Skip to content
View LucasGiffuni's full-sized avatar

Highlights

  • Pro

Block or report LucasGiffuni

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
LucasGiffuni/README.md

Lucas Giffuni

Senior Backend Engineer → Software Architect · Montevideo, Uruguay 🇺🇾

LinkedIn Credly Focus


I build and design backend systems that have to survive real production load. For the last five years I've been working on core banking at IBM Uruguay — a Java/Spring Boot microservice platform on OpenShift that talks to a COBOL/z-OS mainframe over JMS, serving one of the largest home banking systems in the region.

Lately my work has shifted from writing services to deciding how systems fit together: integration patterns, platform design, observability, and lately how to put LLMs into enterprise workflows without turning them into a science project.

What I'm doing right now

  • 🏦 Backend & integration design for Santander Home Banking (Java · Spring Boot · OpenShift · JMS · mainframe)
  • 🤖 Building a production RAG platform at IBM's AI Innovation Group — Milvus, LangGraph, Granite on watsonx, hybrid BM25 + dense retrieval with RRF and cross-encoder reranking
  • 🧭 Working toward TOGAF, on top of IBM's Architectural Thinking certification
  • 🛡️ Contributing WAF plugins to the OWASP Core Rule Set (n8n protection + file upload detection)
  • 🎓 Finishing my Ingeniería en Informática thesis at UCU — defense December 2026

Tech I work with

Languages Java TypeScript Python SQL
Backend Spring Boot NestJS Node.js FastAPI
Platform OpenShift Kubernetes Podman Ansible Linux
Data PostgreSQL Oracle Milvus Redis MinIO
AI watsonx LangGraph Celery
Frontend Next.js React Angular Tailwind
Ops & Security OpenTelemetry Keycloak ModSecurity Elastic

Selected work

Enterprise RAG Platform — Retrieval system for internal documentation. 7-stage ingestion pipeline, hybrid retrieval (BM25 + dense + RRF) with cross-encoder reranking, Milvus as vector store, LangGraph for orchestration, Celery for async workloads. Currently migrating embedding and reranking off self-hosted GPUs to managed inference.

ToolDashboard — Internal developer portal that replaced per-tool logins with a single SSO entry point. Next.js 14 + Keycloak OIDC, OpenResty reverse proxy, YAML-driven tool catalog, deployed on OpenShift Virtualization with Podman + Quadlet and Ansible.

OWASP CRS Plugins — Two WAF plugins for the Core Rule Set: n8n workflow protection and file upload threat detection. Registry IDs 9,529,000–9,530,999.

FAU Personnel Management System — Thesis project: NestJS + Angular + PostgreSQL + MinIO, built for the Uruguayan Air Force.

Most of my day-to-day work lives behind IBM's firewall, so this profile shows a fraction of it. Happy to walk through architecture and trade-offs in a conversation.

Certifications

IBM Architectural Thinking · IBM Generative & Agentic AI Expert · Datadog SRE · DevSecOps · AWS AI FastTrack 2026


GitHub stats

📫 giffunilucas@ on LinkedIn — open to conversations about backend architecture, platform engineering and applied AI.

Pinned Loading

  1. Home-Deck-Backend Home-Deck-Backend Public

    Java 1

  2. Home-Deck-Frontend Home-Deck-Frontend Public

    JavaScript 1

  3. HRRN-Scheduler HRRN-Scheduler Public

    Java

  4. ProbabilidadesPoker ProbabilidadesPoker Public

    Java