Andre Borie

• Technical leadership and strategic guidance to the founding team • Built custom AI-powered tooling to rectify security & code quality issues • Led a cybersecurity & compliance review to secure a large blue-chip client • Renegotiated cloud infrastructure contract, earning a significant discount • Establishing product development processes to support the company's growth • Specified & implemented RAG-based features using PgVector & OpenAI LLMs • Leading technical recruitment, interviewing & scaling the engineering team

• Migrated the company to a brand-new bare-metal infrastructure offering unparalleled performance and lower costs, providing ample room for growth and scaling without the unlimited liability of cloud usage-based pricing. Vertical scaling simplifies software development, maintenance and disaster recovery. • Vendor selection for hosting, observability, and CDN & DDoS protection. Provisioning of bare-metal servers with Ansible; wrote custom roles for management of redundant encrypted storage, system configuration and monitoring agent installation. The whole infrastructure can be redeployed in a matter of minutes on any Linux host. • Upgraded the application's Kamal configuration to Kamal v2; implemented Caddy to augment Kamal-proxy; configured mutual TLS for Cloudflare in Caddy. Developed a Caddy module to automatically obtain TLS certificates from Cloudflare's Origin CA via their API, removing the unnecessary dependency on a public CA. • Planned and successfully performed the migration to the new infrastructure during a maintenance window, and post-deploy monitoring and minor fixes. • Collaborated with the technical founder on the possibilities of sharing user sessions across domains, their security implications and possible mitigations, and general Python/Django and infrastructure assistance.

• Implemented seamless cross-domain OIDC authentication with SMG's existing real-estate brands (Homegate, Immoscout), allowing Flatfox to become the unified messenger for all SMG real-estate brands, replacing fragmented implementations. • SMG can now market Flatfox as a CRM feature to aggregate communications from prospective tenants across all of its real-estate platforms, boosting the value of their product offering. • Reviewed email sending compliance (SPF, DKIM, DMARC), implemented Google One-Click Unsubscribe, monitored delivery rates and proposed improvements as email is a core part of the Flatfox experience and good deliverability is critical. • Monitored spam/fraud activity, specified and partially implemented automated countermeasures significantly reducing malicious activity to protect customers, reputation and reduce support overhead. • Release engineering: QA testing sensitive changes, release notes, stakeholder coordination, deployments and post-deploy monitoring. • Investigated and remediated bugs and security vulnerabilities across the entire stack - from the network to front-end and even mobile (Swift & Kotlin) apps. • Incident response: rapid diagnosis, service restoration, and implementing long-term fixes to prevent recurrence. This minimized outages and their impact ahead of a critical phase (IPO). • Containerized the application, updated Ansible to deploy systemd services to run those containers in Podman, adjusted the deployment tooling to match and migrated without user impact. • Assisted the in-house team with Python/Django development and infrastructure work; rigorous code reviews; advised on complex zero-downtime database migrations and implemented custom tooling and CI checks to facilitate, test, and ultimately de-risk such operations. • Migrated PDF handling to a Lambda-deployed JS microservice (pdf-lib) with HTTP/gRPC interfaces, replacing inadequate, poorly-maintained Python libraries.

• Specified and implemented Asset Risk Exposure Analytics, a new product allowing investors to quantify their portfolio's exposure to global climate, environmental, human rights, and political risks—blending Maplecroft's industry-level risk data with third-party security-level data and allowing customers fast lookups across hundreds of millions of risk data points. • Rebuilt Global Risk Dashboard's bulk site scoring on very short notice to ensure the quarterly release of new risk data could meet the contractually agreed deadline; the existing implementation was found to no longer function less than two weeks before the deadline. In one day I produced a working solution that allowed the rescoring process to start, which successfully completed before the deadline. • Assisted the in-house development team with Python, Django and infrastructure work. Collaborated on upgrading an important Wagtail project serving analyst insights and reports to a modern, supported version and migrating from MySQL+ElasticSearch to PostgreSQL. • Implemented the 4th version of the GRID API, taking into account the shortcomings of the previous versions, the expected volume of requests/data, and future product direction.

• Rebuilt the Open Banking transaction syncing engine from scratch, which gave the company the confidence to fully commit to an Open Banking strategy and secure a funding round on that basis. • Eliminated transaction-data-related support queries literally overnight thanks to the new Open Banking engine being able to gracefully handle and resolve inaccurate banking data using heuristics; transaction data was also corrected retroactively where it was found to be inaccurate. • Further reduced support queries as my rebuilt Open Banking engine is able to gracefully handle transient bank communication issues without losing the authenticated session; when reauthentication is required, the user is notified and can resolve it themselves. • Provided UX guidance including Open Banking-related screen mockups for the authentication and account management flows; also provided product guidance as a member of the target market (UK-based freelancer) and user of a competing product at the time. • Assisted the in-house team with Python & Django software development and infrastructure work. Interviewed candidates and provided input into technical hiring decisions.

• Offering bespoke telecommunications, connectivity & infrastructure services • Implementing clients for MVNO & MVNE partners, both sanctioned (via REST/SOAP APIs) and adversarial (screen-scraping) • Installation, configuration and maintenance of Asterisk PBXs to provide SIP call routing and billing • Implemented a Python-based management layer around Asterisk Real Time, allowing configuration to be updated on the fly in response to application decisions without restarting • Development of a C#-based SIP B2BUA to replace the legacy Asterisk-based implementation, offering real-time call control and online billing & charging • Developed Python code to "rate" call detail records (CDRs) received from carrier-partners • Implemented robust algorithms to detect and block call/SMS spam & fraudulent behavior • Developed a Django-based billing & invoicing engine, supporting prepaid & postpaid, collecting invoices with Stripe as well as various small, local ones for accepting country-specific payment methods • Implemented a Python-based coordinator application for provisioning bare-metal machines at scale across multiple hosting providers • Built immutable Linux machine images (with deboostrap and ultimately buildroot) allowing provider-agnostic deployment & autoscaling of application servers across low-cost hosting providers and on-prem bare-metal • Configured & maintanined FreeRadius to act as an AAA server for terminating mobile broadband & DSL connections delivered over LT2P, with the data sourced from an SQL database • Operating a cluster of OpenBSD machines acting as BRAS to terminate mobile broadband/DSL connections

Built a dashboard to observe and control the company's Databricks-based data analytics platform, deployed on Microsoft Azure.

Delivered a web-based tool to automatically test the clinical safety of the company's mobile app in an automated & repeatable way, saving significant amounts of time and reducing the opportunity for human error.

Integrated their existing Django-based device management application with Shopify so newly-ordered devices can be automatically provisioned and assigned to customer accounts based on the details provided during checkout, removing the need for manual data entry and reducing error potential.

Rebuilt the email-notification code to improve developer experience and reduce bugs, all while providing general development & infrastructure support.

Maintained a large Python 2.7 Django-based event management application running on Google App Engine, including tracking down & working around data consistency issues due to Google Cloud Datastore eventual consistency.