Systems that hold without a team
A multi-tenant SaaS built and operated alone, scoped in the lot with the operator. No platform team: the rigidity comes from the constraint, not the headcount.
The crew
Principle
01
A single crease defines two surface families. Flat becomes load-bearing through continuous curvature, with nothing added.
Every agent bounded. Every sensitive action gated. Production, secrets, IAM and protected branches sit behind a human who cannot be routed around.
Read the methodSelected work
A multi-tenant parking platform, taken from operator discovery through architecture, build, deployment and operations.
Seven years shipping production web and mobile applications with React, TypeScript and Node.js for companies across the US, Canada and Latin America. Comfortable working directly with users and business stakeholders: scoping requirements in context, prototyping fast, and owning deployment and operations end to end without a dedicated platform team.
Recent work is applied AI: integrating language models into user-facing product features, and building agent systems with scoped tool access, least-privilege permissions, human approval gates and automated verification. Currently completing a post-graduate certificate in AI and machine learning at UT Austin.
An orchestrator delegates to five specialized agents, each holding a least-privilege permission set. Nothing sensitive moves without a human: production, secrets, IAM roles and protected branches sit behind an approval gate that no agent can route around.
The shape below is the real permission topology, not an illustration of one.
The crew
| Node | Role | What it is | Reaches directly |
|---|---|---|---|
| Orchestrator | Orchestrator | Delegates work to five specialized agents and halts on any sensitive action. | CI/CD agent, Deploy agent, Security & IAM agent, Backup agent, QA agent |
| CI/CD agent | Agent | Owns pipeline definitions and the automated quality gate. | GitLab pipelines, OpenAPI lint, 36 contract tests |
| Deploy agent | Agent | Ships to four environments; production requires a human. | Dev, QA, Hotfix, Terraform IaC, 4-service Docker Compose, Human approval gate |
| Security & IAM agent | Agent | Proposes secret, role and branch-protection changes. Executes none of them alone. | Human approval gate |
| Backup agent | Agent | Snapshots and schema migration integrity. | Snapshots, 27 migrations |
| QA agent | Agent | Runs the contract and assertion suites before any merge. | 36 contract tests, 58 requests, 251 assertions, 6 SQL contract tests |
| Human approval gate | Approval gate | Every sensitive action stops here. 100% of production deploys are manually gated. | Production, Secrets, IAM roles, Protected branches |
| GitLab pipelines | Surface | Pipeline definitions and runners. | — |
| OpenAPI lint | Surface | Spec conformance on every change. | — |
| 36 contract tests | Surface | Service contract assertions. | — |
| 58 requests, 251 assertions | Surface | Postman-Newman regression collection. | — |
| 6 SQL contract tests | Surface | Row-level security and RBAC invariants. | — |
| Dev | Surface | Environment 1 of 4. | — |
| QA | Surface | Environment 2 of 4. | — |
| Hotfix | Surface | Environment 3 of 4. | — |
| Production | Surface | Environment 4 of 4. Reachable only through the gate. | — |
| Terraform IaC | Surface | VPC, subnets, security groups, DNS. | — |
| 4-service Docker Compose | Surface | Postgres, API, Nginx reverse proxy, worker. | — |
| Secrets | Surface | Gated. No agent holds a write path. | — |
| IAM roles | Surface | Gated. Permission changes need a human. | — |
| Protected branches | Surface | Gated. Direct pushes are refused. | — |
| Snapshots | Surface | Point-in-time recovery set. | — |
| 27 migrations | Surface | Versioned Firestore to PostgreSQL star schema. | — |
An orchestrator that holds no credentials, a delegation request with ten required fields, and nine actions that stop for a human. The top lane is the part most agent systems leave out: a human developer skips agent governance entirely, and still lands in front of the same manual gate.
Loading the delegation flow
Every node traces to a file: the ten-field request format and the nine sensitive actions come from the delegation policy, rollback and reporting from the subagent charters.
Open the full viewerMulti-tenant SaaS · founder and sole engineer
A parking management platform taken from operator discovery through architecture, build, deployment and operations. Offline-first so a cashier keeps working through network loss, and per-tenant configuration so one codebase serves many operators without forks.
Contract · product engineering
Workflow automation built on large-language-model and speech integrations, with the state architecture designed around asynchronous model responses so the interface stayed predictable when calls were slow or failed.
Contract · frontend systems
Scalable frontend systems for a national news platform: onboarding flows, navigation, and a reusable component library that cut duplicated UI work across multi-domain properties.
Contract · dashboards and reporting
Dashboards and data visualisations turning operational data into business insight workflows, with REST API enhancements to serve reporting views by period, category and status.
Contract and full-time work across the US, Canada and Latin America, from enterprise kiosks to a high-traffic media platform to a SaaS I own outright.
Jul 2025 — Present
StoicParking · Austin, Texas
Scoped requirements in the lot with parking operators, then built and operated the platform end to end: a multi-tenant SaaS with offline-first sync, role-based access, an operational analytics layer, and four deployment environments with manually gated releases. No platform team.
Dec 2024 — May 2025
Contract · Remote, Canada
Separated UI, state and integration layers in a SaaS frontend so reusable modules could ship faster. Led the state architecture around asynchronous model responses, keeping behaviour predictable when calls were slow or failed.
Jun 2023 — Sep 2024
Contract · Remote
Built an inventory management system with role-based workflows for users, permissions and operations. Proposed and iterated the UI for each role with stakeholders before implementing the approved direction.
Jul 2022 — May 2023
Contract · Raleigh, North Carolina
Migrated a frontend to React functional architecture and TypeScript patterns, then led a UI rebranding across shared modules through reusable component, hook and service patterns.
Apr 2022 — Sep 2022
Remote
Translated product requirements into scalable technical solutions, balancing performance, maintainability and delivery constraints with engineering implementation.
Aug 2021 — Apr 2022
High-traffic media platform · San Francisco
Built React and TypeScript features for onboarding, navigation and content-heavy workflows across multi-domain systems, with SSO and secure token-based API communication.
Apr 2021 — Aug 2021
San Francisco
Turned Figma designs into reusable React building blocks wired to backend workflows, and extended the API surface the frontend consumed in the same engagement.
Jul 2018 — Apr 2021
Bogotá, Colombia
Developed enterprise web and mobile applications supporting multi-channel customer experiences across browser, mobile and self-service kiosks, including OTP and biometric validation in transactional systems.
In progress
Post Graduate Certificate in AI and Machine Learning
University of Texas at Austin
Business applications
Jun 2026
Forward Deployed Engineer Foundations
Revature
Credential FDE-FP-00005
2023
Bachelor of Engineering
Universidad Surcolombiana · Neiva, Colombia
Electrical, electronics and communications
Austin, Texas. Comfortable in the room with the customer and in the codebase the same afternoon.