Backend Developer & Software Architect (in progress) β SΓ£o Paulo, Brazil π§π·
I'm a backend developer with a strong focus on software architecture, authorization models, and application security. I care about building systems that are secure, maintainable, and designed to scale β not just code that works today.
- π Studying Multiplatform Software Development at FATEC Itaquera
- πΌ ~1.5 years of professional backend experience
- ποΈ Deep, ongoing specialization in authorization models (RBAC, ACL, DAC, MAC, ABAC) and cybersecurity
- π― Working toward senior backend / software architect roles, with longer-term entrepreneurial and international-market goals
- π I document everything I learn in structured Notion notes β with the long-term goal of mentoring other developers
- π Currently expanding into Java + Spring Boot as a second backend language
Languages
TypeScript JavaScript Java PHP Python C
Backend Frameworks
NestJS Spring Boot
Frontend
React Vue.js Next.js Tailwind CSS shadcn/ui TanStack Query
Messaging & Async Processing
BullMQ RabbitMQ Kafka Redis Pub/Sub
Databases
MongoDB (relational databases as well, in transaction-heavy service design)
Testing
Jest
Tooling & Platforms
Docker Git GitHub Notion GitBook
I build backend systems around solid architectural foundations rather than just shipping features:
- Domain-Driven Design (DDD) β aggregates, bounded contexts, domain events
- Clean Architecture
- Event-Driven Architecture β EventBus abstractions, Saga-style orchestration, pub/sub and point-to-point queue models
- SOLID principles and classic design patterns (Builder, Specification, and others), studied alongside OOP cohesion and software quality standards (ISO/IEC 25010)
- Micro Frontends with Module Federation
Authorization and secure-by-design backend development are my main specialization:
- Authorization models: RBAC, ACL, DAC, MAC, ABAC β including a hands-on "RBAC with permission override" (grant/revoke) implementation using NestJS guards and decorators
- Self-built cybersecurity curriculum covering the OWASP Top 10, API security, and NestJS-specific secure patterns
- Ethical pentesting practice with Burp Suite and HackTheBox
| Project | Description | Stack |
|---|---|---|
| VivaWatch | Elderly health monitoring platform (portfolio anchor / potential product) | NestJS, TypeScript |
| FitZap | WhatsApp AI agent for personal trainers | NestJS, BullMQ, OpenAI |
| Finance API | Financial domain modeling (orders, holdings, wallet lifecycle) with a full frontend | NestJS, React, Tailwind, shadcn/ui, TanStack Query |
| Subscription Service | Subscription management service with PIX Automatic webhook handling and end-to-end tests | NestJS |
| Autentique Integration | E-signature API integration | NestJS |
| authentication-authorization-studies | Applied studies on auth & authorization patterns | TypeScript |
| spring-boot-mongoDB | Spring Boot + MongoDB study project | Java |
| backend-products | Library management backend | PHP |
| DataStructure-Algorithms | Data structures & algorithms practice | C |
| CodePilot | Developer tooling project | TypeScript |
- Deepening message-driven architecture across BullMQ, RabbitMQ, Kafka, and Redis Pub/Sub
- Structured Java + Spring Boot roadmap (domain modeling β multi-tenant authorization β event-driven order management β security hardening)
- Ongoing cybersecurity curriculum and secure-backend practices
"An architect thinks in systems, not just in code."



