Web & API
FleetElem, GPS fleet management
Fleet tracking SaaS: a customised Traccar server with missions and drivers, a React web app with real-time maps, geofences and reports, an admin panel, and an Android app for the field.
Role: Architect & full-stack developer
- React
- MapLibre
- Java
- Kotlin
- PostgreSQL
- WebSocket
Web & API
Port operations platform
Business applications for a port authority: reference data, berth assignment, bay plans and cargo handling, built as .NET microservices with React front ends sharing one component library, and synchronised with the port's call system.
Role: Lead developer & architect
- .NET
- React 19
- TypeScript
- NATS
- PostgreSQL
Web & API
Central authentication server
Single sign-on for all the port applications: signed JWT tokens with keys published over JWKS, users from an LDAP directory, and role-based permissions enforced in every service.
Role: Designer & developer
DevOps
GitOps delivery for the port platform
Split a monorepo into independent services with one shared CI pipeline, a Helm chart per service and Argo CD on k3s. Staging and production are promoted by tag, and the same charts install on the client's own servers.
Role: DevOps lead & trainer
- GitLab CI
- Nexus
- Helm
- Argo CD
- k3s
DevOps
Multi-tenant Kubernetes for FleetElem
Production cluster driven by Flux CD: one isolated instance per client with its own database, domain and GPS port, secrets encrypted with SOPS, automatic certificates, and Telegram alerts.
Role: Infrastructure owner
- Flux CD
- k3s
- SOPS
- cert-manager
- TimescaleDB
Industrial OT
Refinery SCADA modernization
Migrated a legacy SCADA system to a redundant, secure architecture with OPC UA connectivity, historian integration and real-time dashboards for operations.
Role: Lead OT engineer
- SCADA
- OPC UA
- PI System
- IEC 62443
Industrial OT
OT/IT data bridge & IIoT gateway
Designed a secure data bridge pushing plant data from Modbus/PLC sources to a time-series database and cloud, via an edge gateway with MQTT Sparkplug B.
Role: Solution architect
- Modbus
- MQTT
- Docker
- Grafana
- Python
Industrial OT
OT network segmentation & DMZ
Implemented a Purdue-model network segmentation with an industrial DMZ, firewalls and monitoring to harden a plant against cyber threats per IEC 62443.
Role: OT cybersecurity lead
- Purdue model
- Firewalls
- IEC 62443
- Monitoring