Engineering Stories

Systems I've built, in short. Four companies, one thread: making complex platforms reliable.

Qualys

2025 — Present
☁️
Cloud security

Multi-cloud agentless workload protection platform

The distributed engine that scans customer cloud servers for risk without installing anything on them. One scan fans out into thousands of tasks across four clouds.

  • 🛰️AWS · Azure · GCP · OCI
  • ⚖️Fair per-tenant scheduling
  • 🚀Faster Azure provisioning
  • 🛡️Self-healing at scale
100K+events / day
60%faster provisioning
15+integrations
KafkaRedisOracleTerraformJava
🧭
AI · Compliance

Continuous Compliance Automation Framework — built from scratch

An agentic, RAG-powered framework that evaluates ISO 27001, NIST and SOC 2 controls against real evidence, with answers you can trace and trust.

  • 📚RAG over compliance frameworks
  • 🕸️LangGraph agentic workflows
  • ⚖️LLM-as-a-Judge, DeepEval & RAGAS
  • 🔗Control-centric knowledge model
  • 📦Versioned, rollback-ready artifacts
  • 🔎Elasticsearch hybrid retrieval
PythonKafkaAsyncIOElasticsearchLangGraphTerraformRedisAWSAzure

Globant

2021 — 2025
💳
Payments

Hosted tokenization and PCI scope

Card data goes straight from the browser to Stripe or PayPal and never touches our servers, which shrinks the PCI footprint dramatically.

$20M+annual volume
15%faster checkout
StripePayPalNode.jsPostgreSQL
🔐
Access control

Policy-based authorization

A deny-by-default policy engine that replaced simple roles and made feature gating just another audited permission.

Denyby default
1engine, full audit trail
NestJSTypeScriptRedis

CasaOne

2020 — 2021
📦
Operations & logistics

Faster, event-driven warehouse operations

Made inventory and logistics systems quicker and resilient to slow partners.

9–13s → <2sAPI latency
Real-timeinventory sync
30%less manual effort

TrueSparrow

2018 — 2020
🏋️
Fitness platform

Moxie Studios

Core modules of an online fitness platform: auth, video and messaging, with social sign-in, serverless video compression and real-time chat.

  • 🔑OAuth2: Facebook, Instagram, Google
  • 🎥FFMPEG video pipeline on Lambda
  • 💬WebSocket chat, 50K+ DAU
  • 🌍Open source: OST Cache
Node.jsExpress.jsMySQLCassandraSocket.ioAWS LambdaAWS SES
⛓️
Web3

OST Platform

REST APIs for Ethereum-based token economies, hardened for production and tuned for throughput.

10K+monthly users
~30%fewer incidents
~25%more throughput

Open source: OST Block Scanner and OST View.

Node.jsWeb3DynamoDBMySQLRabbitMQMochaChai