{
  "$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json",
  "basics": {
    "name": "Arda Karaduman",
    "label": "AI Platform & Backend Systems Architect",
    "email": "akaraduman@gmail.com",
    "url": "https://arda.tr",
    "summary": "I build backend and platform systems where production software, cloud infrastructure, and AI agents meet. Most recently I lead Veltra's AI platform — a standards-compliant OAuth 2.1 authorization server and Model Context Protocol services that expose a live travel-activity catalog to assistants like Claude and ChatGPT.\n\nBefore that, Go/Ruby/Python systems across logistics, fintech, medical IT, and games — shipped and operated in Tokyo since 2004. I work as a bridge between overseas and Japan teams, in English and Japanese.",
    "location": {
      "city": "Chofu",
      "region": "Tokyo"
    },
    "profiles": [
      {
        "network": "LinkedIn",
        "username": "ardakaraduman",
        "url": "https://www.linkedin.com/in/ardakaraduman/"
      },
      {
        "network": "GitHub",
        "username": "c0ze",
        "url": "https://github.com/c0ze"
      }
    ]
  },
  "work": [
    {
      "name": "Veltra (Tokyo, Remote)",
      "position": "Systems Architect",
      "startDate": "2024",
      "highlights": [
        "Principal author of Veltra's MCP + OAuth 2.1 platform, exposing the travel-activity catalog to AI assistants (Claude MCP Apps and ChatGPT Apps) and giving staff internal AI tooling.",
        "Built a standards-compliant OAuth 2.1 / OIDC authorization server in Python/FastAPI — PKCE, RS256 JWKS, refresh-token rotation, PAR / revocation / introspection, dynamic client registration, Google Workspace SSO and RBAC — on a clean, hexagonal architecture.",
        "Built a stateless 'activity search' MCP server dual-compatible with Claude and OpenAI app hosts — approved by Anthropic and now publicly listed in the Claude connector directory — plus internal Google Analytics and AWS read-only MCP tools.",
        "Migrated image delivery from a paid CDN to a self-developed solution on AWS CloudFront.",
        "General application and infrastructure architecture and planning across Python, Go and Node services, deployed on AWS ECS with Terraform and GitHub Actions CI/CD.",
        "Acted as bridge engineer between the overseas and Japan teams, and led MCP integration of legacy systems."
      ]
    },
    {
      "name": "Gaussy (Tokyo, Remote)",
      "position": "Senior Developer",
      "startDate": "2020",
      "endDate": "2023",
      "highlights": [
        "Senior backend engineer and a top-3 author on the Go (Echo / GORM) API of WareX, a production logistics 'warehouse-exchange' SaaS (the company incorporated as Gaussy in 2022).",
        "Owned the warehouse (geo + license-filtered search), contract, workspace, document and price-specification resource verticals end-to-end — data models, REST resources and migrations.",
        "Built role-based access-control middleware and server-side mass-assignment guards, with systematic request validation and parameterized queries.",
        "Owned a large share of the integration-test suite, including the shared test harness the rest of the team's API tests run on.",
        "Database migration and seeding (goose) and Bugsnag error reporting; third-party integrations including Hubspot and Mailgun.",
        "Deployed on Google Kubernetes Engine via CircleCI with SOPS-managed secrets; some frontend work on the Vue/Nuxt admin and customer portals."
      ]
    },
    {
      "name": "Robotfund (Tokyo, Hybrid)",
      "position": "Senior Developer",
      "startDate": "2018",
      "endDate": "2020",
      "highlights": [
        "Lead author of a multi-tenant Rails 5 JSON:API + React platform delivering fund and bond analytics (net-asset-value graphs, factor analysis) to users as LINE Flex Messages and generated charts.",
        "Implemented LINE webhook HMAC signature verification, strong-parameter authorization across all controllers, and bcrypt-secured authentication.",
        "Built a solo Go service fronting a pool of text-to-speech servers — race-free by design (channel-owned state), with PCM-to-MP3 transcoding, content-digest caching and per-host load distribution, validated with `go test -race` in CI.",
        "Built a Go AWS Lambda ingesting daily Reuters DataScope Select market data into an idempotent DynamoDB/S3 state machine, and extracted an MIT-licensed Reuters DSS Go client library.",
        "Mature CI/CD: CircleCI build-and-deploy with Docker images pushed to AWS ECR and tag-gated releases."
