Work Experience
Infrastructure & Software Architect - (Andorra Research & Innovation) | 2026 - Present
Infrastructure & Network Security
- Modernized core physical and virtual network architecture, expanding throughput and resiliency using managed switches configured with Layer 2 network protocols, Port Security, Link Aggregation, and VLANs.
- Overhauled physical data center and rack infrastructure, including cabling cleanup, structured re-labeling, hardware replacement, and out-of-band management setup.
- Migrated legacy physical telephony to cloud-based VoIP solutions, eliminating dedicated telephony switching hardware.
- Implemented end-to-end network segmentation and enterprise Wi-Fi deployment for both wired and wireless users.
- Deployed redundant FreeRADIUS architecture to enforce 802.1X access control, port security, and dynamic VLAN assignment across the organization.
- Hardened perimeter security by configuring Next-Generation Firewalls. with Intrusion Prevention Systems and granular traffic rules matching segmentation policies.
- Configured secure remote access and site-to-site connectivity using encrypted VPN protocols.
- Migrated legacy virtualization environments to Proxmox VE to streamline VM deployment and optimize server resource utilization.
- Designed and executed a comprehensive 3-2-1 backup strategy with ZFS filesystem snapshotting for disaster recovery and ransomware resilience.
- Performed low-level data recovery on failing legacy drives and established encrypted disk imaging policies for long-term secure archival.
- Implemented resilient core network services by deploying redundant DNS infrastructure and centralized DHCP management.
- Provisioned and maintained central enterprise storage systems and file sharing protocols.
Software Development
- Migrated key application services to Google Cloud Platform, improving system scalability, availability, and cloud resource management.
- Implemented data ingestion protocols for a Data Lake, orchestrating data flows from heterogeneous sources including IoT devices, different databases, FTP servers, and flat files.
- Created processing and transformation pipelines in Python and R to clean, structure, and prepare complex datasets for downstream Data Science models and analytics.
Notable Projects
- Rebuilt infrastructure: performance-driven, security-first design
- G.U.I.A - (Unified Warning Indicators Management): A survey platform that collects and analyzes demographic data from youth, elderly, and vulnerable populations to generate indicators providing real-time insight into national social conditions, with a dashboard for tracking societal trends across multiple demographic segments.
Senior Software Developer - (Absolutely Snow) | 2025 - 2026
Software Development & Project Leadership
- Led the development of a full-stack travel reservations platform for B2B clients, featuring accommodation/flight/activity booking management, invoice generation, and client portals.
Senior Software Developer - (Undercoverlab) | 2019 - 2025
Software Development & Project Leadership
- Led project incubation, analysis, and full-stack development across CRMs, SaaS, and mobile applications. (NestJS, NextJS, React, Vue, React Native, PHP, Redis, MongoDB, Mysql, Puppeteer, Supabase, Sashido)
DevOps & Infrastructure
- Managed full lifecycle deployment, maintenance, and security of distributed IT infrastructure globally (Unix/Linux)
- Implemented CI/CD pipelines to automate deployments and containerize applications using n8n, Docker, PM2, FTP, SFTP
- Established observability stack with Prometheus for monitoring and Loki for centralized log ingestion
- Applied secure interconnection protocols for critical systems isolated from public internet exposure
Notable Projects
Metriguest — Hospitality analytics solution
SaaS platform for analyzing financial, reservation and customer sentiment data to generate tailored reports and make strategic business decisionsDigital Signature API - PAdES Electronic Signing Platform
Designed and implemented RESTful API for PAdES (PDF Advanced Electronic Signatures) generation that supports all four certification levels: B (basic), T (timestamp), LT (Long-Term), LTA (Long-Term Archive) with integrated timestamp authority certifications to comply with European certification standards - ETSI EN 319Business management Management Bot - Conversational AI platform via WhatsAp
Developed from scratch a WhatsApp-based booking assistant powered by OpenAI API for natural language conversations. Built custom message queue middleware to orchestrate conversation state and prevent race conditions in multi-user sessions Implemented intent recognition for schedule queries, service catalog browsing, staff availability, and specialty filtering Delivered human-like conversation flow with context persistence across chat sessions
Software Developer - (Andbank) | 2018 - 2018
Software Development & Infrastructure - (Contract)
- Lead and developed a disaster recovery and restoration system for network devices configuration. Built a PHP administrative portal with custom vendor-specific connectors for switches, routers, and firewalls (D-Link, Fortinet, Palo Alto, Netgear). Enabled rapid device configuration backup and restore operations to ensure business continuity in failure scenarios.
