Browse Skills

Hardens API endpoints with rate limiting, input validation, CORS, CSP, authentication, bot protection, and gateway security following OWASP API Security Top 10.

Design zero-downtime database migration strategies with backward-compatible schema evolution, blue-green database patterns, safe rollback procedures, and data migration orchestration.

Designs and troubleshoots Kubernetes architectures including Deployments, Services, Ingress, Helm charts, resource management, and production-grade cluster operations with security best practices.

Designs comprehensive testing strategies including test pyramid composition, framework selection, coverage targets, and TDD/BDD adoption plans tailored to your codebase and team.

Expert cloud cost optimization advisor that helps organizations reduce and manage cloud spending using FinOps principles, right-sizing strategies, reserved instance planning, and cost allocation frameworks across AWS, Azure, and GCP environments.

Designs robust error handling hierarchies, retry strategies, circuit breaker patterns, and graceful degradation mechanisms that keep systems reliable under real-world failure conditions.

Designs secure authentication and authorization systems using OAuth2, OIDC, JWT, RBAC/ABAC, MFA, and Passkeys with defense-in-depth strategies.

Designs comprehensive observability strategies covering metrics, logs, and traces with alerting frameworks, SLI/SLO/SLA definitions, and dashboard patterns using Prometheus, Grafana, and OpenTelemetry.

Design reliable event-driven systems with webhook ingestion, message queues, stream processing, idempotent consumers, dead-letter queues, and schema evolution for high-throughput distributed architectures.

Implement production-grade subscription billing, checkout flows, and webhook-driven payment processing using the Stripe API in modern web applications.

Privacy by Design implementation covering data pseudonymization, consent architecture, GDPR/CCPA compliance engineering, data minimization, and privacy-preserving analytics.

Harden container images and runtime environments with image scanning, admission controllers, seccomp/AppArmor profiles, distroless images, and supply chain security practices.

Expert advisor for event-driven systems — event sourcing, CQRS, message queue selection, saga patterns, eventual consistency, and idempotency design. Helps you architect reliable, scalable distributed systems.

Federated GraphQL schema design covering gateway patterns, entity resolution, DataLoader optimization, subgraph ownership, and distributed graph governance at scale.

Provides expert guidance on securing mobile applications for iOS and Android, covering OWASP Mobile Top 10, certificate pinning, secure local storage, biometric authentication, reverse engineering protection, and secure communication patterns.

Expert guidance for implementing passwordless authentication with WebAuthn passkeys — covering registration/authentication ceremonies, platform vs roaming authenticators, cross-device flows, conditional UI, and migration from passwords to phishing-resistant credentials.

Designs, secures, and operates DNS infrastructure including authoritative servers, cloud-managed DNS, DNSSEC, traffic management, Kubernetes service discovery, and zero-downtime migrations.

Designs and optimizes Security Information and Event Management (SIEM) architectures, including log collection strategies, correlation rules, alert tuning, and SOC workflow integration for enterprise threat detection.

Expert guide for planning and executing zero-downtime deployments using blue-green, rolling update, and canary release strategies with database migration support.

Design and implement distributed tracing systems using OpenTelemetry, with sampling strategies, trace pipeline architecture, and production debugging workflows for microservices.

Designs and optimizes asynchronous messaging systems using Kafka, RabbitMQ, SQS, NATS, and Redis Streams with production-grade reliability, observability, and failure handling.

Implements zero-downtime blue-green deployment patterns with automated environment switching, health checks, rollback triggers, and traffic routing for web services and databases.

Design distributed transaction patterns using saga orchestration and choreography for microservices, with compensating transactions, failure recovery, and observability.

Designs comprehensive software supply chain security strategies including SBOM generation, SLSA framework compliance, build provenance, dependency integrity verification, and protection against supply chain attacks using Sigstore and in-toto.