      ]
    },
    {
      "name": "Allm Inc (Tokyo, Onsite)",
      "position": "Senior Development Engineer",
      "startDate": "2014",
      "endDate": "2018",
      "highlights": [
        "Sole author of an end-to-end Go daemon for in-store edge devices (amd64 and ARM) — staff counting via BLE beacons, repeat-customer counting via WiFi sniffing, and face recognition — with a web configuration UI.",
        "Built its full over-the-air update pipeline: cross-compiled amd64/armhf, built signed Debian packages, pulled build secrets from HashiCorp Vault, GPG-signed releases, and published to an S3 apt repository with testing/release channels.",
        "Lead author of a FAST-ED stroke/cardiac triage API for hospitals (Ruby/Grape + GraphQL + Pundit) with API versioning, HMAC request signing, and bcrypt auth with login lockout and rotating keys.",
        "Co-built the triage admin SPA (Vue 2 + Apollo) deployed to AWS S3/CloudFront, and contributed sensor-vendor drivers to a multi-tenant Go ingestion daemon.",
        "Extracted reusable Go libraries to my own namespace; CI/CD with GitLab CI and Docker."
      ]
    },
    {
      "name": "Aiming Inc (Tokyo, Onsite, Contract)",
      "position": "Developer",
      "startDate": "2014",
      "endDate": "2014",
      "highlights": [
        "Backend engineer on the live Ruby/Padrino backend of 'Griffon', a published mobile MMORPG (Japan + Korea/Naver) in a ~60-engineer codebase.",
        "Independently owned the achievements, friendship, reward-distribution and guild-battle matchmaking systems end-to-end — data model, typed-RPC service, master-data importer, migrations and tests.",
        "Designed database-level idempotency via unique indexes and wrapped multi-step in-game economy mutations in transactions.",
        "Built a structurally mass-assignment-free typed-RPC API with server-side authorization, validated by branch-complete RSpec suites.",
        "Worked in an Agile environment with tight deadlines on a game with thousands of daily active users."
      ]
    },
    {
      "name": "Kii Inc (Tokyo, Onsite)",
      "position": "Dev Ops",
      "startDate": "2012",
      "endDate": "2014",
      "highlights": [
        "Co-led (primary author) a Ruby usage-metering and billing batch for a mobile Backend-as-a-Service platform — aggregated per-app API/storage/analytics usage from a 3scale API gateway, computed plan overages, and reported billable usage to Zuora with idempotent create-or-update reconciliation.",
        "Tested with RSpec, Minitest and serverspec; packaged as an Omnibus/RPM cron job.",
        "Built and operated the Varnish + 3scale API-gateway metering layer and the Puppet modules (VCL/Puppet) that deployed the billing and gateway stack.",
        "Payment integration via Zuora and PayPal; usage tracking and logging with 3scale, Varnish and fluentd.",
        "Developer-portal development (Ruby on Rails, Backbone.js) and Cloud Code maintenance (Node.js); wrote the team's first Go code (an early Kii Go SDK).",
        "Various automation: reports and AWS resource tuning in Ruby/Bash with Puppet."
      ]
    },
    {
      "name": "Mobilous Inc (Tokyo, Onsite)",
      "position": "Dev Ops",
      "startDate": "2011",
      "endDate": "2012",
      "highlights": [
        "Sole build-and-release / cloud-infrastructure engineer for AppExe, a white-label no-code mobile-app builder that generated native iOS/Android apps.",
        "Built the on-demand native build service that turned no-code app definitions into signed native APKs (Ruby/Sinatra, with a Python predecessor).",
        "Authored full server-stack provisioning with Puppet + Vagrant (dual VirtualBox/AWS): GlassFish, PostgreSQL, MongoDB, log shipping and firewall, plus the Android/iOS build, release and backup scripts.",
        "Built a per-customer AWS account/instance activation control plane and a versioned S3 release-delivery tool.",
        "Automated AWS account signup end-to-end with a Selenium-driven pipeline, and ran the team's git server.",
        "Designed scalable EC2 infrastructure with monitoring and auto-scaling."
