullMQ
  • Oracle Utilities CCS · Invoice Cloud

Observability & Security

  • Datadog RUM/APM · CloudWatch · Sentry
  • Structured logging
  • OWASP/IDOR · JWT · WAF · Snyk

Frontend

  • React · Redux
  • TypeScript
  • Styled Components · Tailwind
  • Next.js

Contact

async-first · CET

ACCEPTING- STAFF/LEAD PLATFORM ROLES · CONSULTING · AWS / TERRAFORM / MULTI-TENANT

jajapabatao@gmail.com
github ↗linkedin ↗resume.pdf · jul 2026 ↗