About

Senior Full Stack &
Solutions Architect.

Tell me about yourself
claude-opus-4.6 reply

I'm a Senior Software Engineer and Solutions Architect with 6+ years designing and shipping scalable, high-performance platforms end-to-end.

I specialize in React Native mobile apps, full-stack web development, distributed systems, cloud infrastructure on GCP & Azure, and AI/LLM integration — with a deep focus on application security and OWASP-aligned secure coding.

Lead Systems Engineer at SpartanNash. I ship React Native mobile apps to TestFlight and the App Store, design distributed systems and AI integrations, and build secure web platforms for e-commerce and enterprise — and I've helped 140,000+ developers worldwide level up along the way.

140,000+
Developers helped
200,000+
Problems solved
6+
Years shipping production

Stack

React NativeReact Native
Node.jsNode.js
TypeScriptTypeScript
SupabaseSupabase
PostgreSQLPostgreSQL
GCPGCP
AzureAzure
DockerDocker
PythonPython
GitHub ActionsGitHub Actions
ExpoExpo
OpenAIOpenAI

NOW

  • Lead Systems Engineer at SpartanNash — owning product data modeling and cloud DB architecture across GCP/Azure, CommerceTools, and Snowflake.
  • Mentoring developers 1:1 through Wyzant and contributing to the Grepper community.
  • Researching application security with HackerOne (OWASP Top 10, Burp Suite, Kali) and writing for HackerNoon.
Experience
  1. Nov 2025 — Present · Remote

    Lead Systems Engineer

    SpartanNash

    Leading systems engineering across e-commerce, consumer apps, and marketing/SEO stacks. Owning product data modeling and cloud DB architecture (GCP/Azure), CommerceTools and Snowflake integration, and CI/CD standardization.

  2. Nov 2021 — Jul 2024 · Remote

    Senior Full Stack Software Engineer

    Intelligent Waves LLC

    Built a secure VPN statistics dashboard for a classified client using Node, Express, and MongoDB. Enforced OWASP-aligned secure coding (SQLi, XSS, BOLA) and shipped CI/CD pipelines for government and commercial clients.

  3. May 2021 — Nov 2021 · Remote

    Associate Director of Technology (Tech Lead)

    VMLY&R — Ford Motor Company

    Led the Ford.com Global Owner Project, delivering personalized user experiences across Ford.com properties using custom JavaScript, Adobe Experience Cloud, AEM, and Adobe Analytics.

  4. Jan 2021 — May 2022 · Remote

    Full Stack Software Developer

    Skymint

    Led the software development team and shipped web components and applications supporting 15 retail locations using HTML, CSS, JavaScript, C#, PHP, and WordPress.

  5. Jan 2020 — Jan 2021 · Remote

    Front-End Web Developer

    SoundOff Signal

    Built and maintained the EOS product configurator and the M2M Advanced Configurator front-ends with HTML, CSS, JavaScript, and jQuery.

Credentials & Community
Certification
CompTIA PenTest+
Offensive security & vulnerability assessment.
CTF Platform
TryHackMe — Top 2%
Hands-on penetration testing and red-team labs.
Community
Grepper — Top 1%
140,000+ developers helped, 200,000+ problems solved.
Security Research
HackerOne Researcher
Responsible disclosure & bug bounty programs.
Publication
HackerNoon Author
Technical writing on security, systems, and AI.
Education
B.S. Computer Information Systems · Baker College
Class of 2012
Tech decisions

Short architectural decision records — the tradeoffs behind the shipped work.

React Native + Expo over native Swift for NutriLogix 2025 · NutriLogix AI

Context. Solo founder path from zero to a shipped product. Need iOS first (the target audience lives on iPhone + Apple Health), but Android reach and a marketing web surface are table stakes for a nutrition app in 2025. Native Swift locks the product to one platform and one engineer workflow, and every marketing-site tweak becomes a second stack to maintain.

Decision. Expo-managed React Native with EAS Build for native binaries and expo-updates for over-the-air JS patches. A single TypeScript codebase drives iOS and Android, with a thin HealthKit bridge as the only place I drop to native. CI ships release candidates to TestFlight on every merge to main.

Tradeoffs. Bundle is heavier than lean Swift and SwiftUI wins on frame-perfect list scrolling. In exchange I get 3–4x faster iteration, bug fixes that land in hours instead of days, and the same TypeScript brain fixing the marketing site and the mobile app in the same PR. Clear escape hatch if the product ever outgrows Expo — drop to bare workflow or eject a hot path to native.

Supabase over Firebase for auth + storage 2025 · NutriLogix · VoiceLift

Context. Both apps need auth, a relational database (meals belong to users, foods have macros, workouts have sets and supersets — this is SQL, not a document store), row-level security so clients can talk to the DB directly, and file storage for meal photos and audio blobs. All of that without running a backend team.

Decision. Supabase. Postgres with RLS policies enforced at the database layer, Supabase Auth for JWT + social logins, storage buckets with per-user signed URLs, and edge functions for server-side work like calling the OpenAI Vision and Whisper APIs with a server-held key. One stack serves NutriLogix and VoiceLift, with migrations checked into git.

