Oleksandr

OLEKSANDR ZYK
Full Stack Developer · JavaScript / TypeScript
[відкрити контакти](див. вище в блоці «контактна інформація») · [відкрити контакти](див. вище в блоці «контактна інформація»)

PROFESSIONAL SUMMARY

Full Stack Software Engineer with 2.5 years of industry experience, having transitioned from Quality Engineering
into development. Comfortable across the full stack — React, TypeScript, and Next.js on the frontend; Supabase
(Postgres, RLS, Edge Functions), n8n, and Node.js on the backend — with hands-on DevOps skills including
Docker, CI/CD, VPS deployment, and observability tooling (Grafana, Loki, Promtail). Comfortable designing
authorization models and async job architectures, not just consuming them. Experienced integrating third-party
APIs (OpenAI, Apify, GitHub API, AWS) and working with PostgreSQL via raw SQL and migrations. QA background
brings a strong testing and edge-case mindset to development work.

TECHNICAL SKILLS

Languages: JavaScript (ES6+), TypeScript, SQL, Python 3
Frontend: React, Next.js, Vite, HTML5, CSS3, responsive UI, modal systems, data visualization (charts)
Backend & Automation: Node.js (core runtime; Express/NestJS frameworks in progress), FastAPI, Supabase
(Auth, Database, Storage, Edge Functions/Deno), n8n (workflow automation), Django, Django REST Framework,
REST API design, WebSockets
Integrations & APIs: OpenAI API, Apify, GitHub API, AWS (basic), REST API integration
Databases & Security: PostgreSQL, raw SQL (JOINs, aggregations, migrations), Row Level Security (RLS) policy
design, Django ORM, schema design, query optimization
Infrastructure & Deployment: Docker, Docker Compose, Linux (Ubuntu) administration, VPS deployment
(Hetzner), multi-environment setup, Caddy (reverse proxy), Let's Encrypt SSL, GitHub Actions (CI/CD)
Security & Networking: Tailscale VPN (zero-trust), SSH hardening, ufw firewall, Fail2ban, unattended-upgrades,
Logwatch
Observability & Monitoring: Grafana, Loki, Promtail, UptimeRobot
Tools & Workflow: Git, GitHub, Git Flow, code review, Postman, Chrome DevTools, Linux terminal
Engineering Concepts: Object-Oriented Programming (OOP), REST APIs, authentication & authorization, async
job architecture, performance profiling, refactoring, debugging, workflow automation
Quality & Testing: Manual & API testing, Python test scripting, regression testing, bug reporting, test case
design, basic performance testing (Grafana k6)
Earlier Python Work: BeautifulSoup, Playwright, pandas, Pillow - from personal automation/scraping projects

PROFESSIONAL EXPERIENCE

Full Stack Developer — WWG Mar 2026 – Sep 2026
SEO-Blog & Social Content Automation Platform Jun – Sep 2026
React, TypeScript, Supabase (Postgres/RLS/Edge Functions), n8n, OpenAI · Sole engineer (requirements from PM &
marketing team)
• Sole engineer: the only developer building an SEO-blog and social-content automation platform end-to-end
(frontend and backend), after being redirected from the internal finance/accounting project to the
marketing team; took over technical implementation from another engineer.

