homeprojectsblogabout
  • github

  • email

  • x / twitter

  • linkedin

  • personal docs

  • rss

© 2026 Yehezkiel Wiradhika

Yehezkiel Wiradhika's portraitZoom
Go
Python
Node.js
TypeScript
Docker
Kubernetes
Redis
RabbitMQ
PostgreSQL
MySQL
AWS
Cloudflare
Next.js
React
Terraform
GitHub Actions
Nginx
Grafana
Prometheus

Yehezkiel Wiradhika

Secure Backend Engineer · DevSecOps · Penetration Testing

Yehezkiel Wiradhika's portraitZoom

A Secure Backend / DevSecOps Engineer with 2+ years of experience designing, shipping, and operating production-grade Go (Golang) microservices and distributed systems — backed by real penetration testing experience. I understand vulnerabilities from both sides: as an attacker who has probed 20+ web applications, and as an engineer who has built and deployed the systems being attacked.

Backend expertise includes Hexagonal Architecture, Clean Architecture, gRPC (Protobuf), WebSocket real-time systems, Redis, and RabbitMQ. Infrastructure expertise spans the full deployment lifecycle — Docker, Kubernetes, Terraform, Nginx reverse proxy, and CI/CD automation via GitHub Actions with SAST/DAST (SonarQube, Semgrep), automated unit and integration testing, and security-first pipeline design. Proficient in AWS and Cloudflare cloud infrastructure, load balancing, distributed tracing, and monitoring (Prometheus, Grafana).

On the offensive side: VAPT across web applications and network infrastructure using Burp Suite, Nmap, SQLMap, and OWASP Top 10 methodology. On the defensive side: detection engineering with Wazuh SIEM, Snort IDS, and honeypot analysis (Cowrie, SNARE, Tanner). I also build custom security tools and SaaS: Vortex (threat intelligence), AegisCI (secure CI/CD pipeline), GateKeeper Go (zero-trust API security proxy), RBACLens (Kubernetes RBAC blast radius scanner), and Secure Go (hardened Go API template). Pursuing eJPT certification.

Additional background in AI/ML system integration (YOLO, LangChain, TensorFlow, FastAPI) and secure authentication design (JWT, OAuth2, Role-Based Access Control). ITS Informatics Engineering graduate and Ruang Guru Go Backend Engineering Bootcamp alumni.

Education & Certifications

  • B.Eng. Informatics (Comp. Sci.), Institut Teknologi Sepuluh Nopember (ITS) — Graduated Sept 2025 (GPA ~3.40)
  • Go Backend Engineering Bootcamp, Ruang Guru — GPA ~3.90
  • eLearnSecurity Junior Penetration Tester (eJPT) — In Progress
Github LinkedIn Twitter Resume

Work Experience

Where I've shipped Go backends, distributed systems, industrial AI, and security tools.

2+ Years Experience

FullStack Engineer (Backend, DevSecOps)

Studio 8 (Malang)·Freelance·Malang, Indonesia
Jul 2026 – Present
15 Status Enums & Priority 0–4PWA Offline-First CacheAutomated CI/CD + SonarQube

Sole engineer building a production-grade real-time task management platform for a creative studio, combining WhatsApp-style conversational messaging with structured Kanban task tracking (15 status types, 0–4 priority system).

  • Architected Go backend utilizing WebSocket real-time messaging, PostgreSQL, and Redis caching.
  • Engineered Next.js PWA offline-first architecture with IndexedDB local caching and date-range server sync.
  • Provisioned production infrastructure with Nginx reverse proxy, Dockerized deployment, RabbitMQ, PostgreSQL, and PM2.
  • Implemented automated CI/CD pipeline incorporating SonarQube static code analysis and automated testing.
Stack:GoNext.jsTypeScriptWebSocketPostgreSQLRedisRabbitMQDockerNginxPWACI/CDSonarQube

Go Backend & Computer Vision Engineer (Distributed Systems & AI)

PT. Century Batteries Indonesia (Astra Otoparts)·Contract·Jakarta, Indonesia
Dec 2025 – June 2026
~Rp100M/yr Cost Saved70% Inspection Time Cut<1% Misidentification RateRp24M Hardware Saved via gRPC

Go Backend Engineer at an Astra manufacturing subsidiary specializing in industrial Computer Vision systems, Edge-to-Cloud architecture, and enterprise logistics platforms.

