I build software that works so well you forget it's there.
I write software the way a good editor writes copy — cut until only what matters is left. Currently building full-stack platforms that combine AI, secure architecture, and product thinking.
Things I've shipped, tagged and versioned like the software they are.
ResuMaxxing — An AI career operating system
An end-to-end platform for resume tailoring, application tracking, and AI-driven document review. Decoupled Next.js frontend and async FastAPI backend, with GPT-4o handling tailoring and skill-gap analysis under strict anti-hallucination guardrails.
Eruscent — Institutional peer tutoring platform
A multi-tenant B2B SaaS connecting universities, departments, students, and tutors, with tenant isolation enforced down to the department level, behind an OWASP-hardened Spring Boot backend.
Writing on systems, decisions, and the occasional dead end.
A running log of what I'm learning, treated with the same rigor as a release note.
Designed and deployed v3.2.0 Editorial portfolio with vanilla JS dynamic architecture, GSAP reveals, and component-based routing.
Remediated 18 OWASP vulnerabilities in Eruscent — added Bucket4j rate limiting, multi-subdomain CORS matrix, and HMAC-SHA256 audit logging.
Migrated Eruscent identity layer from legacy JWT to Clerk JWKS with stateless RSA key verification and JIT auto-provisioning.
Built 4-layer AI prompt guardrail pipeline for ResuMaxxing with JSON-schema validation, 1-to-1 bullet matching, and domain isolation.
Refactored Leonexia codebase — converted 1,500+ lines of monolithic React into modular TypeScript components, achieving an 88% page size reduction.
The tools I reach for, and why.
Public blueprints of private systems.
Both platforms follow an open-specification model: the architecture is documented publicly in detail — system layers, data flow, security contracts, API domain maps — while the proprietary source code stays private. Good design should be explainable without exposing implementation.
How I think about software.
Where I've worked and what I built there.
Engineered a multi-tenant B2B SaaS platform from the ground up for institutional peer tutoring — University → Campus → Department hierarchy with strict per-department data isolation. Delivered a 3-department rollout approved on the basis of an early-warning analytics dashboard. Migrated legacy JWT auth to a Clerk/JWKS architecture, cutting backend auth overhead ~40% and eliminating ~1,400 lines of custom React forms. Remediated 18 OWASP vulnerabilities across rate limiting, CORS, and CSP.
Designed and shipped an AI career operating system end-to-end. Built the AI engine around strict anti-hallucination guardrails — JSON-schema enforcement, 1-to-1 bullet matching, domain isolation — to make GPT-4o reliable enough for user-facing resume tailoring. Implemented zero-downtime deployments via health-gated Alembic migrations and global billing via Lemon Squeezy HMAC-SHA256 webhooks. Ships as a web app and native iOS/Android via Capacitor from a single codebase.
Refactored 1,500+ lines of inherited, monolithic React code into a modular, reusable component library — reducing core page file sizes by 88%. Built custom TypeScript UI components that translated design specs into production-ready code, and decoupled hardcoded content into centralized data files to eliminate cross-functional coordination overhead on content updates.
I'm Kenneth — a full-stack engineer based in Metro Manila, currently pursuing a BS in Computer Engineering as an SM Foundation Scholar. I care deeply about building systems that are scalable, secure, and resilient under load.
Over the past few months, I've engineered production SaaS platforms end-to-end — from multi-tenant Spring Boot backends and database schemas to high-concurrency FastAPI services, Clerk auth migrations, and cross-platform Next.js/Capacitor client applications.
I thrive in autonomous environments with clear ownership, where engineering decisions are driven by specifications, zero-trust security contracts, and clean interface boundaries.