Senior Full-Stack Software Engineer & Self‑Hosted Infrastructure Builder.
10+ years of end-to-end commercial software delivery—from Java Spring Boot & PHP backends to a self-managed 3-host, 162-container production platform and Agentic Workflows (Hermes Agent, MCP).
The uneventful kind of software.
I'm Hoelee — a full-stack engineer based in Perak, Malaysia. Eleven years of shipping systems that have to keep working when nobody is watching: billing portals, logistics dispatch, receipt reconciliation, and lately a self-hosted platform running 162 containers across three machines.
I build for the boring failure modes. Deterministic state machines where logic must never drift, LLMs only where the input is genuinely open-ended, and monitoring that shouts before a customer does. I like problems where the customer can describe the pain but not the solution — that's usually where the real work is.
- 11 years commercial delivery
- Perak, Malaysia
- Remote or hybrid
Currently open to senior full-stack, DevOps and AI engineering roles.
Models draft. Deterministic gates decide.
Agents drafted half a million lines across five repos in thirty days. What defines the work is the 130,000 the gates refused — the verdict belongs to machines that cannot be talked out of failing:
- Reflection probe — every public route parameter must carry an explicit default, or the build fails
- Glyph counter — a headless PDF extracts rendered CJK characters, so a dropped font fails the build
- Byte ledger — the transcoder compares exact bytes, because rounded megabytes hid a size regression for weeks
Every site arrives as a tangle. The job is four straight lines.
Ten years of the same picture: three tools nobody chose, two DNS logins, a certificate renewing against a domain nobody is watching, and mail that lands in spam because an SPF record was last edited in 2019. None of it is dramatic. It is just undocumented — which is how it ends up breaking on a Friday.
- Who owns the domain and the certificate, with a renewal date
- One address, one redirect chain: www and bare domain agree
- HTTPS that renews itself, and a CAA record naming the issuer
- Mail that passes SPF, DKIM and DMARC, so invoices do not reach spam
This is the order I work in on every engagement; not a checklist, a sequence.
Production Systems & Architecture
Verifiable, running artifacts across full-stack applications, self-hosted infrastructure, and automated AI workflows.
AI Video & Multilingual Knowledge Portal ↗
End-to-end media processing platform with automated multilingual AI speech-to-text transcription and structured knowledge indexing.
3-Host 162-Container Production Platform ↗
Self-managed Docker infra across DSM, Unraid & Ubuntu VPS (78+ Compose stacks) with Traefik ACME TLS, authentik SSO & Prometheus/Grafana.
Deep-Dive Architecture & SRE Postmortems ↗
Astro 5 technical portal documenting 10,000-word production postmortems on network tunneling, Traefik routing, and AI Agent orchestration.
Enterprise AI Support & OCR Verification ↗
Production support engine at Joywood integrating OpenAI API, OCR receipt verification, and n8n workflows to cut manual ticket handling.
SifuMail: Managed Enterprise Email Infra ↗
Dedicated business email hosting and multi-cloud server infrastructure engineered for Malaysian SMEs with strict deliverability & security.
Smart Contracts & Autonomous Dev Tooling ↗
Open-source Spring Boot microservices, Foundry/Solidity (ERC-20/721) contracts, and deterministic MCP Agent automation pipelines.
Two things you can check before you email me.
Both are free and ask for nothing. They report what they can actually see — and where they cannot see, they say so instead of guessing.
10+ Years Commercial Delivery
Hands-on engineering across enterprise backends, cloud-native DevOps, distributed logistics, and production AI pipelines.
Full-Stack Software Engineer
Joywood- Architected and operated a 3-host self-managed Docker platform (Synology DSM, Unraid, Ubuntu 24.04 VPS) running 162 containers across 78+ Compose stacks at >99% uptime with Traefik, Prometheus/Grafana, authentik SSO, and automated restic backups.
- Automated ops pipelines and accelerated full-stack delivery in Python, orchestrating Agentic Coding workflows (Antigravity, Codex) and autonomous runtimes (Hermes Agent, MCP) with strict CI/CD and regression test gates.
