Labs
Selected projects - architecture, constraints, outcomes.
AI / Spatiotemporal / Research
Similarity-based human mobility prediction across 225K+ users and 4 cities using DTW, GMM blending, and interpretable pattern transfer
A production-grade trajectory prediction algorithm for the SIGSPATIAL GISCup 2025 challenge. The algorithm finds users with similar movement patterns and blends their behaviors with Gaussian Mixture Models to predict where an individual moves next. It reaches competitive GEO-BLEU scores and stays interpretable.
AI / Workflow Systems
Interview transcription and AI chat built around Celery chains, embeddings, and context routing
Built for a client processing large volumes of interviews. Celery orchestrates the recordings, the system embeds uploaded documents, and a tag system controls which context slices each interview can reach, so the AI chat answers from the right material rather than the whole corpus.
Mobile / Factory Ops
Cross-platform factory ERP app used daily on-site for stock tracking and task management
We built the full Flutter client and Django REST backend for a production app that workers in a factory use every day. The project rewards reliability and usable flows over launch-page polish.
Performance / CI
Reducing Docker build time by -96%
I took over a slow CI pipeline, reworked the shell scripts, restructured the Dockerfiles for layer caching, and added multi-stage builds. The result cut delivery time and carried over to several other projects.
Low-Code / Cloud
Power Automate and PowerApps frontends extended with a service running on Azure AKS
We built an order management solution on Microsoft's low-code stack, then pushed past the platform limits with a Flask microservice on Azure AKS. A case of working with the stack a client already runs instead of forcing a rewrite.
Web Delivery
Angular frontends on Django backends with Playwright coverage across multiple projects
Several production frontend implementations for agency clients: component architecture, routing, reactive forms, API integration, and end-to-end coverage in Playwright. This is the steady client work that carries a project.
Security / Hardening
JWT, OAuth2, Entra ID, CORS/CSRF, and Kubernetes RBAC configured for production setups
We configured production Django APIs with OAuth2, JWT, and CORS/CSRF enforcement to match client requirements instead of the shipped defaults. SSO runs through Azure Entra ID via Django Allauth. Kubernetes clusters use RBAC and namespace isolation.
Open Source / Security
SVG threat detector PoC built after hitting upload vectors that basic validation misses
This proof-of-concept goes past MIME checks. It parses SVG structure and inspects embedded script behavior, event handlers, and injection surfaces. It works as a case study because it shows how you reason when a standard package solves half the problem.
DevOps / Zero Trust
Zero-trust SSH access via Cloudflare Tunnel
We replaced an open port-22 firewall rule with a Cloudflare Tunnel and Access policy. Developers SSH through Cloudflare's network, and the server holds only an outbound connection to Cloudflare's edge.
ERP / Ecommerce
Selectline <-> Shopware integration with 12K clients, 25K products, and sub-minute sync cycles
Three years as product owner on a production ERP-to-webshop integration syncing orders, clients, products, and images. The Selectline API was unreliable by design, so the sync pipeline had to be idempotent, retry-heavy, and maintainable under same-day hotfix pressure.