~/john-filhmar-ola $ ./introduce --brief

John Filhmar Ola.

Lead IT · Full-Stack Engineer · DevSecOps & Infrastructure

I build systems end to end — from first commit to production operation.

view workget in touch →

role: Lead IT @ YouCode Technologies · systems shipped: 5+ · status: open to conversations

profile.sh — bootclick to skip

$ ./init --profile john.filhmar.ola

▸ loading modules …

full-stack ✓ microservices ✓ DevSecOps ✓ infra ✓ security ✓

▸ role: Lead IT @ YouCode Technologies

▸ owning systems end to end — first commit to production

$ ready — scroll, or press ⌘K

01 // about

I own systems from first commit to production.

I'm a Lead IT and full-stack engineer at YouCode Technologies, where I own multiple production systems end to end — architecture, development, automated testing, CI/CD, and on-premise infrastructure. I was promoted to lead within my first year.

My favorite work spans the whole stack. I'm the sole developer of Usapp, a secure real-time messaging platform built from scratch across mobile, distributed microservices, deployment pipeline and production servers — now the notification backbone for the company's entire product suite.

I care about the unglamorous parts too: security scanning in CI, hardened containers, monitoring, and incident diagnosis at 3 a.m. This site is part of the evidence — every section, color and sentence is editable config, no code changes.

$ whoami

john filhmar ola — lead IT · full-stack · DevSecOps

$ cat focus.txt

production systems · infrastructure ownership · shift-left security

$ cat philosophy.txt

"Build it, secure it, ship it, run it — end to end."

$ status

Lead IT @ YouCode Technologies · Dasmariñas, PH (UTC+8)

02 // expertise

▸ = core strength

Across the stack. Deep where it counts.

languages

Typed everywhere, from web to firmware.

  • ▸ TypeScript
  • ▸ JavaScript
  • ▸ Python
  • ▸ Bash
  • ▸ PHP
  • C / C++
  • C#
  • Java

frontend & mobile

Interfaces that feel instant.

  • ▸ React
  • ▸ React Native (Expo)
  • ▸ TailwindCSS
  • ▸ HTML5
  • ▸ CSS
  • ▸ Responsive UI

backend & apis

Distributed services that stay up under load.

  • ▸ NestJS
  • ▸ Node.js
  • ▸ Microservices
  • ▸ gRPC
  • ▸ WebSockets
  • ▸ RabbitMQ
  • ▸ Express
  • ▸ REST APIs

databases & storage

Schema-first, cached where it matters.

  • ▸ PostgreSQL
  • ▸ MongoDB
  • ▸ MySQL
  • ▸ Redis
  • ▸ Schema design
  • MinIO / S3-compatible

DevSecOps & ci/cd

Automated from commit to production.

  • ▸ Docker
  • ▸ GitHub Actions
  • ▸ Self-hosted runners
  • ▸ Automated pipelines
  • ▸ Docker Compose
  • ▸ nginx
  • Traefik

infrastructure

On-premise servers, provisioned and hardened by hand.

  • ▸ Linux (Ubuntu/Debian)
  • ▸ On-premise VPS
  • ▸ SSH hardening
  • ▸ systemd
  • ▸ cron
  • ▸ Networking
  • WireGuard VPN

security engineering

Shift-left, supply-chain aware.

  • ▸ Dependabot
  • Semgrep
  • CodeQL
  • Snyk
  • Trivy
  • gitleaks
  • OWASP ZAP
  • cosign
  • SBOM
  • SLSA provenance

monitoring & testing

Observability and load testing before it breaks.

  • ▸ Prometheus
  • ▸ Grafana
  • ▸ k6
  • ▸ Incident diagnosis
  • Loki
  • node-exporter
  • cAdvisor
  • fio

embedded & iot

Where software meets metal.

  • ▸ Arduino
  • ▸ Embedded C/C++
  • ▸ Sensor integration
  • GSM / SMS

practices & leadership

Full-stack ownership, teams that ship.

