Open to consulting, contract & full-time

Resume

Senior Solutions Architect & AI Consultant with 15+ years in cloud infrastructure, cybersecurity, and end-to-end AI delivery. I design Python/Cloud architectures and privacy-first local LLM/RAG systems.

EU-based (Bulgaria) · Remote / Hybrid · EU timezone

[email protected] LinkedIn GitHub

Experience

15+ years designing systems and leading teams

05/2024 – Present

AI & Software Architecture Consultant

Remote, EU timezone

Architect and deploy privacy-first local AI products, enabling secure document intelligence where sensitive data is processed entirely on-device or on-premise, with no third-party data exposure by design
Design multi-agent workflows and backend architectures using Python (Django, FastAPI) and containerized infrastructure across cloud providers, defining scoped agent permissions and output-validation steps for reliable autonomous operation
Advise clients on infrastructure strategy, evaluating managed services (AWS RDS, GCP Cloud Run) against self-managed container deployments (DigitalOcean) across cost, operational overhead, and data-residency requirements
Lead end-to-end integration of open-weight LLMs (via OpenAI SDK, Ollama, and MLX for Apple Silicon inference) into production environments, selecting and optimizing models for available RAM and latency budgets
Apply threat modeling and zero-trust principles across delivered systems, with secure secrets management in CI/CD pipelines and scalable data layers in PostgreSQL and MongoDB

AI System Architecture Local LLMs RAG Python Django FastAPI AWS GCP DigitalOcean Docker PostgreSQL MongoDB

06/2021 – 05/2024

Senior Systems Architect / Senior Backend Engineer

PDPaola · SASMAT RETAIL S.L — Barcelona, Spain (Remote)

Led core system architecture, schema design, and third-party API integration strategies for high-volume enterprise e-commerce systems on a PHP stack
Architected asynchronous, queue-based service communication for the logistics integration (Logisfashion), replacing fragile synchronous calls and keeping order processing reliable under peak traffic
Designed token rotation and rate-limit-aware queue processing for partner APIs, eliminating recurring integration failures and removing manual recovery interventions from day-to-day operations
Standardized Docker-based deployments and environment configuration across all stages, cutting environment drift and shortening release cycles

System Architecture PHP Schema Design Queue-based Integration Docker CI/CD

2019 – 2021

MSc Studies, Information Technology Administration

Tecnológico de Monterrey

Completed postgraduate studies between international roles in Beijing and Barcelona

IT Administration Enterprise Architecture Technology Strategy

08/2014 – 06/2019

Systems Manager

Beijing International Bilingual Academy — Beijing, China

Directed hybrid infrastructure operations (on-premise Xen/KVM and cloud) with high availability and load balancing for critical academic and administrative systems
Led a 4-person cross-functional IT team covering support, network operations, and strategic deployments
Assessed and integrated open-source collaboration platforms to align with strict organizational data policies

Xen KVM Hybrid Infrastructure High Availability Team Leadership

12/2013 – 06/2014

IT Director

Gobe · SoftwareShop — Bogotá, Colombia

Established comprehensive IT strategy, aligning technical initiatives with organizational objectives during a critical transition period
Managed the technology budget and coordinated development efforts with a strong emphasis on security and operational reliability

IT Strategy Budgeting Security

06/2012 – 11/2013

Test Designer

Abits Colombia / AMADEUS Latam — Bogotá, Colombia

Designed and executed rigorous performance, stress, and security testing protocols on large-scale travel e-commerce platforms
Collaborated with engineering teams to identify and remediate critical security vulnerabilities before production release

Performance Testing Stress Testing Security Testing

Core Competencies

Architecture, AI, security, and leadership applied in production

Architecture & Cloud

Cloud Native, Microservices, System Design, AWS (EC2, S3, RDS), GCP, DigitalOcean, Docker, CI/CD, Hybrid Infrastructure, High Availability, Infrastructure Strategy (Managed vs. Self-hosted Trade-offs)

Artificial Intelligence

AI System Architecture, Local LLM Integration (Ollama, MLX optimized for Apple Silicon), Multi-agent Workflows & Agent Governance, RAG, Privacy-by-design Inference, Data Pipelines

Backend Development

Python, Django, FastAPI, REST/GraphQL API Design, PostgreSQL, MongoDB, Schema Design

Security & Quality

ISC² Certified in Cybersecurity (CC), Threat Modeling, Zero-trust Architecture, Secrets Management, Identity & Access Management, Performance & Stress Testing

Product Leadership

Problem Framing, End-to-End Delivery, Vendor/Stakeholder Management, Technical Strategy

Languages: Spanish — Native · English — C1 Fluent

Education & Certifications

ISC² Certified in Cybersecurity (CC)

ISC2 · 2025 — Threat modeling, zero-trust architecture, and vulnerability management

MSc — Information Technology Administration

Tecnológico de Monterrey, Mexico · 2019–2021 — Enterprise architecture, IT governance, and technology strategy

Information Security Specialist

Universidad de los Andes, Colombia · 2010 — Secure systems design and security operations

Systems Engineering and Computer Science

Universidad Industrial de Santander, Colombia · 2008 — Software engineering fundamentals and computer systems

Featured Architectural & AI Projects

Independent products, designed end to end and running in production

CourseCamp

Django, Client-side Python execution (Pyodide), PostgreSQL — Engineered a scalable production EdTech platform with automated grading via sandboxed in-browser code execution, multi-language delivery, and structured content management.

Django Pyodide PostgreSQL

EQBook

Local LLMs, MLX, RAG, Embeddings, macOS/Apple Silicon optimization — Architected a fully on-device research workspace where transcription, vector storage, and inference run locally. No document content or PII ever leaves the device, so data privacy is structural rather than contractual.

Local LLMs MLX RAG

Let's talk

EU-based, available now for remote or hybrid engagements in the EU timezone. Book a meeting or send an email.

Schedule a Meeting [email protected]

Libardo Ramirez