OPERATIONAL - 7 TENANTS · AWS · REMOTE (ITALY)
I build the platformother engineers ship on.
I build multi-tenant SaaS platforms end to end - the Terraform that provisions them, the API they run on, and the product customers actually use. Staff Software Engineer - 8+ years in software, 5+ hands-on with AWS, and ~3 years leading cloud platforms: from AWS infrastructure-as-code to the shared backend services an entire product fleet runs on.
Open to Staff / Lead platform roles · Remote from Italy (CET), async-first · US and EU teams
Selected work
4 case studies · 7 portals · 15 moreFleet portals
7 tenant portals in production on the core API and control-plane.
▸ also shipped (4)
Multi-channel notifications - Twilio SMS + IVR voice and AWS SES email with CSV lists and templated messaging.
Batch pipeline syncing multi-account customers in 5K-record batches - idempotent, tracked, self-reporting.
Pipeline converting Oracle CCS reference docs into LLM training data - validated JSONL to S3/Bedrock.
Primary engineer on four tenant launches; core contributor on two.
▸ earlier work (11)
Wholesale food and beverage ordering and payments platform (contract).
Content authoring for the enterprise digital-experience platform - product features and test automation at scale.
Page and layout design tooling for the enterprise digital-experience platform - product features and test automation at scale.
GIS mapping and hunting platform.
Click-and-collect AGV system - IoT mobile app driving a robotic arm to fetch shop supplies, with a web tracker for job completion (React, React Native, Python).
Web application for buying and selling metal scrap (React, Express).
Photography, franchise and services web platform - portrait studio site and booking (React, Express).
Talent recruitment and management portal.
Package delivery mobile and web app for customers and riders, published on Google Play (Ionic, Adonis, AWS, Socket.io).
E-commerce marketplace app with raffles, messaging and a wallet on Android and iOS, published on Google Play (Ionic, Adonis, Socket.io).
Offline truck-delivery report mobile app (Ionic, SQLite).
Experience
2017 - presentStaff Software Engineer, Platform & Product
- Staff Software Engineer, Platform & Product · Sep 2025 - Present
- Senior Full-Stack Engineer (Cloud) · May 2023 - Jan 2026
- Primary author (78%) of the core API middleware connecting 7 utility tenant portals to Oracle CCS via OAuth 2.0 - the auth, data-access, and integration patterns the whole fleet is built on.
- Sole author of the internal developer platform: a Terraform control-plane (9 stacks, ~60 AWS resource types) with a Fastify/React dashboard that self-service provisions every client environment.
- De-facto technical lead of a 5-engineer team, reporting to the COO/CEO - set the platform standards the fleet adopts.
- Own ~$110K/yr of AWS across the production and test fleet - CI/CD, Datadog/CloudWatch observability, and FinOps tooling driving right-sizing and Fargate-Spot savings.
- Built the team's AI tooling: Bedrock auto-remediation that opens fix PRs, a Claude PR reviewer in CI, and an agentic AI-SDLC pipeline with human approval gates.
- Owned production go-live readiness for 6 client launches.
- Closed an SSN identity-verification gap enabling account takeover - fixed wrong-person matches on ~2.4% of accounts, added attempt lockout, and ZIP-based disambiguation against the brute-forceable last-4 space.
- Built a fleet-wide customer-interaction audit trail: a capture hook mapping authenticated actions and page views, tenant-scoped/IDOR-safe admin history API with CSV export and rate limiting, and 90-day retention.
- Designed and shipped a multi-account usage-extract feature (backend API + frontend modal) letting multi-account customers export combined billed usage as one CSV, closing an admin-bypass IDOR gap found in review.
Senior Full Stack Engineer
- One of 3 core engineers on an ISO 27001-certified biopharma strategy SaaS in private beta with enterprise pharma clients.
- Originated two subsystems from scratch: a DMMF-driven strategy clone engine and the Edge archive/restore isolation system.
- Contributed to real-time collaboration (GraphQL subscriptions), OpenAI-backed generation features, and platform security (OWASP/IDOR, JWT sessions).
- Originated a data-dependency subsystem - GraphQL contract, resolver, registry-driven modal - that warns before archiving or deleting finalised entities with dependents, then cascades the archive/restore across them.
- Built out the Edge brand-strategy module - Belief Shift, Narrative, and competitive-landscape recap tabs with per-group finalise - and instrumented its LLM-backed prompt generation with llm_event telemetry.
▸ earlier roles (7)
Operating principles
how the work gets doneBoring, proven tech.
Clever is what someone decodes at 3am. Standard library before a dependency, a dependency before a framework.
Root cause, not symptom.
Bugs get reproduced end to end before they get fixed. One guard in the shared path beats a patch in every caller.
Security is the default.
Every endpoint ships with authorization checks. IDOR is assumed possible until proven otherwise.
Smallest change that works.
Tight scope, flagged adjacencies, verified before commit. The best code is the code never written.
Capabilities
cloud → frontendCloud & Infra
- AWS - ECS Fargate, CloudFront, Cognito, RDS, ElastiCache, KMS, Secrets Manager, WAFv2, SES, S3, Route 53, VPC, ALB, Elastic Beanstalk
- Terraform
- Docker · Kubernetes
- Linux · OpenSearch
Platform & DevOps
- Internal Developer Platform
- Multi-tenant provisioning
- Bitbucket Pipelines · GitHub Actions
- FinOps - Cost Explorer
AI on the Platform
- AWS Bedrock (Claude)
- AIOps auto-remediation
- Agentic SDLC pipelines
- AI code review · LLM knowledge bases
Backend & Data
- Node.js - Fastify, Express
- TypeScript · Python
- REST APIs · GraphQL · Prisma
- PostgreSQL · MongoDB · Redis/BullMQ
- Oracle Utilities CCS · Invoice Cloud
Observability & Security
- Datadog RUM/APM · CloudWatch · Sentry
- Structured logging
- OWASP/IDOR · JWT · WAFv2 · Snyk
Frontend
- React · Redux
- TypeScript
- Styled Components · Tailwind
- Next.js
Contact
async-first · CETACCEPTING- STAFF/LEAD PLATFORM ROLES · CONSULTING · AWS / TERRAFORM / MULTI-TENANT
jajapabatao@gmail.com