Senior Software Engineer II · Drata

Francisco Bernabe

Senior Full-Stack Software Engineer — TypeScript · Node.js · React · NestJS

7+ years designing, building, and scaling B2B SaaS. For 4+ years across the Drata / SafeBase stack (enterprise compliance & an AI-powered Trust Center) I architect new subsystems, lead legacy rewrites, and ship end-to-end. I work AI-first with Claude Code and Augment.

System design Multi-tenant SaaS NestJS Next.js GraphQL Temporal AWS AI-first
7+ yrsFull-stack experience
600+Merged PRs, 3 products
20+Product areas shipped
AI-firstClaude Code · Augment

Selected Work

Company-wide notifications platform

Drata · 0→1 architecture

Architected the notifications subsystem from scratch (schema, REST API, OAuth2/Slack) with a Strategy + Adapter design so new types and channels plug in without touching the core. Still extended by multiple engineers years later — MS Teams, personnel notifications, and a Knock-based publisher.

Vulnerability monitoring rewrite onto Wiz

Drata · largest area, 90+ PRs

Co-led retiring a legacy monitoring architecture and rebuilding it on Wiz, introducing cursor-based pagination, scanner abstractions, CSPM support, and notification flows — cutting maintenance overhead and unblocking new integrations.

Multi-artifact evidence sync (V2)

Drata / SafeBase · cross-product

Designed a multi-phase, forward-compatible evidence sync across two products and services, with feature-flag rollout and self-healing that kept V1 consumers working with zero downtime throughout the migration.

camdenliving.com — backend & property search

Onephase (contract for Poetic)

Designed and built the backend end-to-end — a GraphQL API over PostgreSQL that reconciled a nightly data feed against Contentful, working around its limited support for relational data. Built the property search, the hardest part of the system.

How I work

I develop AI-first — Claude Code and Augment are part of my daily workflow for generation, refactoring, and review — while keeping architectural authority and rigorous code review over everything that ships. It's how I sustain both velocity and quality in a regulated, multi-tenant codebase.

Stack

Languages
TypeScriptJavaScriptSQLPHPJava
Frontend
ReactNext.jsReact NativeGraphQL clientsMaterial UI
Backend
Node.jsNestJSExpressGraphQL (Apollo, Nexus)REST
Data
PostgreSQLMySQLMongoDBTypeORMPrismaMigrations & backfills
Cloud / Infra
AWS (Lambda, SES, S3)GCP Pub/SubDockerTemporalRedisOpenSearchCI/CD
Architecture
System designMulti-tenantDistributed / event-drivenScalability
AI-assisted
Claude CodeAugment / AuggieCursor