Maksym Smovziuk · Engineering Lead & Platform Architect
19 years shipping production software. Hands-on architect — React, Node.js, AWS, Kubernetes, AI-assisted delivery.
| NAME | READY | STATUS | AGE |
|---|---|---|---|
| atlas | 3/3 | Running | 12d |
| gatekeeper | 2/2 | Running | 12d |
| forge | 4/4 | Running | 11d |
| agents | 2/2 | Running | 6d |
| mcp | 2/2 | Running | 3d |
19 yrs
in production
20+
services on EKS
100+
projects shipped
100%
Upwork feedback
Platform architecture
The shape of what I run in production: 20 services on Kubernetes behind a WAF, shipped through GitOps, SaaS on the edges, managed data underneath. It heals itself: four AI agents watch errors, infrastructure, databases and releases, find the cause and fix it before anyone gets paged. Hover a service to trace its dependencies.Tap a service to trace its dependencies.
← scroll / pinch to explore →
ops agents · one per signal type, all on the agents deployment
0 incidents auto-healed · 0 pages to humans
self-healing loop
AI harness
Models are interchangeable. The harness around them is not: what the agent knows, what it can touch, what it must never do, how it proves the work is done, and how it learns from every run. I build that harness for my team, run agents as a team of their own, and keep judgment on top: what's worth building, what we must not break.
hover a layer to watch it work
MULTI-AGENT SETUP
Every task is routed to the skill that owns it. Unsettled ideas get grilled with a human before any code. Before code, an architect, a PM and a QA agent argue standards against spec. An e2e agent drives real user flows on a preview environment, a pentester attacks the new surface, review fans out to twelve isolated lanes, and a skeptic tries to disprove every finding. Nothing merges without a human.
shapes: classify-and-act · fan-out & synthesize · adversarial verify · loop until dry
Experience
Turned a PHP/jQuery system into the platform a 200-person company and 5,000+ customers run on every day. Built with a team of five I hired, and shipped automatically every day instead of by hand when needed.
Architect and full-stack JavaScript developer for English-speaking clients. Top Rated (top 3%), 15+ completed projects, 100% positive feedback.
Built a software company from scratch with a partner and stayed in every part of it: sales, hiring, mentoring, delivery and architecture.
Senior full-stack JavaScript and PHP developer at an outsourcing shop running many products at once. Shipped 100+ projects of every size.
My first real team job: clients in English every day, and sites taken from idea to production.
Started repairing computers and taught myself PHP by building the company's first website.
Selected work
One platform, 27 systems, a small team: product, platform, AWS infrastructure, security and AI. Names are generic; the systems are real.
AI
Works around the clock with the same skills engineers use: turns each new error into a ticket and a fix PR, reviews and fixes PRs until clean, updates packages daily, runs weekly security, cost and code scans, and consolidates team knowledge nightly. About 90% of its PRs get merged. It never merges itself.
PLATFORM
A legacy PHP/jQuery system rebuilt as React and Node services on AWS EKS without stopping the business. Now the same strangler pattern moves work off Salesforce: reads go through the Data API, CRM automations become event handlers, MongoDB becomes the system of record.
INFRA & AWS
One Graviton cluster for 20+ services: spot node groups spread over six instance pools, cluster autoscaler, VPA and scheduled scaling, Kustomize overlays per app, version upgrades from written runbooks.
SECURITY
AWS Config and Security Hub switched on, then a baseline of 122 failed findings across 45 controls worked one control at a time: fix and verify with a re-pull, or accept with a written reason.
AI
A chat message becomes a file edit in an isolated per-user pod with a live preview. An accepted change leaves as a branch and a PR, only after the repo's own type-check and lint pass.
INFRA & AWS
Every repo ships the same way: ARM64 builds, staging on every push, production behind a release step with semantic versioning. Images deploy through Kustomize, SPAs sync to S3 behind CloudFront, packages publish behind a test gate.
PLATFORM
A VPC-internal service in front of MongoDB, DynamoDB and the CRM. Registry-driven with no domain logic; apps move reads over one resource at a time with an off → shadow → on switch.
SECURITY
Four web ACLs across load balancers and the CDN: managed rule sets, rate limits, geo rules, staging gates and a custom block page. Rules live in git and are applied by script.
AI
70+ skills, layered rules and 230+ memory entries in one repo, loaded by Cursor and Claude Code. Deny hooks, post-work checks, and a nightly pass that turns repeated lessons into rules.
AI
Every pull request gets an agent review: twelve isolated lanes, a skeptic that tries to disprove each finding, and a different lens on each round. Bot PRs are fixed and pushed until clean; human PRs get one honest comment.
AI
A governed company wiki that replaces a SaaS tool: owners, review dates and a lifecycle per document, live co-editing, and semantic search. Agents read the same source of truth over REST and MCP.
INFRA & AWS
51 cost anomalies investigated and ranked, idle and legacy services retired, the rest right-sized. The monthly bill went down about 30% in two months without cutting capacity.
SECURITY
A permission library every app checks with: policy read once and cached per account, rolled out off → shadow → on. A coverage test fails the build when an ungated route appears.
INFRA & AWS
Images are built in CI and deployed by CodeBuild inside the VPC, so the cluster API endpoint can go private. One Terraform module per service, least-privilege deploy RBAC.
SECURITY
A platform-wide review merged into one plan, image CVEs fixed against the digest that actually runs, and tiered egress network policies per workload, with private peering to the database.
SECURITY
One sign-in for employees and customers across SPAs and Next.js apps: Google or one-time code, 60-second exchange codes, short-lived JWTs, fail-closed by default.
INFRA & AWS
An inventory of every AWS and SaaS dependency, a backup strategy per resource type, and a runbook to bring the platform up in a second region if the primary one goes dark.
SECURITY
Evaluated a self-hosted AI pentest agent in three measured runs: white-box repo scans now, active staging attacks once write suppression and allow-listed egress are in place.
AI
Streamable HTTP MCP that lets agents look up properties and open maintenance requests, work orders and help-desk tickets through the core API with scoped keys.
PLATFORM
Private npm registry, shared API, UI and lint packages, fleet update scripts, and a Next.js template that scaffolds a new EKS app with SSO, tRPC and data access in one command.
PLATFORM
Resumable uploads, image transforms, document conversion and video transcoding behind one service, with queue workers and cron jobs for the heavy lifting.
PRODUCT
One timeline per contact: CRM tasks, calls, SMS, call transcripts and email, synced in the background and searchable in one place.
PRODUCT
Property search and listings, resident and owner portals, maintenance intake and billing, plus a services site with lead forms.
PRODUCT
Live business and tech metrics across the CRM, AWS, Kubernetes, Sentry and git in one screen. Read-only on every upstream, keeps its own history.
PRODUCT
Double-entry accounting with market-isolated ledgers per tenant, roles and API keys, and sync with the property systems.
PRODUCT
Document signing with high-memory PDF generation and post-sign hooks, and appointment scheduling with Google Calendar sync and reminders.
PRODUCT
On-site package lockers: a React and Express app driving a C++ hardware SDK through a .NET 8 wrapper, running unattended under PM2.
Tech stack
hover for years and where it runs · drag or swipe to scroll
Platform architecture, AI-assisted delivery, or a team that needs a hands-on lead.
May I count visits with Google Analytics? It sets Google cookies. Nothing else is tracked.