  • Engineered Computer Vision Cover Part Number Smart Sorter (YOLO, ~99% mAP50) cutting tray inspection time by 70% and saving ~Rp100,000,000/year in manual labor.
  • Refactored PLT Line CV architecture from monolith to Edge-to-Cloud via gRPC, eliminating 3 industrial mini PCs and saving Rp24M in hardware.
  • Architected Enterprise LMS (Hexagonal Architecture, Redis caching, RabbitMQ) serving 600+ users with a 40% reduction in response times.
  • Built Battery Request Management System (REST API + PostgreSQL) for centralized logistics serving 600+ users.
  • Engineered Go AI Orchestration Layer for microservices Face Swap platform with gRPC and Goroutines isolating Python FastAPI inference services.
Stack:GoPythongRPCYOLOPostgreSQLRedisRabbitMQFastAPIDockerHexagonal Architecture

Fullstack Engineer (Backend, DevSecOps)

Volvinco·Self-employed·Surabaya, Indonesia
Apr 2024 – Dec 2025
1,000+ Concurrent Users>90% Test Coverage60% Faster Deploy Time1st Place FTIRS Competition

Led Go backend and cloud infrastructure engineering at a security-focused software agency across 3 production products: Kos Kaka (property), Muncak Kuy (e-commerce), and Veritax (fintech RAG chatbot).

  • Built high-concurrency Go backend systems using gRPC, Redis, RabbitMQ, and Kafka supporting 1,000+ concurrent active users.
  • Designed REST APIs (OpenAPI/Swagger) maintaining >90% automated unit and integration test coverage.
  • Managed AWS and VPS production infrastructure via GitHub Actions CI/CD, reducing deployment times by 60%.
  • Won 1st Place at FTIRS National Business Competition and secured ITS Youth Technopreneurship (IYT) funding.
Stack:GogRPCRedisRabbitMQKafkaPostgreSQLAWSDockerGitHub Actions

Penetration Tester

DPTSI ITS·Internship·Surabaya, Indonesia
Sept 2024 – Jan 2025
20+ Systems TestedCritical Vulnerabilities UncoveredeJPT in Progress

Conducted offensive security, web application, and network penetration testing across 20 enterprise systems at ITS's central Directorate of Information Technology Services.

  • Executed comprehensive penetration tests using Nmap, SQLMap, Metasploit, Hydra, Nessus, Nikto, Dirsearch, Burp Suite, and OWASP ZAP.
  • Uncovered and documented critical vulnerabilities including SQL Injection (database leak), Broken Access Control (admin privilege escalation), and request tampering exploited for online gambling.
Stack:Burp SuiteOWASP ZAPSQLMapMetasploitNmapNessusSecurity AuditingPenetration Testing

Fullstack Developer

PT. KYB Indonesia (Astra Otoparts)·Internship·Bekasi, Indonesia
Aug 2023 – Dec 2023
80% Reduced Data Loss Risk60% Administrative Efficiency Gain200+ Active Employees

Led development of KYB's internal Training Center Administration System following Agile SDLC methodologies.

  • Migrated legacy decentralized Excel workflows to a centralized internal SQL database and web portal.
  • Eliminated 80% of data loss risk and boosted training administration efficiency by 60% across 200+ active employees.
Stack:PHPMySQLAJAXjQueryBootstrapAgile SDLC

Backend Engineer

StudentsXCEOs League 2022·Project·Indonesia
2022

Engineered backend services and authentication systems for the national StudentsXCEOs League platform.

  • Built user registration, event management, and secure JWT authentication with Role-Based Access Control (admin/user).
  • Integrated validated REST APIs via Axios on the React frontend.
Stack:Node.jsExpress.jsMongoDBMongooseJWTREST APIReact

Frontend Engineer

Schematics ITS 2021·Project·Surabaya, Indonesia
2021

Developed public event platforms, ticket purchases, and interactive web features for ITS's premier IT festival.

  • Built National Programming Contest (NPC) Registration and REEVA Ticket Purchase flows with React, Next.js, and Tailwind CSS.
  • Engineered landing pages, sponsor showcase integrations, and interactive 3D virtual tour elements.
Stack:ReactNext.jsTailwind CSSJavaScriptUI/UX