      ]
    },
    {
      "name": "Ryde Inc (Tokyo, Remote - Part Time)",
      "position": "Contract Developer",
      "startDate": "2021",
      "endDate": "2022",
      "highlights": [
        "Backend development for Ryde services (Mobile and Web) using Ruby on Rails and GraphQL.",
        "Some frontend development (Admin site, Ruby on Rails, React)."
      ]
    },
    {
      "name": "Iron.io (US, Remote - Part Time)",
      "position": "Contract Developer",
      "startDate": "2017",
      "endDate": "2019",
      "highlights": [
        "Part-time open-source contributor to IronFunctions, an early Docker-based serverless (FaaS) platform (later the Fn Project).",
        "Contributed to and helped maintain the IronFunctions web UI (Express + Vue) as a top-3 author — added JWT authentication and the CI/CD Docker release pipeline.",
        "Contributed features and fixes to the Go FaaS engine, including a payload-as-stdin runner and a dependency-management migration.",
        "Wrote example serverless functions in Go, Node and Ruby to dogfood the platform."
      ]
    }
  ],
  "education": [
    {
      "institution": "Keio University",
      "url": "https://github.com/c0ze/masters-thesis",
      "studyType": "Master of Science",
      "startDate": "2006",
      "endDate": "2011"
    },
    {
      "institution": "Istanbul Bilgi University",
      "url": "https://github.com/c0ze/dissertation-thesis",
      "studyType": "Bachelor of Science",
      "startDate": "2000",
      "endDate": "2004"
    }
  ],
  "skills": [
    {
      "name": "Proficient in Go, Ruby, and Python. Comfortable picking up new languages quickly."
    },
    {
      "name": "AI/LLM integration — working with the Anthropic and Gemini APIs, Model Context Protocol (MCP) tooling, and TTS engines (Edge TTS, Coqui)."
    },
    {
      "name": "Security-aware platform work: OAuth 2.1 / OIDC (PKCE, JWKS, refresh-token rotation, PAR, dynamic client registration), SSO, and RBAC."
    },
    {
      "name": "Extensive experience with AWS & GCP. Hands on with EC2, S3, DynamoDB, SES, IAM, Route53, Cloud Run, Firebase."
    },
    {
      "name": "Backend development with Node.js/Express and Go/Echo. Experience designing RESTful and GraphQL APIs for web and mobile."
    },
    {
      "name": "Docker containerization and CI/CD. Early adopter of continuous integration and deployment practices."
    },
    {
      "name": "Frontend development with React, Vue, and Astro. Tailwind CSS across all projects."
    },
    {
      "name": "Browser automation and web scraping with Playwright and go-rod."
    },
    {
      "name": "Arch Linux (CachyOS) & Emacs user. Very comfortable in unix environments and shell scripting."
    },
    {
      "name": "Experience with TDD, BDD, Agile and GitHub driven development."
    },
    {
      "name": "AI-accelerated development with strong regression discipline — using LLMs to ship quickly while preserving tests, reviewability, and production safety."
