3+ years building production systems for Italian public institutions.
Backend-first, ownership-driven, open to opportunities.
{
"role": "Java Software Engineer",
"experience": "3 years",
"stack": [
"Java 17+", "Spring Boot",
"Microservices", "PostgreSQL"
],
"education": "B.Sc. Computer Eng. (in progress)",
"location": "Italy — open to relocation",
"available": true
}
I'm a third-year Computer Engineering student who started working professionally before finishing my degree. After a year as a Data Analyst handling large-scale SQL-based data migrations, I transitioned to backend software engineering, and I haven't looked back.
For the past two years I've been the sole backend developer maintaining and extending a national water-quality monitoring platform used by regional and provincial authorities across Italy. I own the feature roadmap, handle production incidents, and occasionally step into Angular when the team needs frontend coverage.
I'm looking for my next challenge, ideally in a team where engineering quality and system design are taken seriously.
Istituto Superiore di Sanità (ISS) · Italian Ministry of Health
A national digital platform for the acquisition, control, management, and analysis of data on water intended for human consumption in Italy. The system ensures the availability of information on water access and quality at the point of use, from environmental water resources through the entire treatment and distribution chain.
I joined the project ten months ago as the sole backend developer responsible for new feature development. I own the full backend lifecycle: from technical design and implementation to deployment and incident response on behalf of regional and provincial health authorities across the country.
Istituto Superiore per la Protezione e la Ricerca Ambientale (ISPRA) / Istituto Superiore di Sanità (ISS)
Full refactor of a Java Enterprise Edition application using PrimeFaces toward a modern Spring Boot + Thymeleaf stack. Improved maintainability, reduced dependencies on legacy APIs, and aligned the codebase with current Java ecosystem standards.
Istituto Superiore di Sanità (ISS)
Backend development for a risk-assessment platform supporting Water Safety Plans (Piani di Sicurezza delle Acque): an integrated prevention system spanning the entire drinking-water supply chain, aligned with WHO guidelines and Italian Ministry of Health directives.
Lazio DiSCo
Backend development for a course delivery portal supporting the training and certification of managers, coaches, and sports assistants. Implemented the didactics module using Domain-Driven Design within a Spring Modulith architecture, built PDF and Excel data export, and developed RESTful APIs with Spring Boot and PostgreSQL. Currently in pre-release.
Personal Project
A multi-tenant OAuth2/OIDC authorization server built from scratch on Spring Authorization Server, modeled after Keycloak's architecture. Implemented path-based realm isolation with per-tenant RSA signing keys, built a REST admin API and a browser-based admin console authenticated through the server's own OAuth2 flow, and developed a custom RBAC/ABAC engine resolving per-user access conditions at request time. Proven against a real external client, not just tested in isolation — see Keyra × authserver below.
Personal Project
A self-contained encrypted password manager built to explore production-grade security engineering end to end. Implemented AES-256-GCM vault encryption with a key derived from the user's own master password and never stored server-side, built TOTP two-factor authentication with single-use backup codes, and developed brute-force protection and a full audit trail for every security-sensitive action. Published alongside its OAuth2-delegated counterpart above.
Companion to authserver
A variant of Keyra rebuilt to delegate authentication entirely to authserver instead of managing its own login. Implemented the OAuth2 Authorization Code + PKCE client flow, mapped OIDC claims onto local application state, and gated a permission-sensitive feature behind a live authorization check against authserver's ABAC engine instead of a cached local role. The real-world proof that authserver works as an identity provider, not just against test requests.
I'm actively exploring opportunities around the world.
If you think we might be a good fit, feel free to reach out.