Skip to main content

Technical Expertise

A full-stack set of technologies, security practices, and engineering methodologies I leverage to build enterprise-ready, accessible, and scalable web applications.

Fullstack & Core Engineering

  • Golang
  • TypeScript
  • JavaScript (ES6+)
  • React & Next.js
  • Node.js
  • Tailwind CSS
  • REST API Design & Integration
  • Figma to UI (pixel-perfect)
  • Object-Oriented Programming (OOP)
  • UI Animation & Interaction
  • Accessible Interfaces
  • Design Tokens

Backend & Systems Engineering

  • Golang HTTP Servers & Concurrency
  • Golang Routing & Middleware (chi)
  • Writing SQL Directly (no ORM)
  • Database Transactions & Row Locking
  • Idempotency Keys (prevent duplicate actions)
  • Structured Logging & Request Tracking
  • Error Recovery, Graceful Shutdown & Health Checks
  • BFF: a small server layer between browser and API
  • Monorepo Project Structure
  • Docker Builds & Container Health Checks
  • Deployment to Railway, Neon & Vercel

Database & Backend Architecture

  • PostgreSQL
  • MySQL 8
  • Prisma ORM
  • Database Structure Design & ERD
  • Data Constraints & Triggers
  • Query Optimization & Indexing
  • Database Migrations & Seeding
  • Multi-Tenant Data Isolation
  • Schema Versioning & Data Migration
  • Soft Delete & Filter by Owner

Security & Authentication

  • Authentication with NextAuth.js
  • Role-Based Access Control (RBAC)
  • Secure Session Tokens & Cookies
  • Input Validation (Zod / Sanitization)
  • XSS & CSRF Prevention
  • Environment Variables Management
  • Data Encryption
  • Searching Encrypted Data
  • Audit Logging That Cannot Be Edited
  • Secure Password Storage
  • Webhook Signature Verification
  • Rate Limiting per User and IP
  • Timing-Attack Prevention
  • Server-Side Access Control & Content Gating
  • Health Data Integration (FHIR R4, BPJS VClaim)

Quality Assurance & Workflow

  • Unit & Integration Testing
  • React Testing
  • Turning Requirements into Technical Specs
  • Agile & Scrum Methodology
  • Version Control (Git/GitHub)
  • Docker & CI/CD (GitHub Actions)
  • Vitest & Go Unit Testing
  • Playwright Browser End-to-End Testing
  • Strict TypeScript Setup
  • Accessibility Contrast Auditing
  • Deployment to Vercel, Railway, Neon & Google Cloud Run

AI & Emerging Technologies

  • AI Coding Agents (opencode, Google Antigravity)
  • AI API Integration (Gemini / OpenAI)
  • AI Prompt Engineering for Features
  • AI-Augmented Development Workflows
  • Progressive Web Apps (PWA) & Offline Support