Mateusz – Java, Spring, Spring Boot

An edge-to-cloud video security software that connects on-premise edge devices deployed at customer locations to the company's broader platform. Mainly used by US police departments, schools, museums, and other institutions, but also deployed in other countries.

• Led the end-to-end migration from Azure IoT Hub to a self-hosted NATS, from broker evaluation through zero-downtime rollout, architecting zero-trust security via TPM 2.0 mTLS and fine-grained, subject-based authorization.
• Integrated third-party video management systems over REST, SOAP, GraphQL, WebSocket, and WebRTC.
• Collaborated with the UI team to build event-driven APIs for edge onboarding, camera discovery, and PTZ control.
• Optimized an edge module, reducing camera discovery time by ~95%, leveraging JFR and virtual threads.
• Treated dependency hygiene as part of the job: every service Mateusz contributed to saw its vulnerability count go down.
• Delivered 3 internal tech talks to 40+ engineers on Java Remote Debugging, NATS, and TLS Authentication.
• Routinely used agentic coding tools across development while staying cost-conscious.

Part of the bank-wide migration to a new core system. Mateusz worked in the mortgages department, redeveloping the system into cloud-native microservices (writing business logic from scratch, etc.).

• Built 2 well-tested, cloud-native, event-driven microservices backing www.ing.pl within a Spotify-model Squad.
• Obtained approvals for the services and production deployment, primarily through technical documentation.
• Collaborated with cross-functional teams to configure infrastructure and the production deployment pipeline.
• Collaborated with analysts to refine requirements into actionable sprint deliverables.
• Designed cold archival and halved shared-library event persistence overhead to meet the cost-cutting directive.
• Handled false-positive security alerts, e.g., by incremental hash matching to prove a flagged binary was benign.
• Added long-awaited OpenAPI support to an internal tool, earning an award nomination from the principal engineer.
• Provided daily guidance to a less experienced colleague.

Poland's leading white-label stock trading and brokerage platform powering major banks. The team was modernizing the system from a monolith to microservices deployed on a private cloud.

• Contributed to over a dozen microservices and was the main author of 4.
• Took an active part in designing performant solutions and setting the direction, including for dependent teams.
• Worked closely with the DevOps team to set up a private cloud Kubernetes environment.
• Proposed and introduced integration tests with Testcontainers, including examples and a developer guide.
• Found and fixed several design and implementation issues in the Redis caches.
• Onboarded and evaluated 2 developers. Their contract extensions depended mainly on Mateusz's feedback.
• Consistently received a disproportionate share of team code reviews, eventually prompting a management inquiry. Developers explained that they kept routing PRs to Mateusz because of his thorough bug-catching.

5 web apps (Quote & Buy, agent onboarding, policy servicing), partner REST APIs, and extended core systems for a branch of a global insurance company.

• Delivered end-to-end features, handling everything from SQL query tuning to styling web interfaces with CSS.
• Prevented a client-wide password reset campaign by proposing and developing a Keycloak module that added support for legacy Oracle Database hashes and automatically upgraded them to a modern algorithm upon login.
• Onboarded 3 developers and served as their go-to technical resource.