Consulting and tech lead assignments

Senior full stack consultant & tech lead

An engineer with experience in defence, energy and space. I designed a complete information system, from architecture to operations.

  • Architecture and industrialized delivery
  • Critical environments: defence, energy, space
  • Upskilling a team on AI
See the full profile
Portrait of Charles HILD LÊ, full stack software engineer in Toulouse

Skills

Architecture, security and industrialization

Security, quality, operations: the foundation of a senior consultant.

Architecture & backend

Stack

Node.jsTypeScriptExpressMedusaJS v2PrismaPostgreSQLRedisMeiliSearchPHP

Know-how: Idempotency, concurrency locks, workers, scheduled jobs, workflows and state machines.

Frontend & product

Stack

React 18/19Next.js 15/16App RouterServer ActionsTailwind 4shadcn / Base UIAG GridRedux Toolkitreact-hook-formZod

Know-how: PDF generation, electronic signature, field photo capture, technical SEO.

Security & identity

Stack

OIDC + PKCEBFFZitadelPasskeysTOTPAES-256-GCM

Know-how: HttpOnly sessions and CSRF protection, AES-256-GCM encryption, rate limiting, server hardening.

  • Self-hosted identity provider, configured through CI only
  • Tokens kept server-side (BFF pattern), opaque HttpOnly sessions
  • Migration without loss of access and a reversible cutover across 9 applications

DevOps & operations

Stack

DockerGitHub ActionsGHCRCloudflare TunnelNginxPrometheusGrafanaLokiAlertmanagerBorg

Know-how: Reproducible deployments, rollback by tag, monitoring, alerting and deduplicated pull-mode backups.

  • Docker images tagged per commit and rollback by tag
  • Metrics, logs and alerts: Prometheus, Grafana, Loki, Alertmanager
  • No application port exposed, three-tier backups

Business integrations

Stack

MollieStripeDolibarrPeppolUBLEN 16931Google CalendarGoogle Drive

Know-how: Online payment, ERP, electronic invoicing, calendars, transactional emails, and point-of-sale hardware.

AI & data

Stack

PyTorchTensorFlowDDPG / MADDPGNLPXAIClaude CodeCodexMCP

Know-how: Engineering degree in AI and robotics: ML, deep learning, reinforcement learning, NLP, explainability.

How I work

  • Deep understanding of business needs
  • Product vision
  • Anticipation
  • High quality standards and attention to detail
  • End-to-end autonomy

Artificial intelligence

Agentic engineering: AI under an engineer's control

The point is not to use AI, but to industrialize it without losing control.

Engineer first. AI executes; I design, decide, review and prove.

I do not delegate my understanding: every change is reviewed, and I keep the final say.

Six principles, each one verifiable

Scope before generating

Versioned specs split into deliverables with acceptance criteria; one instruction contract per repository.

Evidence: A 28-deliverable roadmap drove the SSO rollout across 9 applications.

Orchestrate

A plan approved before any code, specialized sub-agents, worktrees to parallelize without conflict.

Evidence: A fresh session executes another one's plan: no confirmation bias.

Set guardrails

Deterministic hooks, restricted permissions, no secret handed to AI, explicit human escalation.

Evidence: Guardrails are technical, not just instructions.

Prove it

Tests written first, then multi-agent testing in a real browser; every verdict is re-measured.

Evidence: 5 campaigns, over 800 cases, up to 11 agents in parallel.

Keep the final say

Every change reviewed, architecture and security calls made by me. No code I do not understand gets merged.

Evidence: I remain accountable for what goes to production.

Capitalize and stay ahead

Reusable skills, a wiki updated in the same patch, memory shared between agents.

Evidence: Active watch: spec-driven development, MCP, Claude Code, Codex.

Industrializing AI within a team

Shared rules rather than individual habits.

Shared conventions

An instruction contract per repository, versioned specs and a common definition of done.

Team skills

Reusable workflows (feature, acceptance testing, diagnostics) versioned with the code.

