Constructive
Head of Infrastructure / Founding Engineer · San Francisco, CA (Remote)
AI Agent Infrastructure
- Built Minato, an independent cloud-native agent engine and harness adopted internally, with Go/Temporal execution, isolated Kubernetes workers, durable approvals, and artifact-backed handoffs.
- Built Clusterops, a custom agent harness for Constructive Kubernetes operations across development, staging, and production, with scoped investigations, evidence bundles, and reviewed changes.
- Developed SystemProof for full-system verification: deterministic Playwright replay, API/log assertions, agent evaluation, and evidence-backed reports and release gates.
- Built an internal autonomous engineering agent platform on self-hosted Kubernetes for issue triage, PR review, CI debugging, and cross-repo failure analysis; reduced manual project-tracking work by auto-generating issues from meetings and Slack.
- Operated self-hosted vLLM inference behind OpenAI-compatible APIs with long-context serving, tool calling, and eval gates for internal agents.
- Built the eval-pipeline harness and autonomous AI QA environment that exercise the database cluster and services like real users before promotion.
- Built Go runtime sidecars for agents, including a multi-provider OAuth PKCE credential manager and a workspace introspection HTTP server.
Platform & Developer Infrastructure
- Lead infrastructure for Constructive, whose open-source SQL/database tooling ecosystem has 100M+ downloads.
- Led the platform shift from chain tooling to a multi-tenant Postgres developer platform, then built that platform across 134+ packages and 3 monorepos, enforcing tenant isolation with PostgreSQL row-level security and JWT claims.
- Reduced recursive authorization checks from exponential traversal to logarithmic lookups by building materialized authorization tables across the app/org/group hierarchy.
- Designed a bitstring permission model for constant-time authorization checks by materializing multi-source permission bundles into one actor/entity bitmask.
- Reduced database-package drift by building pgpm, an npm-style SQL package manager with dependency resolution, deterministic migrations, and content-addressed artifacts.
- Built 14+ GraphQL plugins covering unified search, full-text/vector/trigram search, geospatial queries, file uploads, and retrieval-backed application workflows.
- Designed composable authentication across password, OAuth/OIDC, magic link, OTP, WebAuthn/passkeys, and TOTP 2FA.
- Enabled database-backed apps to run distributed workloads by building constructive-functions, a modular application-functions framework hosted as Knative services and managed by the platform database operator.
- Built a cross-repo CI/CD staging system that runs full-system E2E in GitHub Actions and gates GKE dev-cluster promotion; 175+ cycles, 67% of PRs auto-merged.
- Built KubernetesJS, a zero-dependency TypeScript Kubernetes SDK generated from the Kubernetes OpenAPI spec.
- Maintains open-source Postgres tooling including pgsql-parser, libpg-query-node, and postgres-ast-deparser.