Open to opportunities

Andrei Grace

@andreigrace

Message

Full-stack engineer building production SaaS with real-time collaboration and secure auth.

Philippines

Message

What I'm looking for

I’m looking to build production-ready products end-to-end—shipping real features fast, owning real-time collaboration, and implementing secure auth, CI/CD, and reliable zero-downtime deployments in a pragmatic engineering team.

I’m a self-taught full-stack engineer who builds and ships real products. I’ve focused on turning ideas into production-ready apps with strong engineering practices—auth, security, CI/CD, and reliable deployments.

At Meshwork Studio, I built an end-to-end production SaaS from scratch: a canvas-based visual design tool with live real-time collaboration. I implemented WebSocket-based multiplayer with operational transforms for conflict resolution and optimistic UI updates for responsiveness.

I also shipped a full authentication system with security hardening, including IDOR protection, brute-force lockout with exponential backoff, CSRF tokens, rate limiting, and AES-256-GCM encryption for stored API keys. I followed through with automated testing and builds on every PR via GitHub Actions, then deployed using a blue-green strategy with zero-downtime swaps on Railway.

Experience

Work history, roles, and key accomplishments

Current

Full-Stack Engineer

Current

Bandle

May 2026 - Present (1 month)

Building Bandle, a booking platform connecting live music venues with bands using fully containerized, multi-database backend services. Developed role-based authentication across venue and band user types and features for profiles, search/discovery, and matchmaking with React/Tailwind, FastAPI/Python, MongoDB (content), PostgreSQL (relational), and Docker deployments.

React Tailwind fastAPI Python MongoDB PostgreSQL Docker

Current

Founder & Full-Stack Engineer

Current

Meshwork Studio

Dec 2025 - Present (6 months)

Built and shipped Meshwork Studio, a production SaaS design tool with authentication, live real-time collaboration, enterprise security, and zero-downtime deployments. Implemented WebSocket collaboration with operational transforms, Docker/NGINX (5 containers), CI/CD on GitHub Actions, and security hardening including CSRF, IDOR protection, exponential brute-force lockout (15m→30m→60m, capped at 8

React TypeScript React Flow WebSockets Operational Transforms Nginx GitHub Actions Security Hardening (Passport.Js CSRF AES 256 GCM

Education

Degrees, certifications, and relevant coursework

Independent Study

Independent Study, Software Engineering

Self-directed education in full-stack development, real-time systems, security engineering, and production application development, validated through shipped real-world projects.