available for projects

Marcos Santana

Cybersecurity Engineer | Fullstack Developer | DevOps & SecOps | Tech Lead

Cybersecurity Engineer with a Fullstack focus and technical leadership skills. Specialist in designing secure architectures, migrating critical systems and automating infrastructure (DevOps). I build modern software with a diverse stack ranging from scalable microservices to high-performance interfaces, always with a security-by-design mindset.

$ man terminal — Available commands Click a command or type it yourself
visitor@corxo91: ~

[ scroll for more ]

$ git log --career

# experience

  1. El Patio de mi Casa (Startup)

    Sep 2025 — Present

    Owner Team — Tech Lead & DevOps

    • ▸ Led the technology department of a marketplace startup.
    • ▸ Designed and deployed a microservices architecture secured with Traefik and Vault Secret Manager.
    • ▸ Mitigated security breaches and hardened VPS infrastructure.
    • ▸ Advanced monitoring with Prometheus and Grafana to ensure availability.

  2. Dirección Provincial de la Vivienda

    Jan 2026 — Present

    Infrastructure Consultant (Contract)

    • ▸ Optimization and preventive maintenance of the corporate network and internal services.

  3. Banco Popular de Ahorro (BPA)

    Aug 2025 — Present

    IT Security Advisor

    • ▸ Incident response management; successful containment of a malware outbreak in the provincial network.
    • ▸ Strategic consulting to strengthen security policies and banking network defense.

  4. Empresa de Tecnologías para la Defensa (XETID)

    Aug 2024 — Present

    Advanced Developer

    • ▸ Architect of the communication network for Cuba's Digital Signature Service (degree thesis).
    • ▸ Led the migration of critical infrastructure from Node.js 14 to current stable versions.
    • ▸ Optimized client-server communication for high-security and digital signature systems.

  5. Havana's 21

    Aug 2024 — Jan 2025

    Fullstack Developer & DevOps

    • ▸ Full development of an internal management platform (inventory, payroll and operations).
    • ▸ Dockerized deployment on Linux environments focused on integrity and protection of sensitive data.

  6. Joven Club de Computación

    Jan 2022 — Dec 2023

    Network Administrator

    • ▸ Network services management, Windows/Linux server administration and infrastructure tech support.

$ ls -la ~/projects

# projects

-rw-r--r-- ★ featured 2025

El Patio de Mi Casa

Amazon/Shein-style marketplace for Cuba

Full development, deployment and monitoring of a marketplace with shops, products and services.

  • ▸ Microservices behind Traefik with Vault-managed secrets
  • ▸ AES cryptography and VPS hardening
  • ▸ Observability with Prometheus + Grafana and Suricata IDS
NestJS Next.js PostgreSQL Redis Docker Swarm Traefik +4
↗ demo
-rw-r--r-- ★ featured 2024

CERTUS

Digital signature and e-invoicing platform

Electronic invoicing and file management for companies, integrated with the digital signature ecosystem.

  • ▸ Integration with WSO2 IS & API Manager (OAuth2)
  • ▸ Document management with strict validation (Zod + TypeORM)
NestJS PostgreSQL Redis WSO2 Identity Server WSO2 API Manager TypeORM +1
-rw-r--r-- 2024

PDF Signer Server

Cryptographic PDF signing server

Migration to BouncyCastle for dynamic algorithm support (RSA and others) and compatibility with Cuban Certificate Authorities.

  • ▸ Dynamic cryptographic algorithm support
  • ▸ Compatibility with national certificate authorities
Java Spring Boot BouncyCastle RSA PKCS12 OCSP
-rw-r--r-- 2024

Havana's 21

Management system for the gastronomy sector

Internal inventory, payroll and operations platform for a gastronomy business, deployed on a Linux VM.

  • ▸ Django REST API + React frontend
  • ▸ Dockerized deployment on a Linux VM
Django REST Framework React Tailwind CSS TanStack Query Docker
-rw-r--r-- ★ featured 2026

TuTaller

Inventory SaaS for electronics workshops

Inventory management system for workshops, designed as a marketable SaaS with annual licensing.

  • ▸ Go (Gin + Ent) + Next.js monorepo
  • ▸ Logto authentication, Docker deployment
Go Gin Ent ORM Next.js Docker Logto
-rw-r--r-- 2026

EatsCav

Uber Eats-style mobile app

Cross-platform delivery mobile app (Android/iOS/Web) built with Expo and React Native.

  • ▸ Universal app with Expo Router
  • ▸ Integrated admin panel
Expo React Native TypeScript NativeWind
-rw-r--r-- 2026

NovaProxy Manager

Proxy manager with Supabase backend

Proxy management tool with modular schema, RPCs and triggers on PostgreSQL/Supabase.

  • ▸ Modular schema with RPC functions
  • ▸ Database-level triggers and rules
Supabase PostgreSQL TypeScript
-rw-r--r-- ★ featured 2026

MSkills — OpenCode Agents

Ecosystem of 50+ skills and specialized agents for OpenCode

Designed an orchestrated AI agent system (plan, build, backend, frontend, dba, devops, marketing) with 50+ reusable skills that multiply productivity.

  • ▸ Domain-based subagent orchestration
  • ▸ 50+ skills: architecture, security, testing, DevOps...
  • ▸ Plan -> build workflow with per-agent permissions
OpenCode AI Agents Markdown LLM Tooling
↗ source

$ cat /etc/skills.conf

# skills

⚙ Backend & APIs

NestJS Node.js TypeORM Zod Python Django DRF FastAPI Kotlin Go Rust

▣ Frontend & UI

React Next.js Astro Angular Tailwind CSS shadcn/ui Chakra UI Material UI Bootstrap Zustand Redux

▯ Mobile & Scripting

React Native Expo Flutter Dart Kotlin Bash Zsh Python

◫ DevOps & Cloud

Docker Docker Swarm CI/CD (GitHub Actions) Nginx Traefik Portainer AWS (S3 EC2 CloudFront) Linux

⛨ Security

Hardening Linux Suricata (IDS/IPS) pfSense IPTables Vault Burp Suite Nmap OAuth2/OIDC

◉ Databases

PostgreSQL MySQL Redis Supabase Ent ORM

$ cat ~/education.md

# education

🎓 B.S. in Cybersecurity Engineering

Universidad de las Ciencias Informáticas (UCI)

Havana, Cuba. Thesis: communication network architecture for Cuba's Digital Signature Service.

Apr 2021 — Jun 2025

🎓 Language certification — English B1

Universidad de las Ciencias Informáticas (UCI)

Certified by UCI. Native Spanish speaker.

Jun 2025

$ tail -n 3 ~/blog/

# blog

hello-world: how this site is built

The stack behind this portfolio: static Astro, YAML content validated with Zod, and zero JavaScript by default.

#astro #yaml #ssg #meta
read post →
all posts →

$ ./contact.sh

# contact

Let's talk▊

If you have a project, an offer, or just want to talk about architecture, security or DevOps — my inbox is open.

✉ send me an email 📄 download CV
github ↗ linkedin ↗ fiverr ↗