Ernesto Galdamez
Technical Lead and Software Architect with over 7 years of experience designing and delivering scalable SaaS platforms, enterprise integrations, and full-stack web applications. Proven track record leading engineering teams, optimizing system architectures, and driving Agile delivery across construction tech, workforce management, and fintech verticals. Consistent record of measurable outcomes: 90%+ manual effort eliminated, event-driven integrations that cut API usage to change-proportional volume, and 14+ internal apps standardized on a shared platform.
EGWork Experience
Clearspace
Technical Lead - Remote
- Architected Clearspace's internal AI tooling platform: two remote MCP (Model Context Protocol) servers exposing 60+ tools over 5 internal systems to Claude, implementing the JSON-RPC 2.0 streamable HTTP transport from scratch (zero dependencies, 3 protocol versions) on Vercel serverless.
- Built the supporting identity platform: a hand-written OAuth 2.1 authorization server (PKCE, RFC 7591 dynamic client registration) with Microsoft SSO and PBKDF2-hashed API keys, giving the org one credential and one revoke point across MCP connectors, CLI, and scripts.
- Created 'cstl', a zero-dependency Node.js umbrella CLI (8 commands, ~38 subcommands) with browser-based SSO login, self-updating cross-platform installers, and an auto-discovering command dispatcher.
- Shipped a Claude Code plugin marketplace (22 skills automating DNS, deploys, migrations, and secret rotation), a 7-agent AI software factory with human approval gates, and a Flask/Docker control plane for operating a fleet of AI agents on DigitalOcean.
- Led development of an enterprise-grade Procore-Sage Intacct integration (60K+ lines of Python) syncing 8 financial entity types through MD5 delta detection, a human approval queue, and a fully audited migration pipeline, eliminating 90%+ of manual data entry.
- Redesigned the integration from full-dataset polling to a hybrid webhook-plus-reconciliation architecture (1,200+ Procore webhook triggers across ~100 projects, idempotent event processing, rate-limit circuit breaker with jittered backoff), making API usage proportional to change volume and eliminating rate-limit failures and false deletion detections.
- Standardized 14+ internal apps (CRM, ATS, estimating, ERP, financial dashboards) on a shared Vite/React/TypeScript + Flask + Supabase stack with centralized permissions and OpenAPI-documented external APIs; mentored engineers through code reviews and architecture guidance.
Clearspace
Senior Software Engineer - Remote
- Built and scaled a full-stack construction estimation platform (Laravel 8 API + Vue 2 SPA) handling the complete quote lifecycle: opportunity intake, multi-variable cost calculation, UNIFORMAT-compliant hierarchical cost exports, and change orders.
- Scaled the API to 150+ endpoints with a deep service and model layer maintained across hundreds of schema migrations.
- Designed and maintained integrations with 8+ external platforms (Salesforce, Procore, Wrike, Google Drive/Sheets, Sage Intacct, Notion, Aspose, Make.com).
- Implemented an AI-powered estimate analysis pipeline using Anthropic Claude with configurable prompt management, enabling stakeholders to update model behavior without code deployments.
- Architected a dual-auth API surface (OAuth 2.0 for the internal SPA + API-key endpoints for third-party consumers) and configured automated cloud backups, eliminating manual backup operations entirely.
True Apex
Lead Software Engineer - Remote
- Designed and shipped a flagship multi-industry SaaS platform (Operators Hub) on Laravel 10 / PHP 8.1: a job marketplace serving aviation, wildland fire, and heavy equipment operators across 120+ REST endpoints, 38 controllers, and 33 Eloquent models.
- Architected a polymorphic profile system for 6 industry verticals with zero table duplication using Laravel morphTo() relationships.
- Implemented a five-layer authorization stack (RBAC + Sanctum token ability scoping + IP whitelist + time-of-day windows + model policies) and hardened all responses with production OWASP security headers.
- Built a PHP-FPM-safe real-time chat system using SSE with Last-Event-ID resumption, requiring no WebSockets or message broker.
- Integrated the full Stripe billing stack (Products, Prices, PaymentIntents, Subscriptions) with cryptographic webhook signature verification.
- Led a team of developers across 30+ projects with a 99% delivery success rate; automated build and deployment workflows using Jenkins, reducing manual intervention by 80%.
Ulzama Digital
Lead Fullstack Developer - Remote
- Led the transition to a microservices architecture, improving system scalability and performance by 30%.
- Designed and implemented high-efficiency RESTful APIs, reducing response times by 50%.
- Applied best practices in software development, resulting in a 60% reduction in critical bugs and an overall improvement in code quality.
- Collaborated with cross-functional teams to optimize backend and frontend development.
Paybook
Technical Project Manager - Remote
- Oversaw and contributed to the development of 'Millas para el Retiro,' an Android/iOS app enabling automated retirement savings, processing over 100K monetary transactions daily.
