Available for new projects Cali, Colombia · UTC−5

I design, build, deploy and operate software in production.

I'm Cristhian Soto, Full Stack Developer. Backend in Java 21 and Spring Boot with hexagonal, multi-tenant architecture, frontend in Nuxt and infrastructure on Azure.

See my stack Let's talk

Portrait of Cristhian Francisco Soto Portilla

Backend

Java · Spring Boot

hexagonal architecture

Frontend

Nuxt · Vue

secure BFF

Cloud

Azure

Container Apps · CI/CD

Multi-tenant

Per-client isolation

code and database

Payments

ePayco · Credibanco

OpenPay · Wompi

WhatsApp agents

Python · LangGraph

01 / stack

What I use, and how far I go with it.

Every level comes from real repositories, commits and deployments. No made-up percentage bars.

Backend

8 / 8

Java 21 Advanced
Spring Boot 3.5 Advanced
Spring Security Advanced
Hexagonal architecture Advanced
Flyway Advanced
JPA / Hibernate Solid
Spring AMQP Solid
Drools Basic

Frontend

8 / 8

Nuxt 3 / 4 Advanced
Vue 3 Advanced
BFF with httpOnly cookies Advanced
TypeScript Advanced
Nuxt UI Solid
Tailwind CSS 4 Solid
Pinia Solid
Astro Basic

Data

5 / 5

MySQL 8 Advanced
PostgreSQL Solid
Drizzle ORM Solid
Per-service DB users Solid
SQLAlchemy / Alembic Basic

Cloud & CI/CD

7 / 7

Azure Container Apps Advanced
Azure Container Registry Advanced
Docker Solid
GitHub Actions + OIDC Solid
Azure DevOps Solid
Netlify Solid
Cloudflare Workers Basic

Security

4 / 4

Keycloak / OIDC / JWT Advanced
Multi-tenant isolation Advanced
Role matrix Solid
Keychain-held secrets Solid

Payments & messaging

7 / 7

ePayco Advanced
Credibanco Solid
OpenPay Solid
WhatsApp Cloud API Solid
SendGrid / MailerSend Solid
Sigma Móvil (SMS) Solid
Wompi Basic

AI & agents

5 / 5

Python 3.12 Solid
FastAPI + Pydantic Solid
LangGraph Solid
OpenAI SDK Basic
Pipedrive API Basic

Testing

4 / 4

JUnit 5 + MockMvc Advanced
pytest + mypy strict Solid
Vitest Solid
Bruno Solid

02 / experience

Ideamosmas

Full Stack Developer

Jan 2024 — present · Colombia

I design, build, deploy and operate backend services, web frontends and AI agents for ecommerce, payments, promotions and messaging products.

JavaSpring BootNuxtVueTypeScriptPythonMySQLPostgreSQL

01Architecture

Consolidated a Spring Boot microservice architecture into fewer deployable units with hexagonal Maven modules.

spring boot · maven · hexagonal

02Multi-tenant

Isolated tenants with a per-request TenantContext across the platform's services, with an enforcement flag rolled out service by service.

spring security · flyway · mysql

03Operations

Ran and documented production deployments with verified images, traffic-controlled revisions and rollback.

container apps · acr · netlify

04Payments

Built the ePayco checkout: wallet, saved cards and a scheduled reconciler, backed by a broad test suite.

epayco · junit · mockmvc

05Security

Moved the admin panel's authentication to a Nuxt BFF with httpOnly cookies and Keycloak JWTs.

nuxt · nitro · keycloak

06Incidents

Fixed in production the rejection of foreign customers' payments and sized the Postgres pool to the real connection budget.

postgres · epayco · azure

07AI

Built a WhatsApp support agent with FastAPI and LangGraph, covered by automated tests.

python · langgraph · openai

08Frontend

Built the Gane web portal frontend and its backend integrations: wallet top-ups, checkout and session.

nuxt · pinia · spring boot

09Promotions

Built the campaign engine with Drools, the Nuxt panel and the reports over Postgres.

spring boot · drools · nuxt

10CI/CD

Migrated pipelines from Azure DevOps and Bitbucket to GitHub Actions with OIDC into Azure.

github actions · oidc

03 / how i work

I measure before I claim.

Principles you can open and check: each one has a document, a commit or a runbook behind it.

Every deploy leaves evidence and a way back.

Image, digest, revision, verified startup and rollback plan, written before running it.

↳ deployment runbook

A check that cannot fail is not a check.

Every check carries a positive and a negative control.

↳ program doctrine

Measured, assumed or not read.

I keep what I saw apart from what I inferred, in docs, tickets and reports.

↳ MEASURED / ASSUMED marks in every runbook

Tenants are isolated in code and in the database.

Per-request tenant context, plus migrations and history tables per service.

↳ tenant context in every service

AI executes; I direct and audit.

Agents with separate roles, evidence gates and a read-back of the values read back.

↳ architect's guide

Secrets never touch the disk.

Tokens in the system keychain, out of the agent's context and the final image.

↳ token verified out of the image

04 / projects

Where I applied it.

Production systems for Ideamos Más clients, live sites and one side project.

web · betting & paymentsLive

Gane web portal

Frontend and backend integrations: digital wallet top-ups, checkout, session handling and WhatsApp webview.

Nuxt 3PiniaSpring BootJWT

Visit site

platform · B2BLive

{ }

Multi-tenant ecommerce

Hexagonal Spring Boot microservices, Nuxt storefront and admin panel, ePayco and Credibanco checkout.

Java 21Spring BootNuxtKeycloakAzure

infra · built soloLive

Notifications platform

I designed and built both services on my own: an email and SMS gateway on SendGrid, MailerSend and Sigma Móvil with delivery webhooks, and an orchestrator with templates and Quartz-scheduled sends.