    }
  ],
  "languages": [
    {
      "language": "Turkish",
      "fluency": "Native"
    },
    {
      "language": "English",
      "fluency": "Near Native"
    },
    {
      "language": "Japanese",
      "fluency": "Business"
    }
  ],
  "projects": [
    {
      "name": "MCP + OAuth 2.1 AI Platform",
      "description": "Lead author of Veltra's platform exposing the travel-activity catalog to AI assistants — a standards-compliant OAuth 2.1 authorization server (Clean Architecture) plus MCP servers dual-compatible with Claude and ChatGPT apps; the activity-search connector is now live in Anthropic's public Claude connector directory.",
      "keywords": [
        "Python",
        "FastAPI",
        "OAuth 2.1 / OIDC",
        "Model Context Protocol",
        "MongoDB",
        "Redis",
        "Terraform",
        "AWS ECS"
      ]
    },
    {
      "name": "WareX — Logistics SaaS API",
      "description": "Senior backend engineer and top-3 author on the Go API of WareX, a production logistics 'warehouse-exchange' SaaS at Gaussy — owned the warehouse, contract, workspace, document and pricing verticals plus the team's integration-test harness.",
      "keywords": [
        "Go",
        "Echo",
        "GORM",
        "MySQL",
        "JWT/RBAC",
        "Minio/S3",
        "GKE",
        "CircleCI"
      ]
    },
    {
      "name": "golem — LINE-bot Fund Analytics",
      "description": "Lead author of a multi-tenant Rails 5 + React platform that delivers fund and bond analytics (net-asset-value graphs, factor analysis) to users as LINE Flex Messages and generated charts, with HMAC webhook verification, at Robotfund.",
      "keywords": [
        "Ruby on Rails 5",
        "React",
        "JSON:API",
        "LINE Messaging API",
        "gnuplot"
      ]
    },
    {
      "name": "bumblebee — Race-free TTS Caching Service",
      "description": "Solo Go service fronting a pool of text-to-speech servers — race-free by design (channel-owned state), with PCM-to-MP3 transcoding, content-digest caching and per-host load distribution, verified with `go test -race`, at Robotfund.",
      "keywords": [
        "Go",
        "CSP concurrency",
        "LAME (PCM→MP3)",
        "Docker",
        "AWS"
      ]
    },
    {
      "name": "Reuters Market-Data Pipeline",
      "description": "Solo Go AWS Lambda that ingests daily Reuters DataScope Select market data into an idempotent DynamoDB/S3 state machine, built on an extracted MIT-licensed Reuters DSS Go client library, at Robotfund.",
      "keywords": [
        "Go",
        "AWS Lambda",
        "DynamoDB",
        "S3",
        "Reuters DataScope Select"
      ],
      "url": "https://github.com/c0ze/dss_reuters_go"
    },
    {
      "name": "FupIntuition — IoT/Edge People Analytics",
      "description": "Sole author of an end-to-end Go daemon for in-store edge devices — staff counting via BLE, repeat-customer counting via WiFi, and face recognition — with a web UI and a full signed over-the-air update pipeline, at Allm.",
      "keywords": [
        "Go (amd64 + ARM)",
        "BLE beacons",
        "WiFi sniffing",
        "HashiCorp Vault",
        "GPG-signed OTA",
        "S3 apt repo"
      ]
    },
    {
      "name": "FAST-ED Clinical Triage API",
      "description": "Lead author of a versioned stroke/cardiac triage API for hospitals (Grape + GraphQL + Pundit) with HMAC request signing and hardened authentication, plus its Vue 2 + Apollo admin SPA, at Allm.",
      "keywords": [
        "Ruby",
        "Grape",
        "GraphQL",
        "Pundit",
        "HMAC",
        "bcrypt"
      ]
    },
    {
      "name": "Griffon — Mobile MMORPG Backend",
      "description": "Backend engineer on the live Ruby/Padrino backend of the published mobile MMORPG 'Griffon' (幻塔戦記グリフォン, Japan + Korea) — independently owned the achievements, friendship, reward-distribution and guild-battle matchmaking systems with database-level idempotency, at Aiming.",
      "keywords": [
        "Ruby",
        "Padrino",
        "ActiveRecord",
        "MySQL",
        "Resque",
        "RSpec"
      ]
    },
    {
      "name": "IronFunctions — Open-source Serverless Platform",
      "description": "Open-source contributor to IronFunctions, an early Docker-based FaaS platform (later the Fn Project) — added JWT auth and the CI/CD release pipeline to its web UI and contributed engine features such as a payload-as-stdin runner, at iron.io.",
      "keywords": [
        "Go",
        "Docker",
        "Vue",
        "Express",
        "JWT",
        "CircleCI"
      ],
      "url": "https://github.com/iron-io/functions"
    },
    {
      "name": "This Résumé Site",
      "description": "A static, multilingual (EN/JA/TR) résumé site prerendered to HTML, generating language-specific PDF and DOCX résumés at build time from a single content source, deployed to GitHub Pages.",
      "keywords": [
        "ReScript",
        "React",
        "Vite",
        "Tailwind CSS",
        "PDFKit",
        "docx"
      ],
      "url": "https://github.com/c0ze/resume"
    }
  ]
}