Senior Fullstack Developer · Pentera (acquired DevOcean)
Oct 2025 – Present · Tel Aviv District, Israel
- AI assistant used by 200 customers: a multi-tenant, streaming agent on Claude through AWS Bedrock (Strands, FastAPI on Lambda, AG-UI events), taken from first commit to two AWS regions.
- MCP server with 72 typed, permission-scoped tools for the in-product agent and for outside clients (Claude, ChatGPT, Cursor, VS Code).
- OAuth for remote MCP: an RFC 9728 metadata service plus a per-region token checker that applies each user’s real permissions on every tool call.
- LLM cost and abuse controls: per-user and per-company rate limits, daily token and spending budgets, a concurrent-run cap and firewall throttling, tunable without a redeploy.
- Reliable streaming on serverless: deadline budgets, a guaranteed end-of-stream signal and bounded UI state machines; wrote the runtime decision record and the postmortems.
- Safety: content guardrails with a test harness, context redaction, per-company switches, and approval cards so the agent proposes and a person confirms.