Guardrails

Hooks, permissions and mandatory reviews: a technical frame, not just a declared one.

Upskilling

Helping developers move from improvised prompting to a measurable engineering practice.

Case studies

Complete, documented architectures

For each project, the architecture decisions and the engineering challenges.

ArchitectureBackend

Technical data catalog platform

Replacing a legacy tool with an in-house platform, built from scratch.

An internal web application for cataloguing and search, built from scratch by a team of seven whose architecture and code review I own.

  • Architecture boundaries checked by the linter
  • End-to-end tests across two repositories
  • Quality gates computed on the diff
View project
ArchitectureBackend

A complete SME information system, built single-handedly

13 interconnected apps: sales, workshop, rentals, invoicing and e-commerce

A complete information system for an SME: central API, e-commerce, ERP and point of sale, SSO and 6 business apps.

  • From monorepo to dedicated repositories
  • Gradual migration to Next.js 16
  • Consistent tooling
View project
E-commerceBackend

Headless e-commerce platform connected to the ERP

E-commerce API, storefront and back-office, with an ERP-driven catalogue

A 3-app headless e-commerce platform: ERP-driven catalogue, Mollie payments, legal invoicing and returns handling.

  • Concurrency under control
  • Idempotent payment capture
  • Admin cut off from the Internet
View project
Security

Single sign-on (SSO) and MFA for 9 applications

One identity, a second factor and central revocation across 9 applications

Self-hosted OIDC single sign-on for 9 applications: passkey or TOTP MFA, server-side tokens and migration with no lost access.

  • Migration with no lost access
  • Single, reversible cutover
  • Blockers fixed within the window
View project
ERPBackend

Custom ERP and connected point of sale

Dolibarr 22 with 8 custom modules, a connected POS and e-invoicing

Dolibarr 22 ERP with 8 custom modules: hardware-connected point of sale, offline inventory and a 4× faster product list.

  • Measured, then optimised
  • POS migrated from Dolibarr 12 to 22
  • Deduplicated Borg backups
View project
Backend

Central multi-application business API

One backend for the workshop, rentals, sales, invoicing and bank reconciliation

Central Node.js API: ~250 endpoints, 44 data models, quotes signed online, idempotent invoicing and server-side OIDC SSO.

  • PostgreSQL transactional locks
  • Strict data model and contracts
  • Server-side OIDC SSO
View project
AI

Industrialized agentic development pipeline

Engineer first: AI executes; I design, decide, review and prove.

Versioned specs, skills and multi-agent browser testing: an AI pipeline under engineering control, with over 800 test cases run.

  • The engineer keeps the final say
  • Risk-calibrated agents
  • Failing test first
View project
DevOps

Production infrastructure, CI/CD and observability

2 hardened servers, zero exposed app ports, tag-based rollback and pull backups.

Two hardened, monitored production servers: no exposed application ports, tag-based rollback and three-tier backups.

  • Pull-based backups
  • A silent failure uncovered
  • Disk diagnosis with zero downtime
View project

On assignment

How I work with your teams

Ramp up fast, secure delivery and leave a team more autonomous than when I arrived.

  1. 1

    Immersion

    Understand the existing system, the business and the constraints before proposing anything.

  2. 2

    Architecture and breakdown

    Reasoned decisions and a breakdown into verifiable deliverables.

  3. 3

    Tooled delivery

    CI/CD, automated tests and systematic code review.

  4. 4

    Industrialization and observability

    Reproducible deployments, metrics, logs and alerts.

  5. 5

    Handover and documentation

    Documentation, runbooks and team upskilling.

Terms

A flexible engagement model

Adapts to the assignment and to your organization.

  • Time and materials or fixed price

    Embedded in your teams on time and materials, or fixed price on a defined scope.

  • Remote or hybrid

    Remote, or hybrid around Toulouse depending on the assignment.

  • Availability

    Start date and length agreed based on the assignment schedule.

An assignment to staff?

Context, stack and timeline: I reply with my analysis and my availability.