Bruno Cordeiro
Full Stack Engineer · Brasília-DF, Brazil
- Laravel · PHP
- Angular
- TypeScript
- React · Next.js
- Docker · K8s
I'm a Full Stack Engineer with over 10 years of experience building web systems with PHP and Laravel on the back end and Angular, React and TypeScript on the front end, from application code to CI/CD pipelines and infrastructure with Docker and Kubernetes. I currently build a large-scale public-sector platform used across 90+ service units with Angular and NestJS, and I have kept Laravel applications in production since 2017.
Open to remote international roles · UTC−3
Experience
G4F Soluções Corporativas
Full Stack Engineer · Brasília-DF
Mar 2022 – current
4 yrs 6 mos
alongside VegaIT, Ebserh, Basis Tecnologia
- Large-scale public service system (federal public sector) — Multi-language citizen-facing platform used across 90+ service units, with document generation and identity verification
- Next-generation public service system (federal public sector) — Creation of the modernized version that will replace the legacy system used across all units
Stack: Angular 22 · Angular Material + Fuse · NestJS 11 · Laravel · TypeScript · Next.js 15 (App Router/Turbopack) · React 18 · MUI 5 · Tailwind CSS · Redux · React Query · SWR · Formik/Yup · Highcharts · i18n (next-intl) · Transloco · ng-apexcharts · Prisma 6 · Passport/JWT · NestJS Throttler · WebSockets (socket.io) · Express · AdonisJS · Deno · PostgreSQL · Redis · Docker · Kubernetes · Microservices · gov.br SSO (Login Único/OIDC) · gov.br Design System (GOVBR-DS) · Jest · SonarQube · Jenkins · GitLab CI · hCaptcha + facial biometrics · DOMPurify · Per-request CSP/HSTS · Document generation (PDF/xlsx) · Transactional email (MJML) · Bamboo · Harbor
VegaIT
Frontend Developer · Brazil
Aug 2022 – May 2024
1 yr 10 mos
alongside G4F Soluções Corporativas
- SIM – Maintenance — Hotel maintenance management: equipment QR codes, floor/room/asset registries, service orders
Stack: React · Redux · Context API · React Query · TypeScript · MSW · Styled Components · JWT · Azure DevOps (Pipelines) · ESLint/Prettier/tsc
Ebserh
Full Stack Engineer · Brasília-DF
Sep 2021 – Jun 2022
10 mos
alongside G4F Soluções Corporativas, Basis Tecnologia
- Hospital management system — Budget control and hospital/department registries for the federal university hospital network
Stack: Angular 12/13 · Angular Material 12 · Fuse (Angular Material template) · Laravel 8 · PHP 7.4/8.0 · React 17 · TypeScript 4 · Transloco · ng-apexcharts · Tailwind CSS 2 · Eloquent (migrations, factories, API Resources) · PostgreSQL 13 · Docker · Portainer · Azure Pipelines · Git · ESLint/Prettier/tsc · Jest · PHPUnit 9
Basis Tecnologia
Full Stack Engineer · Brasília-DF
Dec 2020 – Jun 2022
1 yr 7 mos
- SECIC — Internal information classification system (federal government)
- Pátria Voluntária — Donation collection and distribution platform (federal government program)
Stack: React · TypeScript · Redux · Context API · MUI · Styled Components · Yup · JWT + ACL · SASS · Jest · PHP 7 · Laravel 8.1 · Eloquent · Swagger · AdonisJS · Express · Oracle · Jenkins · SonarQube · Docker · Docker Compose · Rancher · Harbor · Adobe XD
Partido Republicano da Ordem Social
PHP Developer · Brasília-DF
Nov 2017 – Dec 2020
3 yrs 2 mos
alongside Transoft
- Gráfica Pros — Print shop management and production
- SGP / SGJ / GPES — Party, legal, and research management systems
Stack: PHP 5.6/7.4 · Laravel · Optimuz (in-house framework) · Propel · Eloquent · Vue.js · jQuery · Bootstrap 4 · SASS/LESS · MySQL · PostgreSQL · Redis · Apache · Linux
Transoft
PHP Developer · Brasília-DF
Jun 2017 – May 2018
1 yr
- Transnet — Freight transportation and logistics management
Stack: PHP 4 · Oracle · JavaScript · HTML/CSS · Bootstrap · jQuery · SASS
Plug Digital
Junior PHP Developer · Brasília-DF
Jan 2016 – Nov 2017
1 yr 11 mos
- ExpliQa — Call center monitoring system
- SGP / GPES — Party management and strategic research systems
Stack: PHP 5.6 · MVC · OOP · Propel ORM · In-house framework (CLI, industry-standard docs) · PHPDoc/PSRs · Bootstrap · jQuery + plugins (datepicker, carousel, charts) · SASS · SVN · Linux
Stack
- Angular 22G4F, Ebserh
Standalone components, signals and typed reactive forms with RxJS — on Angular since version 12, in 2021
- Angular Material + FuseG4F, Ebserh
