I'm Oscar, a founder and engineer based in Dubai. I start companies and build their products myself, from the first sketch to the production deploy.
In 2024 I co-founded Authect, a software, web and AI studio, and I run its engineering as CTO. Since 2025 I have also been CTO at SHPD, a shipping platform between Spain and Latin America. In 2026 I founded Kavaliero, a studio for websites, SaaS platforms and AI automation, where I am CEO.
My work sits where design and engineering meet: WebGL and motion on the surface, data models, integrations and security underneath. I have also led cybersecurity and AI development at a Madrid law firm, and that habit of asking what can break stays in everything I ship. My approach is straightforward: build, secure, automate, grow.

Capabilities
Websites with WebGL and motion, SaaS platforms, AI automation and agents, Mobile apps, Custom software, CMS and data integrations, Security engineering.
Experience
May 2026 to presentRemote
Kavaliero
Founder and CEO
Independent studio for websites, SaaS platforms and AI automation, working with companies in Venezuela, Latin America and beyond.
- Lead design and engineering on every build: the studio site, Kavaliero Systems, Leadesse and Nelly Morales.
- Built kavaliero.com in Spanish and English on Next.js 16, with eight code-split WebGL scenes held to one performance budget.
Apr 2024 to presentDubai, remote
Authect
Co-founder and CTO
Software, web and AI studio registered in Dubai, working with founders in the UAE, Europe, the US and Latin America.
- Lead the design and delivery of the studio's AI automation, cybersecurity and web work.
- Architected authect.com in five languages, with an admin behind 2FA that is enforced in the proxy, the server guards and Postgres row-level security.
- Built a content engine on Claude that researches, writes and schedules articles under deterministic QA and hard spend caps.
- Led engineering on client builds including Luka Capital. Now growing the studio's presence in Dubai.
Mar 2025 to presentRemote
SHPD
Chief Technology Officer
Shipping platform with real-time tracking, moving parcels from Spain to Venezuela and Cuba through trusted carriers or travellers already making the journey.
- Designed and coded the mobile app for iOS and Android myself, from the first screen to the store release.
- Built the admin platform the operations team uses to run shipments, orders, payments and pricing.
- Own pricing, Stripe payments with Apple Pay and Google Pay, sign-in and notifications.
Oct 2024 to Jul 2025Madrid, on site
LABE Abogados
Chief Cyber Security Supervisor, Chief AI and Software Developer
Law firm. Joined as an intern in software engineering and AI, then led the firm's cybersecurity and its internal AI and software development.
Skills
- Languages
- TypeScript, JavaScript, Python, Go, Rust, Java, C#, C++, Ruby, R, SQL, Bash, GLSL
- AI software development
- Claude API, OpenAI API, Gemini API, AI agents, Agent workflows, Model Context Protocol, Claude Code, Retrieval-augmented generation, Voice agents, Vertex AI Search, Prompt engineering
- Web development
- React, Next.js, Tailwind CSS, CSS Modules, Vite, Zod, Zustand, React Hook Form, Radix UI, next-intl, Accessibility (WCAG 2.2)
- 3D, graphics and motion
- WebGL, WebGPU, three.js, React Three Fiber, OGL, GLSL shaders, GSAP, Lenis, Motion, Particle systems, Post-processing
- Back-end development
- Node.js, Express, FastAPI, REST APIs, Webhooks, Auth.js, Stripe, Whop, Resend
- Data
- PostgreSQL, Supabase, MongoDB, Redis, Prisma, Drizzle, pgvector, Database design, Row-level security, Sanity
- App development
- React Native, Expo, App Store Connect, TestFlight, Google Play Console, Push notifications, Apple Pay and Google Pay
- Cloud and systems
- Google Cloud Platform, AWS, Microsoft Azure, Vercel, Railway, Cloudflare, Docker, Linux, Networking (TCP/IP, DNS, VPN), Git and GitHub, Hardware troubleshooting
- Cybersecurity
- Penetration testing, Threat and vulnerability management, DDoS mitigation, Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, ISO/IEC 27001, GDPR
- Application security
- 2FA and RBAC, OAuth 2.0 and OpenID Connect, Passkeys and WebAuthn, CSP and header hardening, SSRF-safe fetching, Email authentication (SPF, DKIM, DMARC)
- SEO
- Search engine optimization, AI search optimization (GEO), Schema.org structured data, International SEO, Core Web Vitals, Google Search Console
- Automation
- Workflow automation, n8n, Web scraping, Puppeteer, Playwright, Google Places API, Twilio, WhatsApp Business Platform
- Spoken
- French, Spanish, English
More work
BlueBox
International marketplace, 2026
The international marketplace of the SHPD brand, developed at SHPD. Most of its back end is based on the admin suite Authect built earlier for the SHPD app.
Have a product to build, a system to automate or a site that should move? Write to me.