  • ▸ Full-stack ownership
  • ▸ Microservice design
  • ▸ Cross-team collaboration
  • ▸ Code review
  • ▸ Technical documentation
  • ▸ Agile delivery

03 // featured work

Work that shipped.

P-01backendmobileDevSecOps

Usapp

Secure real-time messaging platform — the notification backbone for an entire product suite.

Live · the notification backbone for the company's entire product suite · positioned as a super-app foundation.

$ cat case-study.md

problemThe company's product suite needed one secure, real-time channel for messaging and push notifications instead of fragmented per-app integrations and an SMS dependency.

my roleSole developer & architect — mobile client, distributed backend microservices, deployment pipeline, and production server operations, all built and run single-handedly.

key decisionsDistributed microservice backend with real-time messaging. Mobile application with push notification delivery. Full CI/CD pipeline with automated security scanning and signed artifacts. Production infrastructure and monitoring owned end to end.

  • Microservices
  • Real-Time
  • Mobile
  • Messaging
  • Infrastructure
P-02full-stackbackend

YouCode HRIS

Per-client HR platform covering the full employee lifecycle — hiring to payroll to compliance.

In production as a per-client system for government and private-sector organisations. Architecture, structure and stack withheld under NDA.

$ cat case-study.md

problemOrganisations, both government and private, needed one system to run their entire HR operation — delivered as an isolated per-client instance whose data never mixes with any other client's.

my roleSole developer — built the product end to end at YouCode Technologies.

key decisionsCovers the full employee lifecycle: onboarding, time & attendance, leave, payroll, performance, recruitment, training, records and compliance. Client-specific behaviour — branding, leave policies, single sign-on — is configured by admins in-app, so one product serves many organisations with no code changes. Access is governed by a permission model tied to each organisation's own hierarchy: a person can only ever delegate a subset of the access they hold. Shipped as a self-contained, isolated deployment per client — no shared multi-client data store.

  • HR Tech
  • SaaS
  • Multi-tenant
  • Full-Stack
  • Web
  • Enterprise
P-03full-stackmobile

Civic Super App Platform

White-label super-app that lets a city run its own branded resident app — three cities live.

Live for three cities — MyDasma (Dasmariñas), MySorsogon (Sorsogon City) and MyLegazpi (Legazpi) — with new cities added by configuration alone. Internal architecture and stack withheld under NDA.

$ cat case-study.md

problemEvery local government wanted its own citizen app and admin consoles, but building one per city doesn't scale. The design mandate: every per-city difference is data, never code.

my roleSole developer — resident mobile app, the city and platform web consoles, and the backend, end to end.

key decisionsOne platform serves many cities — a new city is onboarded through configuration and content, not a code branch. Resident app: government services, 311 issue reporting, emergency SOS, news, tourism, transport, evacuation centres and a digital ID — usable offline. A city console for staff (content, maps, dispatch, alerts, submission queues) plus a separate platform console for operating the whole fleet of cities. Live emergency dispatch on a real-time command map, and targeted alerts with per-recipient delivery tracking.

  • Civic Tech
  • GovTech
  • White-label
  • Multi-tenant
  • Mobile
  • Web
P-06full-stackbackend

YouFlow

AI-native Kanban — automatic work estimation, daily management reports, and a native interface for AI agents.

In use for AI-assisted team workflows — the team tracks YouFlow's own development inside YouFlow. Architecture, structure and stack withheld under NDA.

$ cat case-study.md

problemOrdinary Kanban tools track where work sits but not who produced how much, force managers to assemble end-of-day updates by hand, and give AI assistants no safe, permissioned way to participate as real team members.

my roleSole developer — built the platform end to end at YouCode Technologies.

key decisionsAI-suggested story-point estimates and due dates on new cards, with human confirmation — only confirmed estimates count toward reporting, so the numbers stay trustworthy. Automated end-of-day reports: a scheduled job compiles each workspace's finished work and delivers it to management over SMS or email at a set local time. A native Model Context Protocol (MCP) interface lets AI assistants read and drive the board as an authenticated team member — with exactly that user's permissions. External intake tokens let other systems post bug reports straight onto a board; a per-workspace role hierarchy governs who can do what.

