Centralized Backend Authorization & Policy Middleware
Centralized policy enforcement, JWT claim transformation, and role-based access control (RBAC) middleware designed to eliminate authorization drift across backend services.
I build software across the stack, and go deeper when systems get difficult.
Software Engineer working across product development, backend systems, infrastructure and developer tooling.
Featured Systems & Projects
Production systems, infrastructure, and engineering case studies.
Open-Source Contributions & Developer Tooling
Upstream contributions to Linux package ecosystems, language server wrappers, and editor tooling across Nixpkgs, Neovim plugins, and developer automation.
Declarative Multi-Host NixOS Infrastructure
Reproducible multi-machine configuration, self-hosted Attic binary caching, and automated flake validation for developer environments.
Consulting & Advisory
Services & Consulting
Available for selected part-time engagements focusing on deep technical problems, architecture, and developer productivity.
01
Software Development & Modernization
Full-stack product delivery and code modernization for existing systems requiring clean architecture and maintainability.
02
Backend Systems, APIs & Auth
High-performance backend services, REST/gRPC APIs, database persistence, and secure authentication/authorization pipelines.
03
Developer Tooling & CI/CD
Fast, dependable build pipelines, automated testing harnesses, and tooling that removes friction from everyday developer workflows.
04
Nix & Reproducible Environments
Declarative, reproducible development environments, Nix flakes, remote build setups, and robust multi-machine configurations.
05
Technical Debugging & Root-Cause Investigation
Deep problem-solving across abstraction boundaries to isolate tricky concurrency, performance, network, or runtime regressions.
Technical Writing
Articles on systems, Nix, backend engineering, and developer tooling.
Architecting a declarative multi-machine Nix flake with self-hosted binary caching to eliminate redundant rebuilds across devices.
nix
nixos
infrastructure
devops
caching
Investigating why bundled language servers fail on non-FHS Linux, tracing ELF interpreters with strace, and building hermetic wrappers.
nix
nixos
debugging
linux
tooling