Senior Software Engineer focused on platform engineering and identity security. I modernize legacy production systems and make them secure, automated and boring to operate.
What I work on
- Identity & access: Keycloak (realms, clients, token exchange, impersonation), OAuth 2.0 / OIDC, SSO, least-privilege service accounts
- Platform: Kubernetes, Helm, OpenTofu / Terraform, GitLab CI/CD, zero-downtime deployments
- Privacy & compliance: GDPR data-rights systems (export, erasure, retention)
- Backend: TypeScript, Node.js, Fastify, PHP, PostgreSQL, Elasticsearch
Recent work: moving a decade-old PHP monolith from bare metal to Kubernetes, managing Keycloak as code, and building an end-to-end GDPR data-rights platform.
Open source
- FoPost-social-Laravel: Laravel package for publishing to 11 social platforms · 440+ ⭐ · maintained for ~10 years, recently rebuilt as a framework-agnostic core with a thin Laravel wrapper
- fopost-mcp: MCP server exposing 14+ tools to Claude, Cursor and other MCP clients
- notice.js: lightweight, dependency-free JavaScript notification library
Connect