← semir.mahovkicDownload PDF
Semir Mahovkic

Semir Mahovkic

Senior Software Engineer

Cloud Native Engineer · Platform Engineer

Profile

Building systems for more than 11 years, for fast-moving startups and large-scale enterprises — memory-efficient, low-latency (sub-millisecond) Go backends for Tradeview Markets, Kubernetes Operators for Cisco Secure Firewall Cloud Native, real-time data synchronization for Sportradar, Temporal-orchestrated order flows for Daki's grocery delivery platform, embedded .NET inside Agilent's laboratory instruments, self-service VM provisioning on VMware's VCF Automation.

Cloud-native production systems, owned end-to-end — code, build, deploy, monitor.

Technical skills

Languages & Core

Go (Gin), C# (.NET Core), TypeScript

Messaging, Transport & Orchestration

gRPC (Streams), Aeron, RabbitMQ, MQTT, Redis PubSub, AWS SQS/SNS, WebSockets, FIX Protocol, Temporal (Workflows)

Cloud Native, DevOps & Observability

Kubernetes (Operators, CRDs), Docker, Helm, ArgoCD (GitOps app-of-apps pattern), Prometheus, Grafana, OpenTelemetry Collector, Loki, Jaeger, Keycloak IAM

Databases & Caching

PostgreSQL, MySQL, Redis, MongoDB, Elasticsearch, SQLite, Cassandra, ClickHouse

Contact

Emailsmahovkic89@gmail.comLinkedInlinkedin.com/in/semir-mahovkic-a42ba7135GitHubgithub.com/semirm-devPortfoliosemirmahovkic.xyz

Work experience

Evoila

07/2024 –
Present

Broadcom Professional Services — Self-Service VM Provisioning on VCF Automation 9

RoleSenior Software Engineer — Cloud & Infrastructure AutomationTechnologiesTypeScript, VCF Automation 9, vRealize Orchestrator, NetBox IPAM

VMware's private-cloud automation platform — a self-service catalog where customers request and provision their own VMs.

Responsibilities

  • Implemented a self-service VM provisioning catalog item on VCF Automation 9 (previously Aria Automation) — a dynamic request form backed by 20+ Orchestrator actions, workflows, and configuration elements, driving Kubernetes-native VM deployment.
  • Automated IP address management against NetBox IPAM and vCenter — live IP availability, hostname generation with uniqueness validation, and event-driven IP registration after deployment (via VCF Automation subscriptions).
  • Improved shared, reusable TypeScript automation libraries and built a generic, strongly typed configuration layer on top of them.

MFC — MultiFeedCenter

RoleSenior Cloud Native Engineer — Platform EngineerTechnologies.NET, Kubernetes, Helm charts, ArgoCD, Sealed Secrets, Keycloak, GCP, RabbitMQ, MongoDB, MySQL, Postgres

Third-party data feeds ingested from many providers and reconciled into a single stream for downstream consumers.

Responsibilities

  • Migrated the .NET feed services from Windows Server services to cloud-native workloads — containerised with Docker, packaged as Helm charts and run under Kubernetes.
  • Designed GitOps CD pipelines via ArgoCD using the app-of-apps pattern to automate multi-service Kubernetes deployments.
  • Used Sealed Secrets to encrypt Kubernetes secrets so they can be safely versioned in Git.
  • Deployed and configured a complete Kubernetes observability stack (Grafana, Loki, Prometheus, Elasticsearch, OpenTelemetry Collector) for distributed tracing and monitoring.
  • Configured and integrated Keycloak IAM SSO across Grafana, ArgoCD, and backend services (.NET).

TVM — Tradeview Markets

RoleSenior Software EngineerTechnologiesGo, Aeron, Postgres, ClickHouse, FIX

Responsibilities

  • Developed a memory-efficient, low-latency, sub-millisecond online trading backend in Go with zero allocations in the hot paths.
  • Used a pre-allocated slot map and reusable buffers to avoid allocations on the order path.
  • Used sync.Pool for the buffers that encode inter-service messages.
  • Built the inter-service transport using the Aeron protocol.
  • Integrated multiple Liquidity Provider (LP) APIs for real-time automated order routing and execution.

