Juan PabloNaranjo

Self-employed · four clients, four sites in production

I take projects from a conversation with a business owner through to something running on a server with a certificate on it. React and TypeScript on the front, Node and MySQL behind, deployed on Linux boxes I provision and maintain myself — NGINX, PM2, TLS renewal, and the occasional 11pm "the site is down".

The work includes a multi-tenant platform with role-based access and audit logging, a booking system, and an AI newsroom app pulling from five external APIs, where rethinking how it called the model cut running costs by roughly a factor of ten.

Sertecpet

Help desk and troubleshooting across physical machines and virtual ones. Partway through, the organization was hit by the BlackSuit ransomware group, and I spent the rest of the summer on recovery — restoring virtual machines, rebuilding backups, and getting data back onto systems people needed that day. It's the reason I take security seriously rather than treating it as a checklist.

Terraform · AWS

I had been setting up client servers by hand, the same way every time, which is a bad habit waiting to become an outage. So I rewrote the whole arrangement as Terraform: a VPC split into public and private tiers across two availability zones, a database that lives where the internet can't reach it, encryption keys that rotate, and credentials generated into Secrets Manager instead of sitting in a file somewhere. Security groups reference each other rather than hardcoded IP ranges, so the rules describe trust instead of addresses.

Capstone · React, TypeScript, Node, MySQL, Docker

A system for small businesses still running their stock on spreadsheets: three permission levels, 38 requirements, and a schema designed so that changing a product's price today doesn't quietly rewrite what a customer paid last year. There are 53 tests across six layers — unit, API, end-to-end, security, accessibility, load — and they run on every push, because I would rather a pipeline tell me I broke something than a client.

A browser game built in an afternoon to find out what an agentic IDE is actually good at. Mostly it was good at the boring parts.