  • Project Management
  • AI-native
  • MCP
  • PWA
  • Full-Stack
  • SaaS
P-07full-stackDevSecOpssecurity

JMS E-Talyer

Multi-branch automotive service management, self-hosted and self-operated.

Live in production on a self-managed VPS · four-workflow CI/CD · layered security scanning · ongoing feature development.

$ cat case-study.md

problemMulti-branch automotive service operations needed real-time monitoring and reliable daily transaction reporting — on infrastructure owned and operated end to end, not rented as a black box.

my roleSole developer, owner & maintainer — application, DevSecOps pipeline, and a self-provisioned VPS I secure, manage and operate myself.

key decisionsSelf-provisioned and self-managed VPS — provisioning, deployment, monitoring and maintenance owned end to end. Multi-branch operations with real-time monitoring and daily transaction reports. Four-workflow CI/CD: continuous integration, security scanning, gated deployment, and automated dependency management. Layered security scanning — static analysis, dependency auditing, secret scanning across full git history, dynamic testing, and container vulnerability scanning. Hardened container runtime: multi-stage builds, production-only dependencies, non-root user, correct signal handling, health checks. Application hardening: security headers, origin allow-listing, tiered rate limiting, scoped CSRF protection, and production error sanitisation. Manual-gated deployments with branch and environment guards; secrets injected at runtime with no credentials written to disk.

  • Full-Stack
  • DevSecOps
  • CI/CD
  • Docker
  • Node.js
  • React
  • MongoDB
  • MySQL
  • VPS Operations
P-08mobilesecurity

PeraPlano

Privacy-first Android budgeting that tracks spending from your transaction notifications.

In development · free-to-use · privacy-by-design · tracking derived from transaction push notifications.

$ cat case-study.md

problemManual expense logging is high-friction and most budgeting apps expose sensitive financial data. Users needed private tracking that updates itself.

my roleSole developer — Android app, encryption model, and notification-derived transaction tracking.

key decisionsEncrypted user financial data — privacy-by-design for sensitive personal records. Derives income and expense tracking from transaction push notifications, minimising manual input. Daily, monthly and annual budgeting and savings goals with threshold alerts. Roadmap includes optional premium features via in-app purchases.

  • Mobile
  • Android
  • React Native
  • Fintech
  • Encryption
  • Privacy
P-04full-stackmobile

Offline-First Learning Platform

An LMS that keeps working with no signal — offline exams, lessons and verifiable credentials.

Built for large, distributed organisations with thousands of concurrent learners on unreliable networks. Implementation details withheld under NDA.

$ cat case-study.md

problemLarge, distributed organisations needed to train and test thousands of learners on modest phones over unreliable networks — where a dropped connection must never lose a learner's work.

my roleSole developer — built the platform end to end at YouCode Technologies.

key decisionsComputer-based testing runs entirely on the device and syncs answers back when a connection returns — nothing is lost to a dropped signal. Offline course player for reading and studying lessons, including video, with no connection. Verifiable micro-credentials anyone can check through a public verification portal. Bulk onboarding of thousands of learners processed in the background, so large imports never stall or time out.

  • EdTech
  • LMS
  • Offline-first
  • PWA
  • Full-Stack
  • Web
P-05iotbackend

YouGuard Edge Bridge

Self-hosted edge server linking on-site access-control and camera hardware to the cloud.

Deployed per site (schools, offices, campuses) as the bridge between on-premise security hardware and the cloud platform. Architecture, protocols and stack withheld under NDA.

$ cat case-study.md

problemA facility's turnstiles and face-recognition cameras each spoke different protocols and needed a reliable, offline-tolerant link to the cloud platform — without opening any inbound firewall holes.

my roleSole developer — designed and built the edge service and its web admin console end to end.

key decisionsOne deployable service per site hosts every hardware family behind a common adapter, replacing separate single-purpose bridges. Accepts scan events from turnstiles and face-recognition cameras, decides entry/exit direction, and forwards them to the cloud durably. Keeps operating while the cloud is unreachable, then replays everything it buffered — nothing is lost. All cloud traffic is outbound-initiated, so sites need no inbound firewall openings; ships its own admin console and live video wall.

