10+ years building scalable backend systems, APIs, and cloud infrastructure. Based in the Philippines, working with teams globally.
I'm a Software Architect based in Binangonan, Philippines with 10+ years of experience building backend systems, REST and GraphQL APIs, and cloud infrastructure on AWS. I currently lead backend architecture at Booky, where I set engineering standards, mentor a team of engineers, and own the technical direction of the platform.
My work sits at the intersection of system design and hands-on engineering. I don't just draw architecture diagrams — I build and ship the systems myself. From database design and API development to CI/CD pipelines and infrastructure optimization, I stay close to the code.
Outside of work, I build full-stack products from scratch. My latest project, Citadel, is a multi-tenant SaaS platform for managing gated communities — a Go backend, a React frontend, and a fully self-hosted deployment on my home server.
I work daily with AI coding tools including Claude Code, Codex, Gemini, Windsurf, OpenCode, and Antigravity, and have integrated them into how my team works as well.
Multi-Tenant Subdivision Management SaaS
Full-stack SaaS platform for managing gated communities. Three role-scoped portals (admin, member, staff), full-cycle approval workflows for payments, gate passes, amenity bookings, construction clearances, and vehicle stickers. Built from scratch and deployed on a self-hosted home server.
Go REST API with type-safe PostgreSQL queries, JWT auth with silent refresh, and multi-tenancy injected via middleware. Frontend on Cloudflare Pages; backend and DB self-hosted on ZimaOS via Portainer.
Lambda to Step Functions to Firehose to S3 to Glue to Athena to DynamoDB. Transforms and analyzes event data with low-latency access to aggregated insights. Fully serverless.
API Gateway with custom Lambda authorizers providing role-based access per client using unique API keys. Fully managed via AWS SAM as infrastructure-as-code.
Runs Athena queries on scheduled intervals via EventBridge, aggregates results, and stores them in DynamoDB. Fully automated, serverless, and cost-efficient.
Migrated legacy Jenkins pipelines to GitHub Actions. Cleaner, faster, fully version-controlled CI/CD with reusable workflows, automated testing, and environment-specific deployments.
Full-stack calendar-based expense tracker built on Go and React, backed by DynamoDB, and deployed privately on a self-hosted homelab. Accessible via Tailscale only.
As the product scaled, enabling or disabling experimental features across mobile and web clients required code redeployments. This slowed release velocity and increased the risk of regressions when toggling new features across platforms.
Built a centralized feature flag system powered by AWS AppConfig, allowing controlled rollouts using a JSON config file. The Go backend retrieves and caches the latest config in memory for fast evaluation. React and mobile clients consume the same config from an exposed API endpoint, keeping feature behavior in sync across platforms without any redeployments.
As client integrations increased, access control became hard to manage and audit. The existing auth layer used static shared tokens with no fine-grained permissions, revocation control, or per-client monitoring — making it difficult to enforce secure, scalable access across multiple APIs.
Designed and built an RBAC system using API Gateway with custom Lambda authorizers, fully managed through AWS SAM. Each client gets a unique API key linked to specific roles and permissions. When a request comes in, the Lambda authorizer validates the key, looks up the associated permissions, and injects authorization context into the request before it reaches the backend services.