I build authentication infrastructure for microservice systems.
My main focus is designing and implementing OAuth2-based architectures that scale, stay secure under load, and don't turn into bottlenecks.
- OAuth2 / OpenID Connect Authorization Servers
- JWT & Opaque Token validation
- Permission systems (gRPC-based)
- Service-to-service authentication
- Multi-tenant IAM models
- Token lifecycle, key rotation & introspection
- Performance-oriented auth validation (L1/L2 caching)
Most of my work is backend-heavy and infrastructure-driven.
- Go (Fiber, gRPC, pgx)
- Spring Boot (Spring Authorization Server)
- PostgreSQL (normalized schema design)
- MongoDB
- Redis
- OAuth2 (Authorization Code + PKCE, Client Credentials)
- OIDC
- JWT (JWK rotation)
- Opaque tokens + Introspection
- mTLS (service authentication)
- Docker / Docker Compose
- Kubernetes
- Prometheus
- Cloudflare
Designing modular auth systems for distributed environments:
Authorization Server
→ Permission Service
→ Resource Services
The goal is simple: auth that is correct, fast, and maintainable.
Outside of coding: kickboxing. Same mindset — structure, discipline, precision.



