Hi, I'm
Ponpawit Paoseng
Senior Full Stack Developer · Frontend / Backend / DevOps
5 yr 9 mo of experience
I enjoy learning new things, adapting fast, and solving problems end-to-end — from UI to infrastructure. Currently working as Senior Full Stack Developer at Merkle Capital, Thailand's first digital asset fund manager, based in Bangkok.
Experience
Senior Full Stack Developer
Merkle Capital (Cryptomind Group)
Thailand's first digital asset fund manager.
- Senior Full Stack Developer 9mo
- Full Stack Developer 2 yr
- › Launched a new fund-management product end to end — UAT and production on GCP for frontend, admin, backend, and CMS
- › Built the infrastructure-as-code platform (OpenTofu + Cloud Run): the deployed image tag lives in version control, so rollback is redeploying an older tag; production deploys are gated
- › Designed a generic deploy contract — app repos build, push, then dispatch to one shared deploy workflow; promoting the UAT image to production instead of rebuilding it
- › Migrated services from HTTPS load balancers to Cloud Run domain mappings behind Cloudflare, cutting cost and certificate toil
- › Built a sanctions-watchlist ingest: PGP-decrypted archives parsed into PostgreSQL across 10 lists, version-gated with per-list failure isolation
- › Built token & fund rule management in the Trading Terminal; Coinbase limit-order trading and automated portfolio snapshots on Celery + Redis
- › Hardened the platform: fixed user enumeration on password reset, masked KYC history, upgraded to PostgreSQL 15, added New Relic APM and GrowthBook feature flags
- › Led remediation of penetration-test findings on security headers: per-request nonce CSP (strict-dynamic) rolled out report-only across the investment site and admin, security headers owned by the apps instead of Cloudflare rules, plus edge HSTS and HTTP → HTTPS redirects
- › Rolled out DMARC across the company domains: monitor mode first to inventory legitimate senders and SPF/DKIM alignment, then raised to quarantine; traced every failing source IP in the reports to forwarding, internal relays, or our own tests, verified enforcement with controlled spoofing tests, and caught a missing DKIM key before planning the move to reject
- › Upgraded the web stack to Node 24, restored runtime env config so one Docker image serves every environment, and fixed SEO server-side rendering on a Next.js pages-router project
- › Bootstrapped a NestJS mobile backend and planned the API migration with the vendor
- › Reduced Docker image size from 10 GB → 2 GB, cutting deployment time and storage costs
- › Managed CI/CD pipelines, GitHub Actions workflows, self-hosted SonarQube, and Cloudflare Zero Trust
Jan 2024 – Present
2 yr 9 mo
Full Stack Developer
The LivingOS Co., Ltd.
Proptech and living solutions for digital communities.
- › Migrated legacy .NET UIs to NuxtJS (parcel management, voting system)
- › Built REST APIs with FastAPI; implemented parcel management & maintenance in React Native + Vue.js
- › Created a private NPM design-system package (PrimeVue) used across all projects
- › Established a feature-based front-end project structure
- › Built IVote v2 with an ElectronJS Thai national ID card reader connected via Socket.io
Aug 2022 – Jan 2024
1 yr 6 mo
Full Stack Developer
Living Mobile (FoodStory POS)
POS solutions for the food & beverage industry.
- › Developed FoodStory CRM; fixed slow pages by caching data in localStorage
- › Implemented Firebase Auth federated identity, Line OAuth2, and RabbitMQ for large transactions
- › Built internal Slack bot with SlackBolt on NestJS for quotation approvals
- › Migrated legacy internal API to NestJS framework
Jan 2021 – Jul 2022
1 yr 7 mo
Full Stack Developer (Part-time)
Digital Store Mesh
ERP integration, Data Governance & AI solutions.
- › Pioneered Data Preparation tool using D3.js and Socket.io
- › Built Data Discovery tool for graph-based data visualization
Aug 2020 – Mar 2021
8mo
Full Stack Developer (Volunteer)
TUVC — Thammasat University Volunteer Center
- › Built volunteer activity registration & hours tracking web app with Django REST + Vue.js
- › Implemented JWT email verification, event confirmation flow, and OAuth2 student auth
Jun 2019 – Present
7 yr 4 mo
Skills
Education
Thammasat University
B.Sc. Computer Science · GPA 2.86
Certificates
- EnglishJun 2024exp. Jun 2026
- EnglishMay 2024exp. May 2026
- Mar 2022
- Getting Started with Vue.jsVue.jsJan 2022
- Nov 2021
- Modern JavaScript (ES6)JavaScriptJun 2021
- Web Basics with HTML and CSSHTML CSSJun 2021
- HTML FundamentalsHTMLDec 2018
- JavaScriptJavaScriptDec 2018
Blog
-
Goodbye Gmail App Passwords: DKIM-Signed Alerts With Resend and a Locked-Down Relay
My homelab alerts sent as @king-ppap.net through Gmail SMTP until DMARC p=reject started bouncing them. The fix: Resend for DKIM, plus a small Postfix relay for a UPS card that can't speak ECDSA TLS, locked down so a compromised LAN can't turn it into a spam cannon.
-
kpp.in.th: Cloudflare DNS and a Free thMail Inbox
Moving a .in.th domain to Cloudflare, claiming THNIC's free thMail mailbox, and trimming SPF down to what actually sends.
-
Building a Live PM2.5 Monitor: ESP32 → MQTT → Cloudflare
A live air-quality dashboard that shows PM2.5 from the sensor nearest you — an ESP32 + PMS7003 publishing retained MQTT, a browser that streams readings directly from the broker, and a static Nuxt bundle on Cloudflare that has no server at all. Here's the whole shape, and every footgun.
Contact
Open to interesting opportunities and collaborations.
Best way to reach me is by email.