Distributed Systems & Event Streams
Designing event-driven backends, command-query responsibility segregation (CQRS), outbox patterns, and idempotent event consumers.
I am a senior backend engineer based in Milan, designing distributed event-driven systems that stay resilient as traffic, concurrency, and complexity grow.

Engineering case studies, high-throughput backend services, IaC definitions, and technical writing.
Specialized domains in distributed transaction processing, resiliency engineering, and production governance.
Designing event-driven backends, command-query responsibility segregation (CQRS), outbox patterns, and idempotent event consumers.
Building fault-tolerant architectures with rate limiting, circuit breakers, zero-downtime migrations, and horizontal partitioning.
Declarative infrastructure as code, multi-tenant edge gateways, mTLS zero-trust communication, and end-to-end distributed tracing.
Establishing continuous delivery governance, automated release pipelines, operational SLAs, and low-latency financial transaction guarantees.
How I design fault-tolerant backend services for zero data loss, idempotency, and high-throughput execution.
mTLS termination, OAuth2/OIDC token verification, WAF rate-limiting, and schema validation at the edge.
Decoupled domain boundaries, command-query segregation, idempotency caches, and ACID local transactions.
Asynchronous event streaming via Debezium CDC, Saga orchestration, and OpenTelemetry distributed tracing.
graph TD
subgraph Edge ["1. Edge & Security Gateways"]
Clients["Mobile & Web Clients"] -->|HTTPS / mTLS| Gateway["AWS API Gateway / WAF"]
Gateway -->|OAuth2 / JWT| Auth["Cognito / OAuth2 Service"]
end
subgraph Core ["2. Distributed Microservices Core"]
Gateway -->|REST / gRPC| OrderSvc["Subscription & Billing Engine"]
Gateway -->|REST / gRPC| LoyaltySvc["Loyalty Engine"]
OrderSvc -->|Idempotency Key| IdemCheck{"Idempotency Cache"}
IdemCheck -->|Cache Miss| Outbox["Transactional Outbox (DB)"]
end
subgraph EventStream ["3. Asynchronous Event Pipeline"]
Outbox -->|Debezium / CDC| Kafka["Apache Kafka Event Bus"]
Kafka -->|Loyalty Events| LoyaltySvc
Kafka -->|Audit Logs| Analytics["Elasticsearch / OpenSearch"]
end
subgraph Storage ["4. Persistence & Observability"]
OrderSvc -->|ACID Transactions| Postgres[("PostgreSQL Cluster")]
LoyaltySvc -->|Key-Value Ops| DynamoDB[("DynamoDB / Cache")]
Analytics -->|OpenTelemetry| Grafana["Grafana / Datadog Tracing"]
end8+ years of engineering leadership across high-stakes environments — from fintech & digital trust platforms to enterprise monolith modernization.
Architecting high-throughput subscription lifecycle and payment loyalty engines with zero data divergence.
Rapid user growth on recurring payment flows led to potential concurrency bottlenecks and state divergence risk across merchant loyalty services.
Re-architect subscription lifecycle handling and loyalty points calculations into a fault-tolerant, idempotent system capable of sustained peak transaction volumes.
Implemented CQRS patterns, transactional outbox messaging via Kafka, and strict idempotency key enforcement across distributed payment boundaries.
Achieved 99.99% operational availability, zero double-charging anomalies, and reduced P99 subscription checkout latency by 40%.
Engineered mission-critical cryptographic timestamping (RFC 3161) and CRL validation pipelines.
Legacy timestamp verification engines experienced performance degradation under spike loads, risking strict EU eIDAS compliance SLAs.
Modernize the cryptographic pipeline, eliminate database contention, and execute seamless runtime infrastructure migrations.
Debuilt monolithic bottlenecks into async event streams, introduced zero-downtime database sharding, and optimized cryptographic signing threads.
Reduced P99 signature verification latency by 65% while handling over 10 Million daily cryptographic operations with 100% audit compliance.
Designed multi-tenant edge authentication and Backend-for-Frontend (BFF) gateways for hybrid logistics platforms.
Enterprise logistics clients required custom deployment models across on-premise and cloud infrastructure with strict tenant isolation.
Deliver a unified microservices BFF architecture supporting multi-tenant OAuth2/OIDC token exchange and edge security.
Designed a modular monolith architecture with isolated domain boundaries, mTLS edge termination, and automated infrastructure as code.
Reduced new enterprise tenant onboarding time from weeks to hours and eliminated cross-tenant deployment friction.
Led backend modernization for tier-1 enterprise platforms (SIAE, TIM, Intesa Sanpaolo, Fastweb).
Legacy core monoliths at high-volume telecom and banking clients caused release delays and high operational downtime risks.
Decompose monolithic services into resilient microservices while maintaining uninterrupted 24/7 SLA obligations.
Applied Strangler-Fig migration patterns, integrated central distributed tracing (OpenTelemetry), and standardized CI/CD deployment automation.
Accelerated release deployment velocity from monthly cycles to daily releases and reduced critical production incident rollback rates to zero.
Engineering matters most to me when it combines sound architectural judgment, explicit trade-off decisions, and production accountability after release.
Clear service boundaries, explicit data contracts, and transparent trade-offs move engineering teams faster than complex abstractions.
Delivery is complete when observability, idempotent retries, safe deployments, and low incident MTTR are active in production.
Infrastructure as Code (IaC) and CI/CD pipelines remove operational toil while maintaining auditability and security compliance.
My daughter brings grounding, energy, and long-term purpose to every endeavour.
A lively household with two cats and a dog that keeps daily life active.
A long-term discipline centered on continuous refinement, focus, and patience under pressure.