Open to international remote opportunities

I build software.
I secure it. I ship it.

Software Engineer focused on Web & API Development, Application Security, and Cloud & DevOps.

I build practical software systems with a focus on clean engineering, reliable infrastructure, and security at every layer.

View My Work Download Resume
Let's Connect
Built withJavaScriptTypeScriptReactNext.jsNode.jsPostgreSQLDockerGitLinuxApplication Security

About

Engineering with security in mind.

At the intersection of Software Engineering, Application Security, and Cloud & DevOps.

I build practical software systems with a focus on clean engineering, reliable infrastructure, and security at every layer. The progression is intentional:

Software Engineering → Web & API → Cloud & DevOps → Application Security → DevSecOps

Security isn't a separate career — it's a specialization within engineering. I don't just ship features; I test how they behave when things go wrong, then fix and improve.

Build

Clean, maintainable systems

Deploy

Containerized, automated

Test

Probe auth, APIs, inputs

Secure

OWASP-aware, hardened

How I Engineer

Understand → Design → Build → Test → Secure → Deploy → Improve

01

Understand

Requirements, risks, constraints

02

Design

Architecture & data flow

03

Build

Clean, typed implementation

04

Test

Unit, integration, authz probes

05

Secure

Threat model & hardening

06

Deploy

Docker, CI/CD, cloud

07

Improve

Monitor, learn, iterate

Current Focus

Three connected disciplines, one coherent career.

Software Engineering

Building modern web applications, APIs, backend systems, and practical software products.

TypeScriptReactNext.jsNode.js
Learn more →

Application Security

Understanding vulnerabilities and building security into applications from the beginning.

OWASPAPI SecuritySecure Coding
Learn more →

Cloud & DevOps

Learning and applying deployment, automation, containerization, CI/CD, and cloud infrastructure.

LinuxDockerGitHub Actions
Learn more →

Currently Building

Active work — updated as I ship.

Secure Task API

In Development

Building a production-style API while exploring auth, API security, containerization, and CI/CD.

65% — In Development

Node.jsExpressPostgreSQLDocker

Architecture Lab Diagrams

Planning

Documenting system architectures with security boundaries and trade-offs.

30% — Planning

System DesignThreat Modeling

Selected Work

Evidence over claims — real systems, real trade-offs.

View all projects
softwareIn Development

Secure Task API

Production-style REST API with JWT auth, RBAC, and security hardening — exploring authentication, validation, and CI/CD.

Node.jsExpressPostgreSQLDockerJWT
Case Study →
softwareDeployed

Portfolio Platform

This site — premium engineering portfolio. Built to demonstrate clean engineering, accessibility, and security headers.

Next.jsTypeScriptTailwind CSSMDX
Case Study → Code Demo

Build. Break. Fix.

I don't just build applications. I test how they behave when things go wrong.

01

BUILD

Create the system — clean architecture, typed APIs, thoughtful data flow.

02

BREAK

Test auth, authorization, APIs, inputs, and attack surfaces. Probe like an attacker, think like an engineer.

03

FIX

Remediate weaknesses, improve architecture, and ship a stronger system.

Application Security Lab

Security work built around real engineering — Problem → Discovery → Impact → Remediation → Retest → Lesson.

API Securityhigh

IDOR in Task Resource

Insecure direct object reference on /tasks/:id allowed access to another user's tasks.

IDORBOLAOWASP API1
View lab

Architecture Lab

System diagrams with security boundaries and trade-offs.

Architecture

Secure Task API — Reference Architecture

Production-style API with auth, validation, rate limiting, and containerized deploy.

[User] → [Next.js] → [API + Validation] → [Auth/RBAC] → [Service] → [PostgreSQL]
                              ↘ [Redis Rate Limit]
                    [Caddy TLS] ← [Docker] ← [GitHub Actions CI]
View lab

Experience

Building, shipping, and improving — timeline of growth.

Software Engineer — Building in Public

Independent / Open Source

Building practical web systems with focus on clean engineering, security at every layer, and reliable deployment.

2024 — Present Remote
  • • Built REST APIs with authentication, authorization, and input validation
  • • Designed frontend with Next.js, TypeScript, and accessible UI patterns
  • • Containerized applications with Docker and CI/CD via GitHub Actions
  • • Tested authorization and API surfaces; documented remediation
Next.jsNode.jsTypeScriptPostgreSQLDocker

My Engineering Journey

2024

Foundations

JavaScript, HTML/CSS, Git, Linux basics

2025

Web & API Engineering

React, Next.js, Node.js, PostgreSQL, REST APIs

2026

Security & DevOps

OWASP, API security, Docker, CI/CD, cloud deployments

Technical Skills

Only what I can defend in an interview — core vs currently exploring.

Software Engineering

JavaScript

Core language for web development

proficient

TypeScript

Type-safe development

proficient

React

Component-based UI

proficient

Next.js

Full-stack React framework

proficient

Node.js

Server-side JavaScript

proficient

REST APIs

API design & integration

proficient

HTML

Semantic markup

proficient

CSS

Styling & layout

proficient

Tailwind CSS

Utility-first CSS

proficient

Backend & Data

PostgreSQL

Relational database

comfortable

SQL

Querying & modeling

comfortable

API Development

RESTful design

proficient

Authentication

JWT, sessions

comfortable

Authorization

RBAC

comfortable

Cloud & DevOps

Linux

Server & CLI

comfortable

Git

Version control

proficient

GitHub

Hosting + Actions CI

proficient

Docker

Containerization

comfortable

CI/CD

Pipelines

comfortable

Vercel

Deployments

comfortable

Security

Application Security

SDLC security

comfortable

API Security

OWASP API Top 10

comfortable

Web Security

OWASP Top 10

comfortable

Secure Coding

Validation, encoding

comfortable

Security Testing

Manual assessment

familiar

Currently Exploring

Learning — not yet claimed as expertise.

AWSKubernetesTerraformAdvanced DevSecOpsCloud SecurityOAuth 2.1

Code & Open Source

Selected repositories — no inflated stats, just real code.

secure-task-api

Production-style REST API — JWT, RBAC, validation, Docker

TypeScript public

portfolio

This site — Next.js 14, hardened headers, MDX

TypeScript public
View GitHub →

Engineering Notes

Long-form notes for learning and SEO — software, security, DevOps.

2026-03-10 • 8 min read

Building a Secure REST API with Node.js

A practical guide to building a REST API with security built in from the start.

Node.jsAPI SecurityBackend
2026-04-02 • 6 min read

Authentication vs Authorization

Authentication is who you are. Authorization is what you can do — and where APIs most often fail.

API SecurityAuthorization
2026-05-18 • 7 min read

Dockerizing a Full-Stack Application

From local Compose to production — multi-stage builds and non-root users.

DockerDevOpsNode.js
All notes
Open to opportunities

Available for remote & on-site roles

Software Engineering • Application Security • Cloud/DevOps • Internships • Junior • Contract

Recruiter? View Resume →

Let's build something meaningful.

I'm open to software engineering, application security, cloud/DevOps, internship, junior, and international remote opportunities.

Email Me LinkedIn GitHub
Remote • Open to relocation for right role
Open to opportunities
View my LinkedIn profile

No secrets collected. Falls back to your email client.