• What it did: automated content creation end-to-end — blog posts, LinkedIn posts, and Instagram carousels
— plus an image generator, all driven by n8n workflows. Published posts were pushed via the GitHub API to
the company's SEO website, maintained separately by another developer on the marketing team.
• Async job architecture: designed the platform's async "run" model so long LLM/image-generation jobs (up
to ~5 minutes) survive a browser refresh or closed tab — job state lives as a polled database row rather than
an in-memory promise.
• Authorization & security model: implemented Postgres Row Level Security (shared-read, owner-write)
across the schema, plus a two-hop authorization pattern in Edge Functions — every privileged write re-
verifies row ownership under the caller's own token before acting, since a visible row isn't necessarily the
caller's.
• Shared pipeline abstraction: built a configuration-driven abstraction so one set of React step components
serves three content pipelines (blog, LinkedIn, Instagram) instead of forking the UI three times.
• Custom UI: the tool originally ran as a Slack bot; found it impractical for the marketing team's day-to-day
workflow, so designed and built a custom React interface to replace it, end to end.
• Integration surface: orchestrated third-party integrations — Apify (search/scraping via existing scrapers),
OpenAI (content and image generation), Supabase (storage and Edge Functions), GitHub API, and AWS —
behind Deno Edge Functions that hide credentials from the browser and gate every action on verified
ownership.
Internal SPA for Accounting & Finance Team Mar – May 2026
TypeScript, React, Supabase, PostgreSQL
• Backend ownership: designed database schema changes, migrations, and validation logic; wrote raw SQL
against PostgreSQL for complex reporting and data flows.
• Performance & reliability: diagnosed and resolved a critical bottleneck where a UI action caused CPU to
spike to 100%; designed a duplicate-detection algorithm for file-based data imports.
• Frontend & delivery: implemented modal dialogs and interactive charts; ran PostgreSQL in Docker via
docker-compose for local development.
QA Engineer — Ten8 (Manufacturing) May 2025 – Feb 2026
Web extension · Voice AI agent · SaaS automation · N8N workflows
• Cross-product quality engineering: ran Regression, Smoke, Functional, Usability, and Compatibility testing
across multiple product lines, including AI-driven features.
• API test scripting: used AI tooling to generate Python test scripts (standard library only — argparse, json,
dataclasses) for API/backend validation; reviewed and verified each before use, without relying on a testing
framework.
• Engineering exposure: performed basic performance testing with Grafana k6 — early hands-on engineering
work that supported my transition into development.
• API & integration testing: validated REST API contracts and edge cases using Postman and Swagger.
• Mentorship: onboarded and trained QA interns; produced internal documentation and shared best
practices.
QA Engineer — NDA (Fintech — P2P & PSP services) Dec 2023 – May 2025
1 year 5 months
• Quality engineering: Smoke, Regression, Functional, Usability, and Localization testing across P2P and PSP
fintech services.
• Engineering tooling: worked daily with GitLab and CI/CD pipelines — first practical exposure to developer
workflows.

• Documentation & process: authored and maintained test cases, checklists, and bug reports; collaborated
with PM, developers, and QA team.

SIDE PROJECT

MySecScan — Full Stack · mysecscan.com
Stack: Next.js · React · TypeScript · FastAPI · PostgreSQL · Docker · Hetzner VPS · Grafana · Loki · Tailscale · GitHub Actions
Role: Full Stack Developer
• Production VPS setup: provisioned a Hetzner Ubuntu VPS from scratch and deployed Caddy as a reverse
proxy with automated Let's Encrypt SSL, serving the live product at https://mysecscan.com.
• Backend & auth: implemented user authentication and CRUD operations on FastAPI, connected directly to
PostgreSQL.
• Defense-in-depth security: hardened the server — ufw firewall, SSH key-only access with root login
disabled, Fail2ban, unattended-upgrades, daily Logwatch reports.
• Observability stack: deployed Grafana + Loki + Promtail for log aggregation and metrics, plus UptimeRobot
as an external uptime check.
• VPN-gated staging: isolated staging environment reachable only through Tailscale VPN over HTTPS, same
protection extended to internal Grafana dashboards.
• Multi-environment CI/CD: GitHub Actions workflows for both production and staging, automating build and
deployment with secure environment-variable handling.
• Full-stack + DevOps implementation: responsible for infrastructure, backend, and majority of frontend on a
live product; coordinate with the product owner on feature scope and direction.

EARLIER PYTHON PROJECTS (Pet-Projects)

• Task Manager — Full Stack Web App: Django REST Framework + PostgreSQL, custom auth, CRUD, class-
based views; AI-assisted frontend.
• Map & Data Scraper: Playwright + BeautifulSoup, geographic/business data extraction from Google Maps
and third-party sources.
• Media & File Format Toolkit: CLI automation tools — Excel⇄CSV conversion, image processing, audio
extraction (pandas, Pillow, yt-dlp).
• Telegram bot: aiogram, yt-dlp

LANGUAGES

Ukrainian: Native
Russian: C1 (Advanced)
English: B1 (Intermediate) — comfortable with technical written communication
Bulgarian: B1 (Intermediate)