Security

• Improved GIS map performance 10x on PostgreSQL

  Improved geographical map application performance by 10x through strategic database transition from MSSQL to PostgreSQL, including the data cutover, optimizing processing and data security.

• Ran 10 PostgreSQL and MS SQL servers on Ubuntu

  Designed, deployed, and maintained 10 PostgreSQL and MS SQL servers on Ubuntu Linux VPS, ensuring optimal server performance and reliability.

• Wrote 1,000 RBAC rules to secure Linux servers

  Enhanced data security by implementing 1,000 RBAC rules for developers, application instances, PostgreSQL, MS SQL, and other Linux servers, preventing unauthorized access; documented with Ansible automation.

• Designed a function‑first PostgreSQL data layer

  Designed a PostgreSQL function‑first data layer — 1,275 stored functions across 34 schemas — so every read and write goes through a function the database can grant, rather than through a table.

• Built Stripe and in‑app purchase entitlements

  Built the payments and entitlements layer — Stripe alongside Apple and Google in‑app purchase — gating the directory, search and export through an 11‑table access model checked on the server.

• Wrote a scope rule after a credential leak

  Wrote a scope rule into the repository after a restructure carried another company's inventory, firewall allowances and prose into it — and kept the quarantined residue under the secret scanner rather than excluding it.

• Know the licence of everything you ship

  Audited 644 Rust crates for licence compatibility on every build, and proved the check fires by rewriting one crate's licence and by moving the pinned core revision without regenerating.

• Measured 13 addresses with no tracking

  Measured thirteen addresses from the web server's own access log alone — no cookie, no tracker and no third‑party service — masking the client network as each line is written, and folding the result into a permanent archive of 21 daily counts and 20 monthly facets.

This work is part of what we offer as Security & Access Management, Data Governance & Quality, AI Agent Security, Backend & API Development, Database Administration (DBA), Database Design & Modeling, Site Reliability & Monitoring and System Administration.

Building something that needs this? Get in touch.