Licensed Fuse template — multi-layout theming over Angular Material + CDK and Tailwind, from the Angular 12 generation to the current one
- Transloco · ng-apexcharts · QuillG4F, Ebserh
The libraries the Fuse stack runs on: i18n with Transloco, ApexCharts dashboards and rich-text editing
- Next.js 15Link Charts, G4F
App Router, Server Components, ISR + cache tags, Turbopack; since versions 13/14 with React 17/18
- React 19Link Charts
Foundation of the entire frontend, with Server Components
- TypeScript · JavaScriptLink Charts
strict mode + noUncheckedIndexedAccess across ~570 files; ES6+ since 2016, TS end to end since 2020
Semantic markup and modern CSS (SASS/SCSS, LESS, Tailwind, CSS-in-JS), including client sites
- Rendering modesLink Charts, G4F
CSR, SSR, SSG, ISR, PPR — from corporate SPA, SSG and SSR routes to ISR 300s + revalidateTag
- Feature-based architectureLink Charts
10 features in production
SSR, light/dark themes, custom design system
- TanStack Query · SWRLink Charts, G4F
36 call sites and centralized query keys on v5 (formerly React Query); SWR on a large-scale public service system
- react-hook-form + ZodLink Charts
Layered form validation on the frontend
- Data vizLink Charts
30 ApexCharts chart components, choropleth/heatmap maps with Leaflet, tables with material-react-table
- i18nLink Charts, G4F
i18next — 13 namespaces in production; multi-language corporate product
- Technical SEOLink Charts
Metadata API, JSON-LD, programmatic sitemap/robots, llms.txt
- Frontend performanceLink Charts
next/font, optimizePackageImports, dynamic imports
- AccessibilityLink Charts
312 uses of aria-*, prefers-reduced-motion, layout validated at 320px
- Redux · Context APIG4F, Basis
State management in corporate projects
- Styled Components · SASS/SCSSG4F, Basis
CSS-in-JS and SASS across corporate interfaces
GOVBR-DS and jsx-a11y on a multi-language federal public product
Reactive Vue.js components with Bootstrap/LESS in Laravel admin screens — maintained legacy SPAs for ~3 years
- jQueryOrdem Social, Transoft, Plug Digital
DOM manipulation and plugins (datepicker, carousel, charts) — production interfaces on PHP systems for ~5 years
- Tailwind CSSside projects, this site
Utility-first CSS with custom tokens and theme — shipped responsive landing pages
- Framer Motionside projects
Declarative entrance and scroll animations on a published solo landing page
- Laravel 12Link Charts
PHP 8.2, in production since 2025
- PHP 5.6 → 8.2Link Charts, Basis, Ordem Social, Plug Digital
10 years following the language's evolution — Propel, Swagger and PSRs since 2016; from Laravel 8 on internal systems to Laravel 12 in production
- NestJSG4F, side projects
Public-sector microservices with gov.br SSO (OIDC) and Prisma 6; TypeORM and Passport/JWT on a solo project
- Layered architectureLink Charts
Controller → Service → Repository — DI by interface, DTOs, Strategy/Registry, Orchestrator, Observer, ADRs; 145 PHP files, ~28k lines
- REST + OpenAPILink Charts, Basis
/api/v1 routes documented with Scramble; Swagger on a corporate system — correct HTTP semantics and consistent versioning
- ORMs — 6 across 3 runtimesLink Charts, G4F, Basis, Ordem Social
Eloquent (observers, factories, seeders), TypeORM, Prisma, Propel, Lucid (Adonis), DenoDB — the pattern, not one library learned by rote
- Authentication & SSOLink Charts, G4F
JWT httpOnly, Sanctum and Auth0 end to end (front+back); gov.br Login Único (federal SSO/OIDC)
- Applied security (OWASP)Link Charts, G4F
JWT httpOnly, hash_equals, 16 rate limiters, anti-spoofing (Cloudflare), anti-fraud scoring; per-request CSP, HSTS, DOMPurify and hCaptcha on a large-scale public system
- Caching and async patternsLink Charts, Basis
Redis, ISR/cache tags, idempotency (dedup_key), queues, signed webhooks (hash_equals)
- Rate limitingLink Charts
16 named rate limiters
- Idempotent queues and jobsLink Charts
13 jobs, retry/backoff, dedup_key UNIQUE + insertOrIgnore
- SchedulerLink Charts
5 tasks with withoutOverlapping
- Structured logging with PII redactionLink Charts
8 channels, request_id propagated to workers
- Third-party integrationsLink Charts
Google Safe Browsing, Brevo, Auth0, GeoIP MaxMind, Yasumi integrated in the backend
- LGPD (Brazilian GDPR) complianceLink Charts
IP anonymization, account deletion, signed unsubscribe
- WebSocketsG4F
@nestjs/websockets + socket.io in a large-scale public-sector service platform