Tradeoffs. Lose Firestore's best-in-class offline sync SDK and mature real-time listeners. The Supabase edge runtime is younger and has fewer regions. Gained: plain Postgres I can dump and restore anywhere, relational modeling I don't have to fight, auth rules that live with the schema instead of scattered across client code, and a credible self-host path if scale or pricing ever demand it.

Provider-abstraction layer for AstroAI X 2025 · AstroAI X

Context. The product thesis is “one chat, any model.” Users start a thread in GPT-5, hit a reasoning wall, switch to Claude Opus 4 mid-conversation, then bounce to Gemini 2.5 Pro for its long-context strengths — without losing the history. Every provider has a different request shape, streaming format, tool-call contract, and token-accounting model.

Decision. A single canonical Message and ConversationState shape lives in the client and in Supabase. A per-provider adapter normalizes three things: streaming chunks into a common token-event stream, tool calls into a provider-neutral envelope, and usage into unified token counts. The full canonical history is replayed into each provider's native format on every request — stateless on their side, stateful on ours.

Tradeoffs. Three adapters to maintain, and some provider-specific features (Claude's extended thinking, Gemini's native file handling) have to be opted into explicitly instead of coming for free. Gained: the product survives any one provider's outage or price change, shipping a fourth model is a new adapter rather than a rewrite, and no vendor owns the roadmap.

Whisper + parser pipeline over structured voice forms 2025 · VoiceLift

Context. VoiceLift exists because logging a set mid-workout is high-friction — tapping a form while your hands are chalked and your heart rate is at 160 is why most workout apps get abandoned. Off-the-shelf voice pickers assume structured commands (“add set, ten reps, one-fifty-five pounds”); humans don't talk like that mid-lift. They say “three plates for eight,” “warm-up to working weight,” and “ten, nine, eight to failure.”

Decision. OpenAI Whisper for transcription → a small tuned LLM pass that understands gym vocabulary (“three plates” = 315 lb, drop sets, supersets, RPE, descending rep schemes) → a deterministic state machine that owns the current exercise, superset grouping, and rest timer → Supabase for the log. A lower-accuracy on-device fallback kicks in when the phone is offline so mid-workout logging never drops.

Tradeoffs. Higher per-log cost than a free-tier form app — each set triggers transcription plus a parsing pass — and slightly higher latency than tapping. Gained: logging goes from ~15 seconds of tapping per set to under 2 seconds of speech, which is the product. A form-based MVP would have been cheaper to build and dead on arrival.

GTM + GA only — no session replay or chat widgets 2026 · anthonysdigital.net

Context. The inherited portfolio template shipped with Hotjar, Mouseflow, Google Optimize, Chatbase, CustomGPT, ManyChat, and a handful of orphaned debug scripts. That was roughly 800 KB of third-party JavaScript before any of my own content loaded, LCP was mediocre on mobile, and the privacy story was “every visitor's mouse movements are recorded by at least two vendors.”

Decision. Strip every third-party script except Google Tag Manager and Google Analytics 4. Replace the Chatbase widget with a vanilla-JS streamed chat hero I own end-to-end — token-by-token rendering, jittered delays, punctuation pauses, ~3 KB of JS. The site stays static on GitHub Pages with zero build step.

Tradeoffs. Lose heatmaps, session replay, and an A/B testing harness. For a single-author portfolio that already knows its audience, that was telemetry I was never going to look at. Gained: faster LCP, a clean privacy surface, nothing awkward to explain to EU visitors, and a hero interaction that's mine — not a rented widget I don't control. The streamer doubles as a tiny live portfolio demo: “here's what I built to replace the widget I removed.”

What I do
React Native Mobile Apps
Cross-platform iOS and Android apps shipped solo from zero to TestFlight and the App Store. Expo + EAS builds, OTA updates, Apple Health and HealthKit integration, Supabase back-ends, and OpenAI/Claude-powered features. Currently shipping NutriLogix, AstroAI X, and VoiceLift.
Full-Stack Engineering
Production web apps end-to-end. React/Next.js front-ends backed by Node, Express, and Python services on GCP and Azure.
Solutions Architecture
End-to-end solution design across distributed systems, data modeling, and API contracts. Solutions Architect for enterprise e-commerce, government, and consumer platforms.
AI / LLM Integration
OpenAI and Claude APIs, RAG pipelines, and LangChain agents. Built AdaptiveGPT and ship AI features into client products.
Application Security
OWASP Top 10 hardening, penetration testing with Burp Suite and Kali, and secure-coding reviews. CompTIA PenTest+ and HackerOne researcher.
Stack
Languages
  • JavaScript
  • TypeScript
  • Python
  • C#
  • PHP
  • Kotlin
  • SQL
  • HTML
  • CSS
Frameworks
  • React
  • Next.js
  • Node
  • Express
  • MongoDB
  • Snowflake
Cloud / Infra
  • GCP
  • Azure
  • Supabase
  • CommerceTools
  • CI/CD
  • DevOps
  • Linux
  • Git
AI
  • OpenAI API
  • Claude API
  • LangChain
  • RAG
  • Prompt Engineering
Security
  • OWASP Top 10
  • Burp Suite
  • Kali Linux
  • SQLmap
  • Penetration Testing
  • OSINT