Endava

11/2021 –
06/2024

Sportradar — AVLCR, Streaming and Channel Management

RoleSenior Software EngineerTechnologiesGo, gRPC, GraphQL, MySQL, Redis, Kubernetes, AWS

The rights and channel management platform behind Sportradar's streaming platform — which sports, tournaments and territories each betting operator is licensed to show.

Responsibilities

  • Built the Go jobs that synchronized matches, tournaments, categories and competitors from Sportradar's sports data service, consumed over gRPC streams and stored into the platform's own database.
  • Added a sync state service that records the last applied update per feed, so a job resumes where it stopped instead of re-reading the stream.
  • Exposed media assets through the GraphQL API as presigned S3 URLs.

Cisco — Cisco Secure Firewall Cloud Native

RoleSenior Software Engineer — Platform EngineerTechnologiesGo, Kubernetes, Helm charts, ArgoCD, AWS, gRPC, Postgres, Redis

SFCN — Cisco's firewall and VPN delivered as a Kubernetes service on AWS.

Responsibilities

  • Designed and developed the SFCN configuration Operator: from thousands of reusable VPN and firewall config fragments, users pick the ones they need and the Operator merges them into the single config file the VPN and firewall run on.
  • Designed an Operator that protects newly deployed services with AWS Shield, and led the engineering team to build it.
  • Packaged the services as Helm charts and designed GitOps CD pipelines via ArgoCD to automate SFCN's multi-service deployments.
  • Tightened access control in Kubernetes RBAC and AWS IAM.

Daki — Grocery Delivery Platform

RoleSenior Software EngineerTechnologiesGo, Temporal, GraphQL, MongoDB, GCP

Brazil's most popular grocery delivery app.

Responsibilities

  • Built the order flows in Go — create, cancel, fulfillment, payment — as Temporal workflows, so an order halfway through picking survives a restart instead of being dropped.
  • Added the compensation steps: an item that goes out of stock comes off the order or cancels it, and a payment that fails puts the reserved stock back.
  • Exposed the whole order cycle through the GraphQL API.

Agilent — Chromatography Data System

RoleSenior Software EngineerTechnologies.NET, TypeScript, Windows Embedded

Custom software for Agilent's laboratory instruments, used for chemical analysis — from fuel and oil quality testing to cancer research.

Responsibilities

  • Developed .NET microservices deployed on Windows Embedded hardware inside laboratory instruments.
  • Packaged software to be installed on the laboratory instruments using WiX Toolset.

Mistral

04/2019 –
10/2021

MTVO — Masters of Void Organization

RoleSoftware EngineerTechnologies.NET, TypeScript, AWS, WebSockets, Redis, MSSQL

A virtual goods trading platform built around spiritual sessions, with each session tracked as it runs.

Responsibilities

  • Developed real-time data synchronization backends using .NET, WebSockets, Redis, and AWS for virtual goods trading and session tracking.

MOP

04/2018 –
03/2019

NAGA — Crypto Exchange Platform

RoleSoftware EngineerTechnologiesGo, Kubernetes, RabbitMQ, WebSockets, AWS, Redis, Postgres, Cassandra, gRPC

Online crypto exchange platform.

Responsibilities

  • Built real-time Go microservices and Kubernetes infrastructure for a crypto exchange platform, using RabbitMQ, gRPC, and WebSockets.

Imel d.o.o.

05/2015 –
08/2017

Android + backend

RoleSoftware EngineerTechnologiesPHP, Laravel, Linux, WebSockets, Java, Android, MySQL, SQLite

Logistics tracking and dental monitoring platforms — the Android apps and the backends and mobile APIs behind them.

Responsibilities

  • Developed PHP/Laravel backends, mobile APIs, and Android applications for logistics and dental monitoring platforms.