CV · Belgrade, Serbia · Go systems · Platform engineering

From Go services to global systems.

Platform and backend engineer building Go systems across identity, device management, access, networks and infrastructure, with responsibility from architecture and implementation through deployment, maintenance and documentation.

Download CV · PDF ↓

Focus

Internal platforms connecting identity, access, devices, HR, assets, software delivery, networks and infrastructure.

Ownership

Architecture, full-stack implementation, security, deployment, maintenance, user experience, process improvement and detailed documentation.

Core technology

Go, Python, Okta, Jamf Pro, Terraform, PostgreSQL, Docker and Linux, with AWS, Google Cloud Platform and Microsoft Azure.

Experience

Roles, responsibilities and progression.

Oct 2025 to Present

Systems Developer · LearnUpon Ltd.

  • Primary author and architect of an internal operations platform in Go, roughly 20,000 lines in a single binary, with an HTTP API, authenticated management interface and two background-worker pools coordinating multiple enterprise systems.
  • Designed an event-driven, idempotent Faktory job system with a serialized write queue for race-free external changes and fail-closed guards for consequential workflows when source data cannot be verified.
  • Built an in-house SCIM provisioning and reconciliation engine in Go, using Okta group membership as the source of truth to grant, revoke and continuously reconcile downstream access.
  • Automated employee IT lifecycle work including event-driven provisioning, HR-driven onboarding and offboarding ticket automation, timezone-aware deactivation and gated device wipes.
  • Shipped full-stack Go web applications using PostgreSQL, GORM, Google OIDC SSO, hardened sessions and CSRF protection, plus a zero-dependency access-review tool spanning seven SaaS platforms.

Mar 2023 to Oct 2025

Senior IT System Administrator · LearnUpon Ltd.

  • Started and led the Go engineering now central to IT operations while owning network, endpoint and cloud operations across global offices.
  • Implemented and managed SSO, SCIM provisioning and RBAC across 80+ applications in Okta, standardizing identity, access and role assignment across the application estate.
  • Authored an enterprise macOS software-deployment engine of roughly 7,000 lines of Python, run fleet-wide through Jamf Pro, with a self-healing atomic-locking subsystem and a generic multi-format installer.
  • Built the 77-application software-catalog pipeline feeding fleet auto-updates through fault-tolerant parallel release discovery, supply-chain integrity checks and keyless CI/CD to AWS S3 and CloudFront.
  • Owned Terraform infrastructure for a DigitalOcean fleet and wrote a reusable Linux and SSH hardening toolkit from scratch, covering a CIS-style baseline, auditing and user-lifecycle automation.
  • Designed, configured and maintained global office networking, including certificate-based Wi-Fi, self-hosted FreeRADIUS, UniFi, VPN access, DNS controls and HTTP firewall policies.
  • Redesigned onboarding and access workflows to standardize access, improve the employee experience, reduce wait time and cut support load.

Feb 2021 to Mar 2023

IT Administrator · LearnUpon Ltd.

  • Built and grew a fleet-automation library of roughly 250 Bash, Python and Go scripts for configuration, security and inventory across the macOS estate, deployed through Jamf Pro.
  • Engineered certificate and Wi-Fi EAP-TLS tooling and self-contained service subsystems, including secure remote-access tooling and a centrally governed application firewall.
  • Handled provisioning, onboarding and troubleshooting across endpoints and office networks, then improved operational processes and produced detailed documentation for recurring work.

Jul 2020 to Feb 2021

IT Support Engineer · Hyperoptic Ltd.

  • Investigated incidents with a root-cause focus and maintained consistent, detailed ticket records.
  • Supported Windows, Azure AD, Intune and device-lifecycle operations.
  • Improved support processes and trained users to reduce repeated issues.

Technical range

Languages, platforms and operational ownership.

Software and data

  • Go, Python and Bash
  • Backend and systems engineering
  • Full-stack Go web applications
  • Claude for AI-assisted software engineering
  • REST integrations and Faktory jobs
  • PostgreSQL and GORM

Identity and security

  • Okta identity architecture across 80+ applications
  • SSO, SCIM provisioning, in-house SCIM and RBAC
  • OIDC, OAuth2, CSP, CSRF and rate limiting
  • TLS and certificate lifecycle
  • EAP-TLS and FreeRADIUS

Infrastructure and fleet

  • Terraform, Docker and Linux hardening
  • AWS and Google Cloud Platform
  • Microsoft Azure, DigitalOcean and Cloudflare
  • Jamf Pro and macOS fleet management
  • Global office networking and UniFi
  • VPN, DNS and HTTP firewall policy
  • GitLab CI/CD and Datadog

Education

University of Belgrade

BA, English Linguistics and Literature

MA, English Literature

Languages

English, Native/Bilingual

Serbian, Native/Bilingual

Credentials and service

Certifications and volunteering.

Certification

Jamf Certified Associate

Issued Jul 2021

Certification

macOS for IT Administrators

Issued Feb 2021

Volunteering

English Translator

The Ministry of Foreign Affairs of the Republic of Serbia

Dec 2014 to Dec 2015