Lautaro Boffi

— Authentication system via OTP email with Supabase Auth and httpOnly secure cookies — Modular role-based access control — granular permissions per user type (manager, admin, etc.) — IP binding to prevent concurrent sessions from different devices — OTP attempt limiting: 5 attempts → 30min block, 3 → 2h block, 1 → permanent block — Single session per user enforced via active_sessions table with 1-hour auto-cleanup — TabTracker with BroadcastChannel for cross-tab session sync — Role injected via JWT app_metadata to prevent cookie manipulation — CSP headers: report-only in development, enforced in production — Server-side route protection via Next.js 16 proxy middleware

— Design and development of backend services using Python (Django) for real-world web applications — Implementation of business logic and relational data models — REST API integration and collaboration with TypeScript (Next.js) frontend applications — Version control with Git and test-oriented development practices

— Backend feature development in PHP within production environments — MySQL database management and optimization ensuring data integrity and performance

— Hardware and software maintenance and repair — User training and technical support to ensure operational continuity

— Administrative and operational support in remote work environments — Task coordination and support for cross-functional teams

— Lead prospecting, generation, and follow-up