I build production software across product architecture, data, authentication, cloud delivery, and the engineering systems that keep change safe.
Lead software architecture and AI engineering at Mitiquete SAS.
309k+
unique source lines audited
18
owned repositories measured
24
high / critical findings
3
production travel platforms
Selected work
These are not interface exercises. They combine public product surfaces with private operational systems, data, permissions, migrations, and deployment work.
A production travel platform spanning global discovery, booking operations, content, authentication, media, and cloud delivery.
A tourism publishing and itinerary platform designed around structured content, arrival points, regional discovery, and reusable platform foundations.
Supporting systems
TripEuropa B2B
Production platform
International tour-operator portal. Led architecture, typed data flows, production readiness, and remediation of seven high-severity findings.
CMS Nova
Platform foundation
Schema-driven headless CMS foundation with localization, hybrid persistence, media workflows, and role-based administration.
Codex Desktop Linux
Open-source contribution
Updater compatibility work covering legacy bundles, Linux package rebuilds, defensive fallbacks, and regression tests.
Engineering approach
I start with ownership, trust, data flow, failure modes, and operational constraints. The interface comes after the system has a shape.
Authentication is not authorization. Every mutation, route, and storage path must preserve tenant, role, and ownership boundaries.
Coding agents accelerate implementation, but generated changes still pass typed contracts, tests, security review, and human judgment.
Production behavior, reproducible measurements, reviewable changes, and explicit tradeoffs communicate more than inflated titles.
Open source + research
My updater compatibility pull request adds defensive support for legacy bundle inputs and Linux package rebuilds, with regression coverage across RPM, Debian, Pacman, and Nix workflows.
Inspect pull request #991Documented and drove remediation of 24 high-severity or critical findings across production systems, with emphasis on authorization dominance and exposed mutation surfaces.
Delivered an invited talk at the Max Planck Institute for Security and Privacy on structural security risks in AI-assisted software systems.
About
I am a Colombian software engineer working across platform architecture, secure product delivery, and AI-assisted development. I care about systems that remain understandable after the demo is over.
Primary stack
TypeScript, Next.js, React, PostgreSQL, Prisma, Node.js
Additional work
Go, Python, C#, SQL, Linux, Docker, AWS, Vercel
Education
B.Sc. Software Engineering, expected 2027 · GPA 4.63 / 5.0