# Bohdan Tsap — CV

Website: https://bohdantsap.com/ · PDF: https://bohdantsap.com/cv/Bohdan-Tsap-CV.pdf

**Platform Engineer · Senior Full-Stack Engineer**

Wrocław, Poland · open to remote roles worldwide · B2B

me@bohdantsap.com · [bohdantsap.com](https://bohdantsap.com/) · [linkedin.com/in/bohdaq](https://www.linkedin.com/in/bohdaq) · [github.com/bohdaq](https://github.com/bohdaq)

## Summary

Software engineer since 2012, working across the whole stack, from database and APIs to the UI. Five years at a startup, then two years on a Kubernetes-native cloud platform: controllers, multi-tenant services, CI/CD and the web console. Recent work in enterprise for banking and in large-scale recruitment systems. Author of Rust and TypeScript open source with over 100,000 crate downloads. Looking for Staff, Platform, Senior Full-Stack or Tech Lead roles.

## Skills

| Area | Tools |
| --- | --- |
| Languages | Java, TypeScript, JavaScript, Rust, Go, Kotlin, Python, SQL |
| Backend | Spring Boot, Hibernate/JPA, REST, GraphQL, Node.js, OAuth 2.0 / OIDC, SAML, microservices |
| Frontend | React, Redux, Angular, Lit / Web Components, Polymer |
| Platform | Kubernetes, Helm, KubeVirt, Ceph, Docker, Flux (GitOps), Terraform / Pulumi, GitHub Actions, AWS, GCP |
| Data | PostgreSQL, MySQL, Oracle, Cassandra |
| AI tooling | Claude Code, OpenAI Codex, GitHub Copilot, MCP servers, LLM integrations, agent workflows |
| Observability | Prometheus, Grafana, Loki, Mimir, alerting, on-call rotation, incident response and root-cause analysis |
| Security | OAuth 2.0 / OIDC, SAML, Keycloak, OpenBao (Vault), RBAC, TLS, vulnerability remediation |
| Testing | Playwright end-to-end, CI quality gates |

## Experience

**Software Engineer — UBS (via Wipro), UI Services · Aug 2025 – Aug 2026**

- Built the React Questionnaire / Loan Review Tool for BCCH, used by UBS analysts worldwide.
- Modernised General Ledger reporting with Spring Boot and Thymeleaf.
- Designed and implemented vesting functionality for AmpliFi.
- Extended the Java Access Rights Provisioning software (OAuth, SAML single sign-on) and led vulnerability remediation across the UI Services applications.
- React, TypeScript, Redux, Java, Spring Boot.

**Software Engineer — Indeed (via SoftServe) · 2025**

- Full-stack features for a large-scale recruitment platform: system design, estimation, backend services and frontend.
- Spring Boot, Kotlin, GraphQL, React, Kubernetes, Docker.

**Software Engineer — Kube-DC, Kubernetes cloud platform · 2024 – 2025**

- Built multi-tenant platform services for compute, networking, storage and VPCs on Kubernetes, running as a public PaaS and 4 on-premise installations.
- Owned feature architecture, backlog prioritisation, CI/CD and deployment scripts; built the web console and its Node.js backend with Keycloak OIDC login.
- Built the self-service developer platform: deploy from GitHub with automatic builds (Dockerfile or Railpack), a private registry per project, preview environments, managed databases and queues, and a hosted MCP endpoint that lets AI agents manage tenant projects, VMs and apps through LLM tool calls.
- Ran observability on Prometheus, Grafana, Loki and Mimir with synthetic query probes and alerting; took part in the on-call rotation and led root-cause analysis of production incidents (e.g. an OpenBao out-of-memory crash loop traced to leaked namespaces).
- Hardened the platform: fixed critical findings from a security review, narrowed RBAC, rolled out in-cluster TLS; Keycloak OIDC and OpenBao (Vault) for identity and secrets.
- Operated Ceph storage and KubeVirt virtual machines: live disk migrations, scheduled VM snapshot backups, recovery during node maintenance.
- Wrote Playwright end-to-end suites and CI quality gates; built MCP servers and used AI-assisted development day to day.
- Kubernetes, KubeVirt, Docker, Node.js, React, Go.

**Freelance, independent open source · 2022 – 2024**

- Wrote rws, a Rust web server; its crates passed 100,000 downloads. JetBrains Open Source Program member.

**Frontend Tech Lead — CorporateServices.com (US / Singapore) · 2016 – 2021**

- Led a frontend team of 3 engineers for five years at a small startup: architecture, coding standards, planning and estimation.
- Shipped a working SaaS from scratch.
- Mentored engineers and contributed to backend integration on GCP.
- Polymer, Angular, TypeScript, Spring, GCP.

**Software Engineer — ThinkTank (via Remit), collaboration / brainstorming product (US) · 2014 – 2016**

- Backend services, REST APIs and database integration. Java, Spring, PostgreSQL, GWT.

**Software Engineer — WDS (via GlobalLogic), mobile device provisioning (UK / Singapore) · 2012 – 2014**

- Backend for device lifecycle management over OMA-DM and OMA-CP. Java, Spring, Oracle, JavaScript.

## Open source

| Project | What it is | Stack |
| --- | --- | --- |
| [rws](https://rws8.tech) | Single-binary web server and reverse proxy: automatic HTTPS, HTTP/3, load balancing, Gateway API controller | Rust |
| [lit-material](https://lit.rws8.tech) | 64 Material Design 3 web components, one npm package each, SSR-ready | TypeScript, Lit |
| [HITOP](https://hitop.rws8.tech) | API client for terminal, CI and AI agents; collections as YAML in your repo | Rust |
| [Kube-DC](https://kube-dc.cloud/) | Kubernetes-native cloud: apps, VMs, data services, managed clusters | Go, Node.js, React |

## Education

Lviv Polytechnic National University — Bachelor's and Specialist degrees in Computer Science.

Languages: Ukrainian (native), English (C1).