- MicroservicesG4F
Auth service separated from the core in a large-scale public service system
REST APIs with Express and AdonisJS (Lucid ORM) for corporate services
- DenoG4F
Deno runtime with OAK for routing and DenoDB as ORM in a corporate service
- Design fundamentalsLink Charts, G4F
OOP, SOLID, PSRs, MVC — the theoretical foundation behind the layered architecture
- PostgreSQL 15Link Charts
56 migrations, performance indexes, backfill, UNIQUE for idempotency
- Redis 7Link Charts
Cache, queues, sliding-window for viral rank
- Multi-dialect SQLLink Charts
Custom dialect layer (SqlDateExpr) for SQLite and PostgreSQL
- OracleBasis, Transoft
PL/SQL and schema design for corporate databases behind large internal systems
- MySQLOrdem Social
Relational modeling and queries for party-management and legal-case systems
- Blue/green deployLink Charts
Measured downtime: ~5min → 0s; custom bash scripts (176 lines): warm-up, health check, graceful nginx cutover, drain, abort
- DockerLink Charts
Multi-stage, Alpine with compiled extensions, 3 compose stacks by lifecycle
- GitHub ActionsLink Charts
CI ≠ Release, tag-based deploy, rollback via workflow_dispatch, concurrency groups
- OpenTelemetryLink Charts
Tail sampling, Grafana Cloud/Alloy, Faro RUM, Pyroscope, dashboards + alert rules as code, uptime probe that opens an issue
- GHCR registryLink Charts
Immutable images, retention for rollback
- Linux VPSLink Charts
DigitalOcean — nginx reverse proxy/LB, Let's Encrypt, Cloudflare real-ip, ufw
- SupervisorLink Charts
Process manager for the queue workers
- Expand/contract migrationsLink Charts
Automated guard (MigrationSafetyTest) in CI
- PostmortemsLink Charts
918 HTTP 502s → blue/green; --build-arg bug → CI guard; spoofable IP → Cloudflare real-ip
- BashLink Charts
Blue/green deploy scripts (176 lines) and operations
- KubernetesG4F
Container orchestration on a large-scale public-sector service platform
Corporate build and deploy pipelines
Container orchestration and private registry in corporate environments
Linux web server operations, from my own VPS to corporate infra
- Azure DevOpsVegaIT
Microsoft's boards and CI/CD pipelines on a frontend project
- PHPUnitLink Charts
PHPUnit 11 — ~902 tests: unit, feature, snapshot, characterization
- Database matrix in CILink Charts
Full suite run on SQLite AND against real PostgreSQL 15
- PHPStan level 5Link Charts
Larastan on Laravel, with a versioned baseline
- PlaywrightLink Charts
Multi-viewport E2E: 320/375/desktop, 6 projects, authenticated storage state
- Security testsLink Charts
IP spoofing, rate limiting, queue retry
- Lint as a gateLink Charts, this site
ESLint --max-warnings=0, Prettier and Laravel Pint blocking CI
- SonarQubeG4F, Basis
Static quality gate in corporate pipelines
- Jest · Testing Library · MSWG4F, Basis, side projects
Unit tests and API mocking, from corporate work to a solo project
- AI-first with guardrailsLink Charts
Spec-driven dev, multi-agent orchestration — ~1,929 solo commits/17 months, keeping 902 tests, PHPStan, E2E gates
- Context as an artifactLink Charts
A 22KB agent-context file versioned in the repo (agent onboarding), ADRs and postmortems that feed that context, llms.txt on the frontend
- Agent tooling ecosystemLink Charts
Configured MCP servers (browser/Playwright, PostgreSQL, Redis, GitHub, Vercel), git worktrees for isolated agent execution
- Git workflowLink Charts, side projects
Husky, commitlint/commitizen, repo-versioned hooks and Conventional Commits across all projects
MADR format; architecture decisions documented in docs/adr/, with versioned diagrams
- Web monetizationLink Charts
AdSense Consent Mode v2, Google Ads with conversion tracking, GA4
- Transactional/lifecycle emailLink Charts
Brevo/SendGrid — weekly digest, milestone, winback, onboarding
- SCRUM, Lean Kanban, JiraG4F, Basis
Scrum ceremonies, Kanban boards, and Jira backlog management in corporate teams
- Requirements gathering and documentationOrdem Social
Stakeholder interviews and functional specs for party-management systems
education & certifications
- B.Sc. in Systems Analysis and Development — Universidade Paulista (UNIP) · 2014–2017
AI agent usage
- sessions
- 49
- active days
- 29
- longest daily streak
- 14
- tokens generated this month
- 10.9M
aggregate numbers from my entire workflow with AI agents since Jul 2026 — tool- and project-agnostic