- Managed high-level project scopes and feature development, ensuring seamless integration with third-party APIs and cashback partners like Amazon and Cinépolis.
- Led the implementation of new features, collaborating with stakeholders to align business objectives and enhance user experience.
Education
Bachelor of Engineering in Computer Science
Certifications
EFSET English Certificate 81/100 (C2 Proficient)
Machine Learning with Python
AI for Leaders
RU202: Redis Streams
End-to-end machine learning operations (MLOps) with Azure Machine Learning
RU101: Introduction to Redis Data Structures
Introduction to Large Language Models
IBM Network Security & Database Vulnerabilities
AWS Developer: Getting Started
How to Manage a Remote Team
M001: MongoDB Basics
Information Security: Context and Introduction
Scrum Fundamentals Certified (SFC)
Skills
Projects
Clearspace AI Tooling Platform (MCP + CLI)
Company-wide AI tooling layer connecting internal systems to Claude. Built two remote MCP servers (60+ tools across CRM, notes, estimating, dev-pipeline, and ERP systems) implementing the streamable HTTP transport from scratch with zero dependencies, backed by a hand-written OAuth 2.1 authorization server (PKCE, dynamic client registration) where the issued access token doubles as the org API key: one credential across MCP, CLI, and scripts, revocable from a single admin console. Also built the 'cstl' umbrella CLI with browser SSO login and self-updating installers, a Claude Code plugin marketplace with 22 workflow-automation skills, a 7-agent software factory with human approval gates, and a Docker-based control plane for operating a fleet of AI agents.
Procore–Sage Intacct Sync Platform
Enterprise-grade ERP integration platform connecting Procore and Sage Intacct: 60K+ lines of Python, 21 Flask blueprints, 13-table schema. Detects changes via canonical-JSON MD5 checksums against a historical baseline, routes them through a human approval queue, and executes migrations with durable Postgres state machines and append-only execution logs. Redesigned polling into a hybrid push-and-reconcile system: 1,200+ Procore webhook triggers with a fast-ack receiver and idempotent event dedup, while nightly polling remains the deletion authority, making API usage proportional to change volume and eliminating rate-limit failures and false deletion detections. Includes a rate-limit circuit breaker with jittered exponential backoff, dual OAuth apps for quota isolation, concurrent-safe single-writer token refresh with cross-process file locks, component-level health checks, and zero-downtime GitHub Actions deploys. Cut manual data entry by 90%+.
Clearspace Estimation Platform
Full-stack construction estimation platform covering the complete quote lifecycle, from opportunity intake and multi-variable cost calculation to UNIFORMAT hierarchical exports and bi-directional sync with Salesforce, Procore, and Sage Intacct. Features an AI-powered estimate analysis pipeline (Anthropic Claude) with configurable prompt management, a dual-auth API (OAuth 2.0 + API-key), real-time database subscriptions in the Vue SPA, role-based access control, and automated cloud backups. 150+ REST endpoints across a deep service and model layer.
Operators Hub
Multi-industry SaaS job marketplace for operators in aviation, wildland fire, and heavy equipment. Architected a polymorphic profile system for 6 industry verticals with zero table duplication, a five-layer authorization stack (RBAC + token ability scoping + IP whitelist + time-of-day windows + model policies), PHP-FPM-safe real-time chat via SSE with Last-Event-ID resumption, and full Stripe subscription lifecycle with cryptographic webhook verification. Includes a hot-swappable SMS provider abstraction, transactional notification quota engine, and a WordPress plugin API namespace.
Encore Audio
Built a social media platform for audio enthusiasts, integrating Spotify and Apple Music APIs to enable music discovery and sharing. Developed e-commerce features with Stripe for seamless transactions.
Sportivo
Developed an AI-powered sports analytics platform that provides predictive insights based on historical data. Designed and managed cloud infrastructure on AWS to ensure high availability and scalability for clients generating revenue through predictive analysis.
Komatsu LMS
Developed a custom learning management system (LMS) for Komatsu machinery, secured with Microsoft Authentication. Enabled role-based access control and video-based training modules.
Personal Projects
Resumint
Bilingual (EN/ES) AI-powered resume builder with ATS optimization. Built a PDF-to-structured-data pipeline combining client-side PDF.js parsing and a Gemini-backed extraction endpoint. Implemented a custom i18n engine with browser-detection fallback, prompt injection defense (20+ regex patterns), magic-byte PDF validation, dual-layer API rate limiting (5 parses/hr, 1 AI opt/30 min per user), and per-request token telemetry for cost visibility. Owned full SEO infrastructure with JSON-LD structured data for 5 schema types.
Node.js RESTful API Server Template
A boilerplate for RESTful API development with authentication, request validation, and CI/CD support.
Press Ctrl/⌘ J to open the command menu