Eduardo – Golang, React, Typescript

A multi-tenant SaaS platform that combines CRM capabilities with BPMN 2.0-based business process automation, enabling organizations to manage customer relationships while designing, executing, and monitoring operational workflows. The platform includes a BPMN modeler with integrated AI assistance, real-time process monitoring, business activity analytics, and a public REST API. Built on Next.js 15 with App Router in a Turborepo monorepo architecture.

• Designed and built a BPMN 2.0 process execution engine from scratch using Event Sourcing and CQRS, covering the full lifecycle, including the parser, compiler, event store, read-model projections, and node handlers (StartEvent, UserTask, EndEvent, and Gateways);
• Implemented the multi-tenant authorization layer using CASL with four organization roles (MEMBER, ADMIN, OWNER, and OPERATOR), defining permission rules and server-action guards;
• Built an AI Gateway abstraction layer and integrated a real-time streaming AI chat panel (SSE) into the BPMN modeler, with conversation history persisted in the database;
• Developed the BPMN instance viewer with a live state overlay for the OPERATOR role, enabling visual monitoring of running process instances;
• Built the BAM (Business Activity Monitoring) dashboard with per-group pagination and server-side filtering for process metrics;
• Wrote server actions for process model management, organization members, and form schemas using next-safe-action with Zod validation.

A TLS certificate lifecycle management platform that helps organizations manage, renew, and govern digital certificates at scale. The project focused on a certificate blocklist capability that prevents unwanted certificates from being renewed, supporting compliance, operational control, and certificate inventory management. The functionality was migrated from a legacy Java service to a modern Go-based architecture as part of a broader platform modernization effort.

• Owned the end-to-end migration of the blocklist functionality from the Java service to its Go replacement;
• Used Claude to analyze the existing Java and Go codebases, generating visual dependency maps and feature-consumption summaries across 3–5 interconnected microservices communicating via REST, Kafka, and RabbitMQ;
• Reimplemented the feature in Go while preserving contract compatibility, allowing dependent services to operate without changes;
• Wrote and executed PostgreSQL migrations to move the underlying data to the new service's database;
• Designed a synchronization strategy between the legacy and new databases during rollout, ensuring no record offsets or data loss while both services remained live;
• Coordinated the cutover process so downstream services could transition to the Go service with minimal risk.

An enterprise platform for securing and managing machine identities across cloud and on-premises environments. The work focused on services responsible for integrating with secrets management providers and synchronizing certificates across customer cloud infrastructure, helping organizations maintain secure and consistent certificate operations at scale.

• Contributed across the stack on two Go and React microservices, one focused on secrets management integrations and the other on cloud certificate synchronization;
• Developed and shipped features on both the backend (Go) and frontend (React) sides of the product;
• Served as the team's Security Champion, participating in regular meetings with the central security team and prioritizing security-related issues and bug fixes alongside ongoing product work;
• Mentored two developers on frontend practices, helping them improve React patterns, code quality, and code review feedback;
• Performed code reviews and helped maintain the engineering quality bar across both services.

A developer platform for exploring, testing, and understanding a federated GraphQL API used across multiple services. The tool provided a self-service environment for schema discovery and query prototyping without relying on production introspection, improving developer productivity while maintaining security requirements. It integrated with existing authentication systems and supported safe access to production-backed data.

• Built a GitLab CI pipeline that extracted and deployed the federated GraphQL schema to a publicly accessible location, allowing the Playground to consume it without relying on live introspection;
• Forked and upgraded the official GraphQL Playground from React 16 to a modern React version, resolving related dependency and build issues;
• Customized the Playground UI to align with the company's branding and internal workflows;
• Integrated the tool with the existing SSO by leveraging shared session cookies across subdomains, enabling users to run authenticated queries without handling or exposing API tokens;
• Delivered a self-service environment where internal teams could explore the schema and prototype queries against the production API safely.