IHK-certified software developer (Fachinformatiker Anwendungsentwicklung, Hamburg, 2025) with hands-on experience building production backend systems.
- Built a BaaS white-label platform on AWS ECS with PCI DSS 4.0 compliance (Laravel, MySQL, Docker)
- Developed a React frontend for vehicle customs digitization with CI/CD via GitHub Actions
- Designed and shipped REST APIs with OAuth2/OIDC (RFC 6749/7636), PostgreSQL advisory locks for concurrent provisioning, bulk operations (up to 100 items/request), idempotent endpoints, and sliding-window rate limiting
- Built internal RAG documentation system with pgvector + semantic search
Open to: Backend, Fullstack, DevOps, IT Operations, IT Support roles in Germany.
Backend
Frontend
Databases & Cache
DevOps & Cloud
|
|
|
| Project | Stack | Highlights |
|---|---|---|
| amnezia-fast-api | FastAPI, PostgreSQL, Redis, Docker | Strategy pattern (pluggable SSH/Docker transports), PostgreSQL advisory locks for concurrent IP allocation, bulk provisioning with partial failure handling, idempotent endpoints, Prometheus metrics, zero-knowledge key management |
| qr-code-bot | Python, aiogram 3, PostgreSQL, Redis | Clean Architecture + CQRS + Mediator with pipeline behaviors, 2600+ tests, domain events with event-sourcing bus, Redis cache stampede prevention, circuit breaker, ThreadPoolExecutor for CPU-bound QR generation, TON payments |
| oauth2 | Node.js, Express, oidc-provider, MariaDB | OAuth2/OIDC authorization server (Authorization Code + PKCE), RS256 JWT + per-user symmetric signing for granular revocation, multi-tenant RBAC, token blacklisting, 3-phase client registration with DB transactions |
| telegram-proxy | Python, aiogram 3, PostgreSQL, Redis | SELECT FOR UPDATE SKIP LOCKED for concurrent config assignment, distributed Redis locks, SHA-256 dedup config sync, HMAC webhook security, automatic pool replenishment pipeline |
| free-bot | Python, aiogram 3, PostgreSQL, Redis | Defense-in-depth: mutual TLS (TLS 1.3 min), sliding-window rate limiting via Redis sorted sets, input sanitization middleware (XSS/SQLi/path traversal detection), hardened Docker (non-root, read-only rootfs) |
| molehole | Astro, TypeScript, Traefik, Docker | Production i18n site (DE/EN/RU), build-time QR generation as data-URIs, IndexNow post-build submission, multi-stage Docker build, live at molehole.de |
German -- C1 | Russian -- Native | English -- B1
