Олександр

Oleksandr Parail
— Email: [open contact info](look above in the "contact info" section) — | — LinkedIn: [open contact info](look above in the "contact info" section) —
Date of birth: 31/01/2004 Nationality: Ukrainian

Profile

Rust systems developer with 4 years of experience (including academic and personal projects) building cross-
platform networking, audio, and embedded systems. Lead developer of a self-hosted real-time communication
platform built on QUIC, custom C/C++/Rust audio stack via FFI, WASI v2 plugin system, and CI/CD-
driven auto-updates. Cybersecurity competition winner (3rd place, All-Ukraine Cyberhackathon 2025).
Seeking roles in systems programming, backend development, or cybersecurity engineering where low-level
expertise and architectural thinking are valued.

Education

Master’s Degree – Cybersecurity 2025 – present
Ivan Puluj Ternopil National Technical University, Ternopil, Ukraine
Field of study: Cybersecurity
Bachelor’s Degree 30/11/2021 – 30/11/2025
Ivan Puluj Ternopil National Technical University, Ternopil, Ukraine
Field of study: Computer use, Database and network design and administration, Software and applications
development and analysis, ICTs, Cybersecurity
Website: tntu.edu.ua

Skills

Programming Languages
Rust (4 years, including academic and personal projects), Python (2 years), C/C++ (including C_FFI
integration with Rust), Lua (embedded scripting), JavaScript (vanilla, no frameworks)
Systems & Networking
QUIC, TCP, REST API, DNS, Nginx (reverse-proxy), Caddy, low-resource client/server architecture
Audio
miniaudio, Opus codec, RNNoise & SpeexDSP noise suppression, custom audio library for real-time voice
chat
DevOps & Version Control
Git, GitLab (self-hosted), GitLab CI/CD (custom multi-stage pipelines with incremental builds and caching),
Docker (container builds for deployment), docker-compose (basic), Cloudflare R2 (release distribution)
UI Frameworks
Servo (contributed: reported memory leak — servo#41202), egui (including Android builds), Tauri (web-
based), imgui (native), gpui + gpui_component (native)
Client Scripting & Extensibility
Lua (embedded scripting, callable from JS UI via daemon IPC), JavaScript (vanilla, no frameworks —
user-modifiable UI), WASM (for implementing missing HTML elements in Servo)
Embedded & Hardware
ESP32, STM32, I2C/UART (used), SPI (knowledge), QEMU (primary VM, Windows host without hardware
virtualization, GitLab runner environment)

1
WebAssembly
WASI v2 (server-side plugin system with permission-based access control), WASM (for custom HTML
elements in Servo)
Other Tools & Technologies
Linux, LaTeX, Qt5 (C++)
Database Systems
SQLite, MongoDB, SQL
Security Tools
Wireshark, Nmap, Metasploit, CTF competitions

Projects

Project Codename: Conduit – Self-hosted Real-time Communication Platform
2024 – present | Personal project (proprietary; UI customization and plugin modules allowed; select compo-
nents may be open-sourced in the future)
A self-hosted, low-resource alternative to Discord with real-time voice and text communication, designed
for efficient deployment and extensibility.
Networking & Protocols:
• QUIC protocol for real-time audio streaming
• TCP for text messaging and commands
• Message routing between independent servers (planned)
Audio Stack (4-layer FFI architecture):
• miniaudio (C header) → C++ wrapper class → C API wrapper → Rust FFI → high-level Rust API
• Opus codec for audio encoding
• RNNoise and SpeexDSP noise suppression (user-selectable)
• Custom audio library designed for voice chat use cases
Cross-Platform & Deployment:
• Windows + Linux support, daemon process architecture
• Auto-update system: GitLab CI/CD → Cloudflare R2 → egui-based auto-updater
• Intentionally avoids CEF/Electron for minimal resource consumption
UI Layer:
• Primary: custom thin client built on Servo (reported and described memory leak: servo#41202)
• Fallback UIs during Servo issues: Tauri (web-based), imgui (native), gpui + gpui_component (native)
• Client-side Lua scripting for UI customization (vanilla HTML/CSS/JS, no frameworks — user-modifiable)
• Lua scripts callable directly from JS UI via daemon IPC (similar to in-game developer console)
• WASM support for implementing missing HTML elements in Servo
Plugin System:
• Server-side kernel modules via WASI v2 with permission-based access control (implemented, pending
public release)
• Architecture: directory-based permission system with inherited priority (closest to root = strongest)
CI/CD Pipeline:
• init → build (skip unchanged modules) → fetch (cache unchanged dependencies from last release)
→ pkg (module packaging) → pkg_web (web-specific update packaging) → pkg_build (final update
package) → release (publish to Cloudflare R2)
Design Decisions:
• No E2EE by design — self-hosted architecture means participants are known; E2EE would require P2P,
increasing client load and complicating future Bot API
• Low resource consumption for both client and server is a primary goal
• WASI v2 modules enable bots, extensions, and mods with sandboxed permissions

2
Internship – Cyber Police of Ukraine 30/11/2022 – 30/11/2023, Ternopil
Developed an automation system for cyberpolice operations: a package manager, update delivery system,
core application, and extension packages. The system ensured proper implementation of the program and
its dependencies among other interns, simplifying their work and increasing efficiency.
• Public repo available on request (automation tool, publicly accessible)
• Stack: Python (core logic), Rust (service components)
Virtual Laboratory (EU5 Project with Department of Physics) 30/11/2021 – 30/11/2024
VR and educational simulation modeling project in collaboration with the Department of Physics.
• Worked on interactions and logic of the virtual environment
• Trained on data analysis and infrastructure implementation
• Backend written in Rust using the Rocket framework
• Project paper
Other Projects
• Bergamot translator integration (worked with Mozilla Bergamot, achieved functional translation)
• Auto Changelog (Rust CLI, llama.cpp + Gemma 4 E4B, no MTMD): git diff analysis with -U0 filtering,
local LLM inference (no external API), GPU-layer offloading (-g/–gpu-layers, Vulkan backend), CI/CD
non-interactive mode (-D auto), structured changelog — https://gitlab.com/BassetMC/auto_changelog
• ASN Downloader Library (Rust): async parallel download library (tokio + reqwest streaming, futures
concurrency), progress tracking (indicatif), serde serialization, production-optimized release profile
(panic = abort, lto, symbol stripping) — https://gitlab.com/BassetMC/asn_downloader_lib
• HomeLab: self-hosted servers, game servers, various services on QEMU virtual machines
• Small-scale automation: parsers, scrapers, bots, servers (personal and commissioned)
• Custom Rust libraries for internal use
• egui application built for Android
• Qt5 desktop applications

Volunteering

Acknowledgments from the Cyber Police (2023) — for participating in volunteer activities

Honours & Awards

3rd place – Cyberhackathon 2025
All-Ukraine Cybersecurity Competition (CTF format)
lntu.edu.ua/uk/media/v-lntu-vidbuvsya-kiberkhakaton-2025

Languages

Language Listening Reading Spoken prod. Spoken int. Writing
Ukrainian (mother tongue) C2 C2 C2 C2 C2
English B1 B1 A2 A2 B1

Hobbies & Interests

Cybersecurity, embedded engineering, programming, HomeLab

Availability

Open to relocation.

3