01
Python & backend engineering
Build maintainable services with explicit API contracts, production packaging, configuration management, error handling, and retry-safe execution.
Python · TypeScript · Google Cloud · Montreal
Toufic
Hajj
I turn business requirements into production software: Python services, React/TypeScript interfaces, and cloud platforms on GCP. Hands-on from architecture and team guidance to delivery — including privacy-first products like Thirty North.
15+ years shippingOn-prem · cloud · hybridFR + EN
Senior Full-Stack & Cloud Platform EngineerWisk.aero · Thirty North · Montreal
The pattern that keeps showing up
People do not need another demo. They need systems that warn early, respect privacy and compliance, and still work when the next invoice — or the next deployment — changes the answer.
See how that shaped Thirty North →Technical skills
The tools behind the delivery.
From Python services and TypeScript interfaces to secure cloud architecture, delivery automation, and AI-enabled workflows.
02
TypeScript & full-stack interfaces
Create accessible application interfaces, visual workflow editors, and data-rich tools with reusable components and clear client/server boundaries.
03
Google Cloud platforms
Connect compute, messaging, storage, and analytics services for containerized applications, workflow orchestration, and streaming or batch workloads.
04
Containers, infrastructure & delivery
Provision infrastructure as code, package containerized workloads, and build repeatable GitOps delivery with automated environment lifecycles.
05
Data engineering & integration
Design streaming and batch pipelines with schema validation, normalization, partitioned storage, SQL views, backfills, and traceable data-quality checks.
06
AI model integration & evaluation
Integrate models into workflow generation and editing, with structured output, validation, and human review. Evaluate LLM responses and generated Python against explicit quality criteria.
07
Cloud solution architecture
Translate business needs into technical scope, service boundaries, integration patterns, and deployment choices, balancing security, reliability, performance, and cost.
08
Identity, security & AI governance
Design application access with least privilege and workload identity. Own enterprise policy for autonomous coding agents, covering scoped permissions, human approvals, supply-chain review, and auditability.
09
Reliability & operations
Make workloads observable, testable, and recoverable through telemetry, failure handling, repeatable execution, and controlled releases. Treat query and resource costs as design inputs.
Selected work
Proof under constraint.
Latest first: a live privacy-first product, then institutional platforms that show the same ownership — citizen UX, bilingual delivery, and systems people can operate.
Context
The arena I know best.
A decade inside knowledge technologies (InMédia / BiblioMondo) — platforms for cities, libraries, museums, and institutions that must federate content, respect rights, and survive mass deployment.
01
Cities
Citizen portals, municipal intranets, and public e-services that keep working when the city is online — and when it isn’t.
02
Libraries
Multimedia catalogues, personal spaces, and companion apps that connect physical collections to digital convenience.
03
Museums
DAM, virtual exhibitions, and digital signage across heritage networks — rights-aware media, not just file storage.
04
Enterprises
Private and hybrid deployments for organizations that need the same platform rigor without a public-facing mandate.
Platform
What the stack had to do
Not a marketing site — an open, flexible CMS + DAM platform that creates, manages, and presents information and services to the public.
- Web portals and personal / citizen spaces
- Multimedia catalogues and advanced viewers
- Digital asset management with usage rights
- Virtual exhibitions and digital signage
- Mobile apps, newsletters, calendars, and events
- Forms, surveys, and back-office operations
- Multilingual delivery with WCAG-minded admin tooling
- GDPR-conscious handling of personal data
Deployment
Where it had to run
Same product family — different operational realities. Architecture that survives tenders, audits, and city-scale rollout.
- On-premise: institutional networks and 1,500+ public workstations
- Cloud: multi-tenant portals and government API integrations
- Hybrid: public surfaces with secured intranet cores
- Public organizations: libraries, museums, municipalities, ministries
- Private organizations: enterprise knowledge and media workflows
- Mass deployment with uptime, accessibility, and tender scrutiny
From idea to fleet
Shape the product
Roadmaps, research (SMESE / MLM harvesting lines), and stakeholder needs before a line of production code ships.
Make it durable
SPA/mobile fronts, microservices migrations, federated content, and standards that outlast a single release.
Roll it out at scale
On-prem, cloud, and hybrid mass deployment for institutions that cannot treat go-live as a demo day.
Focus
Where I create leverage.
Platform architecture, institutional deployment, and hands-on leadership — the same muscles from knowledge technologies, applied to cloud-native and AI-enabled systems.
Platforms
From knowledge platforms to privacy-first products — architecture that federates content, respects rights and compliance, and runs where the user actually lives.
Deployment
Ideation to mass rollout for public and private organizations: cities, institutions, and operators who need early warning — not another dashboard demo.
Leadership
Hands-on technical direction for teams of 10+. R&D roadmaps, tenders, and product shipping — without leaving the craft behind.
Experience
Recent roles. Real ownership.
From R&D leadership on knowledge platforms to aviation and energy markets — always hands-on, always shipping under real constraints.
Full Stack Software Engineer
Wisk.aero
Build React/TypeScript interfaces and Python services for an internal workflow-orchestration platform on Argo Workflows and GKE, enabling engineering and data teams to run pipelines without managing the underlying infrastructure.
Founder / Full-Stack Product
Technologies Toufic Hajj Inc. — Thirty North
Shipped thirtynorthgst.ca: privacy-first GST/HST threshold tracker for Canadian cross-border freelancers.
Full Stack Developer
CWP Energy Solutions
Built Python/Java ingestion services for real-time energy-market feeds in XML, CSV, and JSON using Pub/Sub, Dataflow, Cloud Functions, GCS, BigQuery, and Cloud SQL across streaming and batch paths.
Full Stack Developer
Freelance
Designed and built a comprehensive trading toolkit using React, natively integrated with Electron.
Vice President Research And Development
InMédia Technologies / Bibliomondo
Owned R&D strategy for an all-in-one knowledge platform (CMS, DAM, catalogues, citizen portals, mobile, digital signage) serving cities, libraries, museums, and institutions.
Principle
Calculate what you can prove. Name what you will not pretend to know. Ship the early-warning system — not the theatre.
Honest limits are a product feature.
Contact
Let's build something lasting.
Open to full-stack, cloud platform, and technical leadership roles — and conversations about products that need privacy, bilingual delivery, and honest operational limits.