Renny Valera
API Integration & Security Architect · Senior Backend (Java / Quarkus / OpenShift)
valerarenny@gmail.com · Caracas, Venezuela · https://linkedin.com/in/rennyvalera · https://github.com/valerarenny
Professional Summary
Software engineer with 10 years of experience in backend development, enterprise integration, and API security. Specialized in the Red Hat ecosystem: Quarkus, OpenShift, 3scale API Management, Keycloak, and AMQ Streams. Currently leading the migration of Telefónica's service ecosystem to a centralized API Gateway with 3scale, including the design of a BFF architecture with backend-managed sessions and effective token revocation, aligned with the OAuth 2.0 for Browser-Based Applications best practice. Experience across telecommunications, the public sector (provincial budget systems), insurance, and hospitality, with integrations to legacy AS400 systems. C1 English.
Technical Skills
- Security & APIs: 3scale API Management, Keycloak / Red Hat build of Keycloak, OAuth2, OIDC, JWT, BFF Pattern, Token Revocation, Backend Session Management, OpenAPI 3, gRPC
- Backend: Java (8–21), Quarkus, Spring Boot, Spring MVC, Spring Cloud, OpenFeign, Resilience4j, JavaEE, .NET C# (MVC5 / Core), NestJS, Maven, Gradle
- Cloud & DevOps: OpenShift, Kubernetes, Docker, Tekton (OpenShift Pipelines), ArgoCD, Helm, Azure DevOps, Git / GitHub / GitLab
- Messaging & Events: Apache Kafka, AMQ Streams, ActiveMQ, Event-Driven Architecture, DDD
- Data: PostgreSQL, SQL Server, MySQL, MongoDB, Redis, Red Hat DataGrid, Hibernate / JPA, Liquibase
- Frontend: React, TypeScript, Next.js, Vue.js, Astro, Tailwind CSS
- Observability & Quality: Prometheus, Grafana, Loki / ELK, OpenTelemetry, JUnit, Mockito, REST Assured, SonarQube
- Legacy Integration: AS400 (sockets & queues), WCF, SSIS
Professional Experience
Service Integration Lead (Full-time) — Telefonica, Venezuela
September 2023 - Present
- Leading the migration of the API and microservices ecosystem to a centralized API Gateway with Red Hat 3scale, unifying traffic policies, rate limiting, and monitoring across consumer applications (mobile, web, internal channels, and partners).
- Designed and implemented a BFF architecture with backend-managed sessions that removes token storage from the browser and enables effective session revocation — cutting the time between logout and real access invalidation from the token's full lifetime to under a second, closing a security finding around ineffective logout on stateless JWTs.
- Defined the authentication and authorization model on Keycloak (OAuth2 / OIDC): per-client-type flows, realm and client management, and token validation at the gateway.
- Implemented distributed session management with Redis to support authentication at scale with low latency.
- Established CI/CD pipelines with Tekton and Azure DevOps, streamlining build, test, and deployment cycles and increasing release frequency.
- Implemented asynchronous inter-service communication with Apache Kafka to decouple critical business flows.
- Provided technical coordination for the development team and served as the integration point of reference for product teams.
Stack: Java · Quarkus · Spring Boot · 3scale · Keycloak · OpenShift · Kafka · Redis · Docker · Prometheus / Grafana
Java Consultant · Freelance (Project-based contract) — DirMOD, Argentina
September 2022 - December 2023
Independent project-based collaboration, not an employment relationship. After joining Telefónica full-time in September 2023, I continued through project close only, in parallel with and without conflict to my full-time role.
- Developed the budget line-item management module for the Government of the Province of Misiones, a public budget administration system distributed across multiple government agencies.
- Modeled the budget execution domain (line items, allocations, encumbrances, and balance control) applying DDD, ensuring traceability and consistency across financial operations.
- Built event-driven microservices with Spring Boot and Apache Kafka to support internal workflows of the budget execution system.
- Implemented API security with JWT/OAuth2 and distributed persistence over PostgreSQL and MongoDB.
- Contributed to containerization and deployment with Docker and Kubernetes.
Stack: Java · Spring Boot · Kafka · PostgreSQL · MongoDB · Docker · Kubernetes
Software Engineer — Zutun, Lima, Peru
April 2022 - August 2022
- Integrated the reporting module for Insuma, a multi-tenant insurance platform, exposing reporting capabilities with data isolation across tenants.
- Developed REST endpoints on Spring Boot for report generation, optimizing report-generation times.
Stack: Java · Spring Boot · REST
Software Developer - Java Consultant — DBAccess / Paxer
April 2018 - April 2022
- Developed and maintained Paxer, a hotel Property Management System (PHP/Java) in production, working across the full stack.
- Built Spring Boot microservices integrated with AS400 systems via sockets and message queues.
- Used Apache Kafka and ActiveMQ for asynchronous messaging and event-driven booking and billing workflows.
- Designed REST APIs with JWT/OAuth2 authentication consumed by web and mobile clients.
- Managed relational databases (PostgreSQL, MySQL, SQL Server) and MongoDB.
- Collaborated on Docker-based containerization and application deployment.
Stack: Java · Spring Boot · Kafka · ActiveMQ · AS400 · PostgreSQL · MySQL · SQL Server · MongoDB · Docker
Software Developer - .NET — Legendsoft, Miranda, Venezuela
January 2018 - April 2018
- Developed business applications using .NET MVC 5 (C#).
- Built MVC web interfaces and integrated SQL Server backend data layers.
Software Developer — IQuantics Corp
July 2016 - December 2017
- Developed enterprise .NET and Java applications for corporate clients.
- Worked with WCF services for data storage and SQL Server migrations from AS400 using SSIS.
- Built Reporting Services reports from SQL Server data.
Projects
AI-Powered CV / Portfolio Website
Next.js · TypeScript · Ollama · Cloudflare Tunnel
- Built a personal portfolio site with an integrated AI chatbot that answers questions about my professional background.
- Integrated a self-hosted LLM (Qwen on Ollama) running on local hardware, exposed securely through a Cloudflare Tunnel.
Education
Bachelor of Computer Engineering (Ingenieria Informatica) — Universidad Alejandro de Humboldt (2013 - 2017)
Certifications
- English — C1 Advanced (EF SET, 66/100)
- Spanish — Native