I design, build, and operate resilient enterprise internal systems, financial engines, and hybrid infrastructure. Operating at the intersection of robust backend logic, strict regulatory compliance, and self-hosted cloud cost-efficiency.
Available for asynchronous consulting, contract development, and technical architecture.
- Full-Stack Application Development: Next.js (App Router), React, TypeScript, NestJS, Node.js, Prisma ORM, Tailwind CSS.
- Database & Data Integrity: PostgreSQL, MySQL, ACID transactional patterns (
prisma.$transaction), Double-Entry Ledger engines, Row-Level Security. - Enterprise Security & Compliance: Fine-grained Capability RBAC (
module:action:resource), Maker-Checker-Signer approval workflows, Immutable Audit Logging. - Hybrid Infrastructure & DevOps: Linux (Debian/Ubuntu), Docker, Docker Compose, Proxmox VE, VMware ESXi, GitLab CI/CD, Nginx reverse proxy.
- Self-Hosted Cloud & Storage: MinIO S3-compatible object storage, TrueNAS ZFS, Tailscale/WireGuard encrypted mesh networks, pfSense.
| Project & Architecture | Core Stack | Key Business & Engineering Impact |
|---|---|---|
| SI-AA: Financial & Asset ERP | Next.js, NestJS, Prisma, PostgreSQL | Automated double-entry GL auto-journaling across 10+ branches. Eliminated asset-ledger reconciliation discrepancies. |
| IT Operations Portal & Hub | Next.js, NestJS, MinIO, Tailscale | Centralized operational knowledge base. Cut cloud storage costs by 60%+ using a hybrid on-premise storage topology. |
| SIMARKO: Compliance Engine | NestJS, PostgreSQL, Prisma | Deterministic 5x5 Inherent/Control matrix scoring engine with immutable audit trails for banking regulatory compliance. |
| Automated Hybrid Backup Pipeline | Bash, Docker, Rclone, MinIO | Concurrency-safe (flock) automated DB backup pipeline with SHA-256 integrity validation and dual-tier retention pruning. |
| Enterprise Monorepo Starter | NestJS, Next.js, TypeScript | Production baseline featuring declarative RBAC guards, global validation, and append-only forensic audit interceptors. |
I partner with technical founders, CTOs, and engineering teams who value deep focus and clean output over meeting overhead:
- Workflow: Task/ticket-driven execution via GitHub Issues, Linear, or Jira.
- Handoff: Well-structured Pull Requests accompanied by concise written summaries and Loom video walkthroughs.
- Timezone: UTC+7 (Jakarta/Bangkok). Tasks assigned at the close of Western business hours are tackled while you sleep.
- Email: mail@marisandriawan.my.id
- Website: marisandriawan.my.id
- Upwork: Verified Profile & Direct Contracts