Twelve years across cybersecurity, AI/LLM, legal tech, and internet infrastructure. Today that means threat intelligence and IoT intrusion detection at Microsec. Before that, GPT-4 contract analysis at Juddoc and 1,500+ commits to PeeringDB, the database behind internet peering.
Products and platforms I designed or built end to end, two of them on the App Store and one guarding industrial networks. Each one has real users, a real deployment, and a clear line around what I owned.
Core contributor to the open-source interconnection database used by thousands of networks. Led the Search v2 rewrite on ElasticSearch with scoring, spatial search, and KMZ/CSV export over 70,000+ records, and shipped MFA enforcement, rate limiting, and per-user permissions.
A multi-tenant Go platform that helps Indonesian marketplace sellers capture evidence of how a parcel left the warehouse, so they win shipping disputes. Offline-first Flutter app scans the waybill, stamps photos, and syncs when online.
Microsec's intrusion detection and compliance platform, deployed into customer networks that are often offline or air-gapped. Snort v3 and a Go packet processor watch live traffic, scikit-learn classifiers flag anomalies per device, and an OpenCTI-based threat intelligence platform enriches every alert with CVE data and MITRE ATT&CK mapping.
A livestock-feed retailer and the system that runs it: a FastAPI and PostgreSQL backend with Shopee OAuth, orders synced across Shopee, Tokopedia, Lazada and TikTok Shop, and an iOS warehouse app for order picking and packing. 17,000+ orders fulfilled in 2025 and a 4.9 rating across 14,400+ reviews.
Permission-aware SaaS connectors for AI memory. It receives webhooks from Slack, Microsoft Teams, Outlook, ClickUp and HubSpot, verifies their signatures, and delivers each change exactly once to a memory, search or RAG system, stamped with who is allowed to see it. One Postgres, an outbox table and a worker; no broker.
An app for ages 4+ covering the alphabet, numbers, Hijaiyah letters and Iqra reading, with matching and writing activities. Go and PostgreSQL backend, CDN-delivered content, offline-first so lessons keep working without a connection, and progress stored on the device. It collects no data and uses no third-party tracking, which shaped much of the architecture.
A multi-module Django ERP for an Australian health-retail chain that ties Lightspeed POS, Shopify, Odoo, and KeyPay together. Includes procurement and purchase orders, bidirectional Shopify product sync, and a GPT-4 pipeline that extracts practitioner consultation documents.
A digital-score SaaS where publishers, institutions, and musicians share scores and keep personal markings in synchronised layers. Django REST backend with ElasticSearch search, group and institution management, setlists, and CSV import/export.
At Microsec I work on MicroIDS, an intrusion detection platform for IoT and OT networks, and the OpenCTI-based threat intelligence platform that feeds it. The stack runs in customer environments that are often offline or air-gapped, so every piece has to install, upgrade, and recover without calling home.
RabbitMQ; multi-threaded workers parse rules and extract CPE strings.Server-Sent Events, secured with HttpOnly cookies.Six companies in twelve years, remote since 2021, across Singapore, India, the United States, and Indonesia.
Highlighted items are what I use daily. The rest I have shipped with in production and can pick back up quickly.
Thirty-plus certifications across cloud, security, and DevOps. The ones that matter most for the work above, with issue dates.
I'm open to remote senior backend, full stack, and Python/AI engineering roles, and to well-scoped contract work. Tell me what you're building and where it hurts.
Based in Kediri, Indonesia (UTC+7). Comfortable overlapping with Asia-Pacific, Europe, and US mornings.