Software Developer - (Andbank) | 2017 - 2017
Software Development - (Contract)
- Developed a software capable of performing centralized backups of VoIP devices and also managing them remotely from a centralized platform.
Junior Software Developer - (R&C Associats) | 2017 - 2019
Software Development
- Development and maintenance of various custom-built websites in production using Laravel. Deployment and maintenance of websites based on Joomla, WordPress, and Drupal.
Infrastructure
- Migrated specific on-premise infrastructure to AWS cloud (S3, EC2, DynamoDB, CloudFront). This involved deploying applications and automations scripts to interact with AWS API, such as for example, automate some critical long-term backups from S3 to Glacier, among other related tasks
IT Support Technician
- Provide IT support to third-party companies regarding email, backups, and general computer systems.
Security
- On-demand penetration testing performed on both infrastructure and web applications.
Open Source Contributions
- OSS-Contribs: Personal index of upstream bug fixes, patches, and code maintenance submitted to various open-source projects, focusing on system utilities, package management, and software modules.
- Open Source Personal Projects: You can find some of my open source projects on the
/projectssection of this site, or on my GitHub / Codeberg.
Professional Development
- Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
- Rootkits and Bootkits
- Malware Development Course
- Hacking, 2nd Edition
- Serious Cryptography: A Practical Introduction to Modern Encryption
- Understanding Cryptography, A Textbook for Students and Practitioners
- An Introduction to Mathematical Cryptography
- Learning Python, 5th Edition
Education
- Bachelor’s Degree in Computer Science (126 ECTS), (University of Andorra)
- Advanced VET in Development and Networks, (Aixovall Professional Training Center)
- Intermediate VET in Microcomputer Systems and Networks, (Aixovall Professional Training Center)
Online Courses
Competencies
System Administration
- HPE, Fujitsu Bare metals (iLO, iRMC)
- Debian, Ubuntu, Fedora, FreeBSD, OpenBSD, Clonezilla
- VMware ESXi, Proxmox VE, Proxmox Backup, QEMU, libvirt, Docker
- FreeNAS, QNAP, Nextcloud, ownCloud
- FortiGate, OPNsense, pfSense, OpenWrt
- iptables, nftables, pf (FreeBSD / OpenBSD)
- Suricata, Snort, ModSecurity
- FortiSwitch, UniFi Switch, D-Link, Cisco. (L2, L3)
- OpenVPN, WireGuard, IPSec
- NSD, BIND9, Unbound, DNSdist
- ntpd, Chrony
- Dnsmask, dhcpd (OpenBSD)
- FreeRadius, daloRadius
- SAMBA, FTP/S, NFS, WebDAV
- Certificate Authority
- Nagios, Netdata, Zabbix, Prometheus, Grafana, Loki
- nginx, apache2, caddy, haproxy
- Eclipse Mosquitto MQTT
- git, cvs, bash
- OpenSSL, GnuPG
Databases
- MongoDB, DynamoDB
- MySQL, MariaDB, SQLite, PostgreSQL
- Redis, DragonflyDB
- BigQuery
Programming Languages
- HTML, CSS, Javascript, TypeScript
- PHP
- Bash
- Python
- Golang
- R
Frameworks
- ReactJS
- VueJS
- AstroJS
- NestJS / Express.js
- NextJS
- React Native
- FastAPI
DevOps & CI/CD & Automations
- GitLab CI, GitHub Actions
- Ansible
- n8n
Cloud Computing
- AWS (EC2, S3, Lambda, DynamoDB, CloudFront)
- GCP (GCE, Cloud Storage, Cloud Functions, BigQuery)