  • IoT
  • Edge
  • Access Control
  • Hardware Integration
  • Backend
  • Surveillance
P-09full-stack

Kalusugapp

Digital health records and scheduling for rural clinics.

Live (2024–2025) · digital records replacing paper · improved accessibility and scheduling for underserved communities.

$ cat case-study.md

problemRural clinics relied on paper records and manual scheduling, limiting record accessibility and efficiency for underserved communities.

my roleDeveloper — patient records and appointment management built for low-resource clinic environments.

key decisionsDigital patient records replacing paper-based systems. Appointment scheduling and management. Built for low-resource clinic environments.

  • Healthcare
  • Full-Stack
  • React
  • Node.js
  • MySQL
  • Social Impact
P-10iot

Flood Notification System

IoT flood early-warning with sirens, warning lights, and SMS alerts.

Completed (2024–2025) · multi-channel alerting · tracks water level and rate of rise per area.

$ cat case-study.md

problemFlood-prone communities needed early warning that conveys not just that water crossed a threshold, but how fast it is rising — so residents can judge how quickly conditions are worsening.

my roleSole developer — sensors, embedded firmware, and multi-channel alerting.

key decisionsMulti-channel alerting: audible sirens, warning lights, and GSM SMS dispatch. Tracks both water level and rate of rise per monitored area. Designed for community-level deployment in flood-prone areas.

  • IoT
  • Arduino
  • C++
  • GSM
  • Embedded
  • Disaster Response
  • Social Impact

04 // experience

Building and operating production systems.

Jul 2025 now

Lead IT

YouCode Technologies

  • Promoted from Developer to Lead IT (2026) within the first year; own multiple production systems end to end — architecture, development, CI/CD, security automation, and on-premise infrastructure across the product suite.
  • Sole developer of Usapp, a secure real-time messaging platform — architected and built from scratch across the mobile app, distributed backend microservices, deployment pipeline and production server management.
  • Delivered production systems now in active commercial use: a white-label civic super-app live for three LGUs (MyDasma, MySorsogon, MyLegazpi), a per-client flexible-hierarchy HRIS serving government and private-sector clients, and an offline-first learning platform (LMS) — each built end to end.
  • Own CI/CD across the product suite — automated build, test, security scanning, artifact signing and deployment pipelines, including self-hosted runner infrastructure.
  • Lead on-premise infrastructure operations: server provisioning, container orchestration, monitoring stack deployment, and production incident diagnosis — including automated diagnostic tooling for resource saturation and service health.
  • Designed cross-product notification architecture — all company systems dispatch push notifications through the messaging platform, consolidating delivery and reducing SMS dependency and cost.
  • Built hardware-to-server integration for a campus management system, enabling automated daily attendance capture and school security monitoring.
  • Established performance and capacity baselines through load testing and infrastructure benchmarking, producing formal technical findings used in vendor and stakeholder decisions.

Feb 2025 May 2025

Frontend / Web Developer Intern

Ynnovision Enterprise Solutions

  • 486-hour development internship building and improving web application features.
  • Delivered assigned development tasks to deadline with consistent code quality.
  • Contributed improvements to system stability, usability and overall performance.

05 // ai assistant

Ask me anything.

A small demo of how I build AI features: this assistant answers questions about my work using a structured knowledge base — intent matching, streamed responses, graceful fallbacks.

▸ live mode — answers are generated by an LLM grounded in a curated knowledge base · it can make mistakes, so verify anything important

try:

assistant@johnlive

assistant ▸

06 // contact

Let's build something.

If you're hiring for full-stack, DevSecOps or infrastructure work — or you just want a second opinion on an architecture or a production setup — my inbox is open. I reply within 24 hours.

olajohnfilhmar@gmail.com

$ ./send-message # sends your message straight to my inbox

john@filhmar:~

Built by hand as a live demo of my work — no template, no framework boilerplate. Every word and color on this page comes from editable config files.

© 2026 john filhmar ola · exit code 0