- Engineered AI-enabled customer support tooling integrating the OpenAI API and automated OCR receipt verification, significantly cutting manual ticket handling.
- Developed core backend services and internal operational portals in Java Spring Boot and PHP CodeIgniter supporting billing, logistics, and customer workflows.
- Delivered 30+ production web applications and business systems for SME, NGO, and e-commerce clients across the full software lifecycle.
Founder & Principal Full-Stack Engineer
Hoelee Enterprise (SifuMail)- Founded an independent software engineering and managed infrastructure practice delivering bespoke web systems and enterprise email hosting (SifuMail) to Malaysian SMEs.
- Built full-stack business applications using Java Spring Boot, PHP CodeIgniter, and Node.js with responsive JavaScript frontends.
- Administered multi-cloud production environments across AWS EC2, Vultr, and Linux/Windows server clusters with strict security and deliverability standards.
Project Manager / Software Engineer
Edufly- Led engineering and payment gateway integration for a multi-tier affiliate and social e-commerce platform, coordinating external vendors while owning core internal architecture.
- Engineered Java Spring automation tooling for Shopee bulk product listing, sourcing synchronization, and order workflow automation.
- Built omnichannel chatbot integrations and automated marketing pipelines across Telegram, WhatsApp, Facebook Messenger, and Web.
Software Engineer
Superceed- Developed enterprise Java Spring Boot web systems and native Android applications powering customer service and food-delivery logistics.
- Engineered a real-time GPS delivery-tracking and dispatch visibility platform, alongside a Google Maps franchise territory management system that automated order assignment.
- Implemented an early-generation AI customer service chatbot using IBM Watson Assistant, integrating Speech-to-Text (STT) and facial recognition APIs.
Bachelor of Information Systems (Hons) Information Systems Engineering
Universiti Tunku Abdul Rahman (UTAR)Architecture & Tooling
Production-hardened toolchain spanning distributed backends, self-managed SRE infrastructure, and AI workflow orchestration.
Backend & Systems Architecture
- Java (Spring Boot, Spring Data JPA, Hibernate)
- PHP (CodeIgniter, Custom Architecture)
- Node.js & Python
- RESTful APIs, Webhooks & Event-Driven Workflows
- PostgreSQL, MySQL Master/Replica Replication, Redis, Elasticsearch
Self-Hosted DevOps & Infrastructure
- Multi-Host Docker & Docker Compose (162 Containers / 78+ Stacks)
- Traefik Reverse Proxy, Nginx & Automated ACME SSL/TLS
- Prometheus, Grafana & cAdvisor Observability
- authentik SSO (OIDC/OAuth2) & Cloudflare DNS/Tunnels
- CI/CD Pipelines (Self-Hosted Gitea Actions & GitHub Actions)
- Linux (Ubuntu/Debian), Synology DSM, Unraid, AWS EC2 & restic Backups
AI Agents & Workflow Automation
- Agentic coding in production: Google Antigravity, OpenAI Codex, Claude Code, OpenCode
- Hermes Agent (Nous Research): 11 cron loops in production, 8 of them deterministic scripts with no model
- Model Context Protocol (MCP) tool integration, OpenAI API, OmniRoute gateway & local LLMs
- Verification gates for AI-written code — 518k lines committed in 30 days, 235k kept in production
- OCR Document & Receipt Verification Pipelines
- Speech-to-Text (STT), Text-to-Speech (TTS) & Media Processing
- n8n Self-Hosted Workflow Orchestration
- Omnichannel Bot APIs (Telegram, WhatsApp, Messenger)
Frontend, Web3 & Engineering Practices
- TypeScript, JavaScript (ES6+), Astro 5 & Tailwind CSS
- Solidity (ERC-20, ERC-721, Upgradeable Contracts), Foundry & Hardhat
- OpenZeppelin, Chainlink Oracles & Ethers.js
- Root-Cause Debugging, Automated Integration Probes & Technical Writing