Reliable, security-minded backends, from API design to deployment.
I'm a backend-focused full-stack developer from Banyumas, Central Java, Indonesia, with hands-on experience at four tech companies since 2022. I design APIs and databases, build the web apps on top of them, and deploy and run them myself on Linux, often with Docker or Proxmox. Security is part of how I build, not an afterthought.
- 🎓 Informatics (S1) at Telkom University Purwokerto, GPA 3.77 (2023 - present)
- 🏫 Software Engineering (RPL) graduate, SMK Telkom Purwokerto
- 💼 Industry experience, including internships, in backend, full-stack and DevOps roles, plus 2 years of Lua game development for a FiveM community
- 🔐 Security-minded: CSP, RBAC and Argon2id/JWT auth in my apps; CTF problem setter and cybersecurity seminar speaker
- 🧠 Currently deepening my skills in AI and machine learning
Tip
Open to job opportunities, freelance projects and collaborations. Reach me on Discord at benjamin4k or through the links above.
- 🎤 Speaker, AWS Cloud Club Indonesia (Dec 2024): Delivered a cybersecurity and ethical-hacking seminar with a live Proxmox lab (DDoS, SSH weaknesses, brute-forcing with Hydra, mitigation and professional ethics), and mentored competition teams as a group facilitator.
- 🚩 CTF Problem Setter, Cyronethic (Dec 2025): Designed web-vulnerability and reverse-engineering challenges for the Informatics student association's CTF, and stepped in as event commentator.
- 🧑🏫 Practicum Assistant, Telkom University Purwokerto (4 consecutive semesters): Redesigned lab modules to match industry practice and coached students through debugging, networking, databases and algorithms.
- 📝 Co-author and Editor, Linuxhackingid (2026): Contributed to 24 published articles with the threat-intelligence and GRC research teams, covering cybersecurity, AI governance and data-protection regulation (EU CRA, NIST AI RMF, ISO/IEC 42001, Indonesia's UU PDP and PP 33/2026).
| Role | Company | Period | Highlights |
|---|---|---|---|
| Backend Developer | PT Cazh Teknologi Inovasi | Jan 2026 - Feb 2026 | Built Laravel web applications, designed PostgreSQL/MySQL schemas, tested APIs with Postman, and documented projects and code |
| Backend & DevOps Engineer | PT Star Software Indonesia | Jul 2024 - Nov 2024 | Built modular Laravel APIs with Swagger docs for an AI classification product; deployed backend and AI services to DigitalOcean with Docker and GitLab |
| Backend Developer | PT Braincode Solution | Mar 2023 - Jun 2023 | Developed web apps with Rust and SolidJS on PostgreSQL; set up and deployed Linux servers |
| Full-Stack Developer | PT Puskomedia Indonesia Kreatif | Feb 2022 - Sep 2022 | Built Laravel apps, designed and optimized databases, configured firewalls and deployed servers; opened 50+ sprint PRs to the team's eternak and dadidu-etiket-wisata repos |
| Game Developer | Central Indonesia FiveM (GTA V roleplay) | Apr 2020 - Mar 2022 | Wrote and optimized Lua gameplay scripts and designed game systems for a roleplay community |
Core
Also
Expertise breakdown
| Domain | What I work with |
|---|---|
| Backend | Laravel (9 to 13), PHP 8.x, Fastify, Express, Elysia, Actix-web (Rust), Flask, REST APIs, Swagger/OpenAPI, RBAC (Spatie), Argon2id/JWT auth |
| Frontend | SolidJS / SolidStart, React, Vue 3 + Inertia, Tailwind CSS, HTMX, Blade, GSAP |
| Mobile | React Native (Expo + Firebase) |
| Data | MySQL, MariaDB, PostgreSQL, Redis, SQLite, Prisma, Drizzle, sqlx |
| Infra / DevOps | Linux (Ubuntu), Docker, Nginx, Gunicorn + systemd, PM2, Proxmox VE / LXC, DigitalOcean, GitLab, CSP and secure headers |
| Systems | Go (DNS-over-HTTPS, TUI), C++ raw-socket HTTP server, Rust HOTP/TOTP library |
| Data / ML | Random Forest, ANN, SVD/KNN recommenders, TF-IDF, Linear Programming, Streamlit, Folium |
| Game Dev | Lua scripting for FiveM (GTA V roleplay) servers |
🛍️ TelyuBizA campus marketplace where Telkom University Purwokerto students buy and sell goods, with an events feature that connects organizers with student businesses to fill tenant slots. Team project under the telyubiz org; source is private.
