I design, modernize and operate business-critical SaaS platforms and
data-intensive software systems in the .NET ecosystem. As a software
architect and senior .NET developer, my work combines hands-on engineering
with architecture, integration, security by design and the long-term
evolution of software products.
What I do
I help software products mature by connecting business goals, operational
risks and external requirements to practical technical direction. That
includes system boundaries, core components, deployment models, security
choices, database design, integration patterns and reliability work in
production systems.
Architecture perspective
I treat architecture as a response to business goals, risks and external
requirements. Good technical direction makes continuity, recoverability,
security boundaries, scalability, performance, explainability and
auditability explicit, while keeping the system feasible for the people
who have to build, change and operate it. I prefer architecture that can
be implemented, tested, explained and supported in production.
Selected work
SaaS platform architecture
Long-term architectural responsibility for a multi-tenant SaaS
platform serving 300+ tenant environments on approximately 24 VPS
hosts. Work included the transition from desktop and on-premise
deployments to hosted service delivery, CI/CD, internal tooling,
capacity planning and reliability improvements.
Government and regulated domains
Software for municipal real estate management and public-sector
integrations, including StUF 2.04/3.10, SOAP interfaces,
PKI-overheid, mTLS and tenant-aware routing across hosted
environments.
System integration
Integration-heavy systems across payment platforms, financial systems,
government registers and organizational boundaries. Work included PSP
abstractions, iDEAL integrations, secure message routing, data
processing algorithms and technical impact analysis.
Research & thinking
I hold an MSc in Computer Software Engineering, completed cum laude,
with the thesis Enabling Users to Enforce Privacy. The research
focused on privacy-by-design architecture, threat modeling, requirements
engineering and secure document-processing systems.
My recent work also includes a trust-separated backup architecture that
separates production, validation, storage and recovery domains. The
design focuses on independent validation before retention and avoiding
co-location of stored backup artifacts with decryption capability.