Jusmundi — 4 Years in Review

Key KPIs & Achievements (2022–2025) · Highlighting my work as DevSecOps and colleagues' work & impactful contributions

Key performance indicators

Delivery, reliability, and impact (2022–2025)

325+ Tasks completed

99.9%+ Platform uptime (SLA)

0 Security breaches

~30 min MTTR (P1)

60% Alert noise reduction

€50K+ Est. annual savings

Top #1 achievement

Security-first — anti-scraping, Keycloak identity and authorization, no friction for legitimate customers

Primary focus on security: protecting the business from abusive scraping and delivering robust identity and authorization with Keycloak—without slowing down or blocking legitimate customers, partners, or approved crawlers.

Scraping and abuse — Cloudflare WAF, rate limits, and bot controls tuned so real users and whitelisted SEO tools keep working while automated scraping drops sharply.
Keycloak — SSO, API gateway authentication for microservices, HA across regions, and policies (2FA, brute-force protection) aligned with the product experience.
Legitimate access — changes rolled out with monitoring so security hardening does not degrade trust or conversion for paying users.

Top #2 achievement

Migrating infrastructure to a state-of-the-art Kubernetes in the US with network refunding

US hosting and platform refresh: DNS, Kubernetes, and network modernisation—moving from Nomad to Kubernetes with cost optimisation and a clearer path for regional scale.

Kubernetes migration — assessment, cluster design, and rollout aligned with product availability and release cadence.
US footprint — hosting and connectivity choices that support latency, compliance, and operational ownership across teams.
Network — Magic WAN, VPC peering, VPN, and Cloudflare WARP so offices and cloud environments stay reachable and observable.

Top #3 achievement

Supporting business and tech through the transition to an AI company — hosting tuned legal models with deep reasoning and compliance checking, certified under ISO 42001

Platform work alongside product and GTM: reliable model hosting, guardrails that fit legal workflows, and governance that matches how regulated teams expect AI to behave in production.

AI platform foundations — Elasticsearch, GPU capacity, assistants, and document-classification services integrated with the rest of the stack and observability.
Legal-grade behaviour — tuned models and flows that emphasise deep reasoning and auditable checks rather than one-off demos.
ISO 42001 — first IA tech role implementing and maintaining ISO 27001, SOC II–aligned controls for AI systems, alongside existing security and privacy practice.

Achievements by area

Security, reliability, and platform delivery (2022–2025) - My main focus : ensuring the platform is secure, reliable and delivering the product

SEO improvements

WAF and crawler policy tuned for search visibility

Anti-scraping and WAF implementation tuned to preserve SEO: legitimate crawlers whitelisted (AhRefs, SemRush, Oncrawl, Google Analytics, etc.).
WAF behaviour and SEO impact monitored throughout rollout; bot traffic reduced by ~75% without impacting real users or search visibility.
SEO drop issues investigated and addressed; since AI bots shift, SEO has been stable and improved over the years.

SLA & reliability improvements

Uptime, alerting, and incident response

Alerts based on SLAs for critical services; SLO-based alerting for availability monitoring.
Platform availability maintained at 99.9%+ for critical legal research; target 99.9% uptime for core services.
MTTR reduced from hours to minutes (P1 ~30 min average) through observability and runbooks.
Alert noise reduced by ~60% via intelligent filtering.

Security & compliance

Vulnerability management, IdP SSO, and certifications

CVE & vulnerability reduction Keycloak IdP SSO ISO 27001 ISO 42001 SOC2 Type II TLS 1.3

Vulnerability & CVE reduction

Vulnerability remediation target: <7 days for critical CVEs; container scan pass rate >95%.
Vulnerability management: weekly vulnerability scanning and remediation of critical vulnerabilities. Using OpenVAS, Trivy and Semgrep.
Semgrep SAST, GitLeaks secret scanning, Mega-Linter and GitLab Ultima Sec for code security.
Implement Cloudflare WAF and DDoS protection for the website, rate limiting and bot detection.
Use Vault for secrets management, secret rotation, certificate automation and in transit encryption for user documents

IdP SSO with Keycloak

Keycloak authentication modernisation: migrated from legacy auth and upgraded through 4 major versions.
SSO integration with Microsoft Entra ID and other internal services; 2FA and brute-force protection enabled.
Keycloak in HA mode; token expiration and high-latency incidents resolved in production, and across multiple regions.
Use of Keycloak in API Gateway mode for authentication and authorization of microservices.

ISO, SOC & compliance

ISO 27001 preparation and support; Server hardening and firewall reviews.
Platform aligned with SOC II certifications achieved by Jusmundi.
First IA Tech implementing and maintaining ISO 42001 compliant security frameworks for IA.
Annual firewall reviews, access control, and EDR/XDR agents on new servers.

Platform & infrastructure

Cloud, data, CI/CD, and AI platform foundations

Infrastructure migration assessment, US hosting (DNS, Kubernetes, network), cost optimisation and Kubernetes migration from Nomad to Kubernetes.
Observability: Victoria Metrics, Loki, Grafana dashboards, DataDog APM and tracing across services.
Network: Migration to Magic WAN, VPC peering and VPN and Cloudflare WARP.
Database: PostgreSQL tuning, autovacuum and cache hit improvements; 20+ critical disk-space incidents resolved.
Jus AI support: Elasticsearch clusters, GPU nodes, assistant and document-classification services.
CI/CD: pipelines optimised, automated with templating, container scanning, code linting; Infrastructure as Code (Terraform and Ansible) with ~90% reduction in manual configuration errors.

Overall estimate of people to Support, my Boss an entry level and I

~100–115 people total across ~15+ teams/sub-teams
The largest departments are Revenue/Sales, Tech (30%), and Marketing/Product