Skip to content
View fr4ncisx's full-sized avatar
🏠
Working from home
🏠
Working from home
  • SantaSoft
  • Argentina

Block or report fr4ncisx

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
fr4ncisx/README.md

Francisco — Backend Software Engineer

Backend developer focused on Java, Spring Boot, and clean architecture. Expanding into Python, NestJS, and React.

⚡ Engineering Focus & Standards

My approach centers on three pillars: performance, architecture, and security.

Concurrency & Performance Optimization

  • Virtual Threads (Project Loom): Implemented using Spring Boot 3.x and Java 21+. Using the default virtual thread scheduler to maximize throughput without the complexity of reactive stacks.
  • Persistence & Auditing: Entity lifecycle management through JpaAuditing for automated metadata. Database performance optimized via indexing and prevention of N+1 queries using EntityGraphs and Join Fetching.
  • Caching Logic: Context-aware selection between Caffeine for local caching and Redis for distributed state. Reserved for Read-Heavy patterns where the hit rate justifies the consistency overhead.

Architectural Design

  • Modular Monoliths: Built upon Bounded Contexts for domain isolation. Internal communication through synchronous calls for immediate logic and asynchronous processing for long-running tasks.
  • Microservices & WebClient: Non-blocking communication using WebClient for distributed environments, preventing blocking-I/O bottlenecks.
  • CQRS Knowledge: Theoretical foundation from books and study. Understanding of Command Query Responsibility Segregation as a pattern for scaling read and write operations independently.

Security, Identity & OWASP Compliance

  • OWASP Top 10 Alignment: Applying security principles to mitigate Injection through Jakarta Validation and Parameterized Queries, and Broken Access Control via granular RBAC.
  • JWT Implementation: Signing with HS512. Efficiency optimized by pre-decoding the Base64 secret key through a Singleton pattern.
  • State-Synchronized Authorization: Lightweight JWTs complemented by a cached /me endpoint for real-time permission updates, preventing stale role usage.
  • Vulnerability Mitigation: Token transport enforced through HTTP-Only, Secure, and SameSite=Strict Cookies, protecting against XSS/CSRF. Global exception handling via @RestControllerAdvice to prevent sensitive data exposure.

🤖 AI-Augmented Workflow

I use AI agents as part of my development process — not as a shortcut, but as a way to enforce consistency and reduce cognitive load on repetitive tasks.

Philosophy

AI handles the patterns. I handle the decisions. My role is to define what needs to be built and why; AI helps me build it faster and with fewer mistakes. This separation keeps my focus on architecture and business logic while delegating boilerplate, test scaffolding, and documentation to specialized agents.

Spec-Driven Development

Before writing implementation code, I define the contract: API specs, test cases, and expected behavior. AI agents then generate the scaffolding from these specs — controllers, services, repositories, and tests — following the patterns I've established. This ensures consistency across modules and makes code reviews faster because the structure is predictable.

What AI Solves For Me

  • Testing: Generating comprehensive test suites (unit, integration, E2E) from specs. AI catches edge cases I might miss and ensures coverage targets are met without writing repetitive test boilerplate.
  • Security Analysis: Reviewing code against OWASP principles, identifying potential vulnerabilities, and suggesting mitigations before they reach production.
  • Architecture Decisions: Exploring trade-offs between patterns, validating design choices against best practices, and ensuring consistency across bounded contexts.
  • Documentation: Generating API docs, inline documentation, and changelog entries from code changes.

🛠️ Technology Ecosystem

Core Frameworks

Java Spring Boot Spring Cloud Spring WebFlux

Persistence

Spring Data JPA PostgreSQL MySQL MariaDB

Security

Spring Security OAuth2 JWT

API Protocols

REST GraphQL WebSockets Swagger Jakarta Validation

Caching

Redis Caffeine

Testing

JUnit5 Mockito AssertJ Testcontainers

Quality Analysis

SonarQube JaCoCo

DevOps & Build

Docker Maven Git

IDEs & Environment

IntelliJ IDEA VS Code Postman

Management

Scrum Jira Trello Notion

AI Agents

Antigravity Codex Opencode


🚀 Strategic Roadmap

  • Python [■■■□□]
    Leveraging solid Java foundations to transition into the Python ecosystem. Currently exploring Django for enterprise-grade backend development, with focus areas in AI/ML integration and data pipeline orchestration.

  • NestJS [■□□□□]
    Extending backend expertise into the JavaScript/TypeScript ecosystem through NestJS. Focused on building scalable, maintainable APIs while applying enterprise architecture principles learned in the Java/Spring Boot ecosystem.

  • React [■□□□□]
    Exploring frontend development to understand the full stack. Goal is to build complete applications with backend + frontend integration, not to become a frontend specialist.


📊 GitHub Stats

Pinned Loading

  1. SkillTrust SkillTrust Public

    [WIP] A B2B marketplace sharing peer-verified tech interview approvals via candidate IDs. Validated by corporate emails, it cuts redundant testing, saving engineering hours and time-to-hire. Strict…

  2. LLM-Finder LLM-Finder Public

    [WIP] An AI-powered recommendation engine that matches users with the best cloud-based LLMs based on their technical requirements, use case, and budget.

  3. arca-sdk-java arca-sdk-java Public

    SDK modular en Java 21 diseñado para simplificar la integración con los Web Services de ARCA (ex AFIP). Encapsula la complejidad del protocolo SOAP, firmas CMS/WSAA y parseo XML mediante una API es…

    Java

  4. App-BiT-Public-Data-Intelligence-Panel App-BiT-Public-Data-Intelligence-Panel Public

    Plataforma web B2G con agente de IA para la gestión de políticas públicas de inclusión social. Consolida el dataset Vísent CDRView con indicadores de empleo, formación y salud mental regional, perm…

    Java

  5. SmartLocker-Back SmartLocker-Back Public

    Forked from Santa-Softt/SmartLocker-Back

    Java 25 and Spring Boot 3.5 monolith with Bounded Contexts. Implements atomic concurrency control via Redis, state-machine driven lifecycle management, and GraphQL/WebSockets. Security: OAuth 2.1 +…

    Java

  6. ubuntu-quintoimpacto ubuntu-quintoimpacto Public

    This is the backend web mobile app based on microentrepreneurship with finance of investors contacting them. Technologies used: Java, Springboot, Spring Security, JWT, Lombok, Caffeine, PostgreSQL,…

    Java