|
The complete web ecosystem for PT Linuxhackingid Cyber Security, built end to end: a bilingual (ID/EN) landing site for services, training and the Synapse CTEM product, plus a CMS for the insights blog, an LMS for self-paced courses, billing and checkout, and a free security tools platform with offensive and defensive tools.
|
|
An IoT smart-irrigation dashboard for monitoring soil moisture, controlling sprayers and reviewing irrigation history across regions and blocks. Live sensor updates stream through Firebase Realtime Database, on a BCNF-normalized MariaDB schema with Argon2id auth, CSRF protection and Firebase App Check.
|
🛡️ netsieveA privacy-first, cross-platform DNS proxy with a terminal UI. Blocks ads and trackers using hosts and Adblock lists, caches responses with TTL awareness, and resolves through pinned DNS-over-HTTPS. Switches system DNS safely with a crash-recovery journal and never writes query logs to disk.
|
More projects worth a look
| Project | Description | Stack |
|---|---|---|
| laravel-juwalin | Juwalin hosting rental: pay via QRIS or bank virtual account, and LXC containers are provisioned automatically through the Proxmox VE API | Laravel 12, Proxmox VE |
| fastify-short-url | URL shortener engineered for a 128 MB LXC container: Redis-first redirects, async click logging, QR codes, analytics, RBAC and audit log | Bun, Fastify, Drizzle, Redis |
| solid-simako | SimaKos boarding-house platform with a weighted recommendation engine; related to the SIMAKO community-service project (featured by Telkom University) | SolidStart, MariaDB |
| laravel-invfest-registration | Registration platform for InvFest x ISF 9.0, a national IT competition: team dashboards, submissions, payment verification, RBAC admin | Laravel 11, MySQL |
| flask-prisma-guard | Prisma Guard: early mental-health screening for students using SRQ-29 and an ANN, deployed behind Gunicorn, systemd and Nginx | Python, Flask, ANN |
| solid-personal-web | Personal portfolio with a custom admin CMS: Zod-validated server actions, JWT + argon2, security headers | SolidStart, Prisma 7, MariaDB |
| laravel-simako | Laravel edition of SIMAKO | Laravel 13, Inertia, Vue 3, TS |
| laravel-warga-plus | Citizen complaint platform with RBAC, HSTS/CSP and image compression | Laravel 12 |
| laravel-pemira-hmsi | Student election (PEMIRA) site for the Information Systems program | Laravel 12 |
| discordjs-nakaaa-ts | Discord bot with music, mini-games, polls and crash reporting | discord.js v14, TS |
| php-sea-snake-fw | A PHP 8.2 MVC framework built from scratch, with its own snake CLI |
PHP |
| rust-scholarmate-api | Scholarship-registration API with migrations and unit tests | Rust, Actix, PostgreSQL |
| rust-otp-code | HOTP/TOTP library with cargo tests | Rust |
| ml-parking-tarif-progressive | Parking-tariff classifier dashboard with interactive maps | Random Forest, Streamlit |
| recommendation-products | Amazon Health & Care product recommender | SVD + KNN |
| cpp-http-service | HTTP server built on raw sockets (Winsock/POSIX) | C++ |
| express-scalable-api | Dockerized REST API that scales horizontally | Express, Docker |
- 🔧 elipZis/laravel-cacheable-model: contributed a configurable log-channel option, with sensible defaults and null handling, to a Laravel package with 150+ stars (PR #37, merged)
- 🤝 62 pull requests (30 merged) to repositories I don't own, mostly team sprint work at PT Puskomedia (
eternak,dadidu-etiket-wisata), plus collaborations onlibrary-laravelanddncc-ternaqu-api
building: Self-hosted platforms on Proxmox VE / LXC (Juwalin, short links, DNS tooling)
exploring: SolidStart SSR, Go systems tooling, Bun-native backends
writing: Cybersecurity and AI-governance articles at Linuxhackingid