RenoSafe
WebAlive
A multi-tenant construction-finance platform. Technical lead for a five-engineer team, owning the payment and escrow rails and the database-enforced tenant isolation.
- Django
- DRF
- Vue.js
- PostgreSQL
- Keycloak
- Stripe
- AWS
- Kubernetes
Highlights
- Technical lead on a greenfield build (27K lines of backend, 45K of frontend, 1,200+ automated tests), serving as release gatekeeper and authoring the architecture decision specs.
- Hardened PostgreSQL row-level security to fail closed, closing a class of cross-tenant data leaks the test suite could not catch: split database roles so the app runs as a non-superuser, added a readiness probe that blocks traffic when isolation is off, and fixed tenant-context gaps on webhooks, provisioning, and admin cross-firm reads.
- Delivered the payment and escrow rails single-handedly: a full Stripe subscription lifecycle (idempotent payment intents, webhook activation, abandoned-checkout void, reconciler) and a double-entry escrow ledger with invariant checks and hold/release/refund flows.
- Removed dashboard and list-view N+1 queries with batched, owner-scoped read paths, locked the gains in with query-count regression tests, and resolved production incidents from unbounded feeds, missing timeouts, and a connection leak.
- Set the team's engineering standards for security, migrations, review, and deployment, and built AI review agents that enforce them on every pull request.