Simon Berggren

Geshdo SaaS product: a feedback and pulse tool for consulting firms that brings consultant sentiment, company belonging, and customer ratings into a single view without ever exposing an individual.

I own it end to end: architecture, security model, and infrastructure, not just the React frontend and Node.js API. I designed the multi-tenant security model: Entra ID (OIDC) login with server-side sessions, and PostgreSQL row-level security for hard tenant isolation.

I also own the platform it ships on: Terraform across GCP and Azure, with Cloud Run, Cloud SQL, one service account per workload, private Artifact Registry, and Secret Manager. GitHub Actions deploys keylessly through Workload Identity Federation, so no long-lived cloud credentials exist anywhere. Secrets access is least privilege: the pipeline can write a secret's value but never read it back. Deploys run through GitHub environments, with third-party actions pinned to commit SHAs.

Parental leave. I stayed partly active in development throughout, mainly on the Friends of Executive app.

Members-only community app for Friends of Executive, a network for executives: membership applications, events and courses with sign-up, event communities, real-time one-to-one and group chat, partner offers, and an admin console for running it all. Delivered from a single React and TypeScript codebase to web, iOS, and Android using Capacitor, with a Fastify and PostgreSQL backend.

I owned integration and reliability across all three platforms: LinkedIn sign-in, a resilient push-notification lifecycle on Firebase Cloud Messaging, and cross-platform observability through Sentry. I also set the data-handling standards: PII redaction and runtime validation with Zod.

I built the platform from scratch on the keyless Terraform baseline described under Kompass, adding private VPC networking for Cloud SQL and Identity Platform. Releases are tag-driven, promoting from dev to a separate production environment for backend, web, iOS, and Android, with the Playwright end-to-end suite gating the pipeline.

Replaced Microsoft Identity Manager (MIM) with a purpose-built identity provisioning service: a C# service that syncs employees from the CatalystOne HR system into Active Directory and Entra ID, and on to the Findity expense platform.

I built the joiner, mover, and leaver lifecycle: account creation, organizational unit placement driven by mapping tables for location, employment type, and admin status, email and display name generation, and disabling of inactive and terminated users. I used Microsoft Graph for the Entra side, with Polly-based resilience around every external API.

Credentials load from Azure Key Vault at runtime, and the service deploys to Azure Container Apps from GitHub Actions over keyless OIDC.

Technical advisor to the CTO and Lead Architect, focused on architecture improvements and mentorship.

I worked across the marketplace’s payment and finance flows: fixing checkout issues, maintaining the integration with Qliro, and supporting finance reporting and accounting. The platform was event-driven throughout, built on Azure Event Hubs and Service Bus, with custom Azure Functions exposing the endpoints Qliro calls back to.

When CDON Group acquired Fyndiq and decided to merge the platforms, I moved to the migration. I made sure payments kept working through the transition, built key features for it, and kept the legacy platform stable: I fixed long-standing bugs and quirks the system had come to depend on, and decommissioned a large share of Azure resources as workloads moved to GCP, cutting cloud costs.

Ahead of the merge I defined the branching and merge strategy the combined teams worked by, and maintained and extended the Azure DevOps build and release pipelines. Later I introduced AI tooling and automated workflows to speed up legacy code analysis, integrations, and delivery.

Technical owner of Geshdo's internal products, alongside client assignments.

Microniq: React and TypeScript frontend with MUI, Auth0 authentication, and Google Maps integration, plus a C# optimization service.
JobNow: monorepo with a Next.js web app, a Node.js scraper, and a shared Zod schema library.
SalesNow and BoardNow: frontend work on our internal CRM and board tooling.
geshdo.com: the company site itself, including the MCP server that exposes CV and company content to LLM clients.
Secret: Geshdo's one-time secret sharing service (Next.js on Azure Container Apps, AES-256-GCM), on modular Terraform for dev and prod: a managed identity with scoped RBAC, Key Vault with purge protection and network ACLs, and a private container registry.
Shared workflows: a reusable GitHub Actions library for the organization, including per-pull-request preview environments on Cloud Run that register and clean up their own Entra redirect URIs.
AI Policy & Toolkit: Geshdo's internal AI policy and toolkit site, which I wrote. It governs safe and compliant AI adoption across our consultants and includes a searchable AI tool registry and model directory.

Everything shipped through shared GitHub Actions conventions, with Dependabot on every repository. On AWS I bootstrapped the same keyless model with Terraform, binding the OIDC trust to GitHub's immutable repository IDs rather than repository names. Since 2022 I've also managed Geshdo's internal AWS environment.

Mobile app for people with hearing loss, used in 5 regions.

I architected and built the app, and managed customer relations, stakeholders, integrations, and the development team, while staying hands-on in daily coding so the team could stay focused on their work.

I integrated the React Native frontend with Azure Functions APIs and third-party services, and wrote the native module layer in Java and Kotlin on Android and Objective-C and Swift on iOS. Automated pipelines in Azure DevOps and Visual Studio App Center delivered the app to testers and stores.

Four-week investigation into StepStone's processes, APIs, and monitoring on AWS. I worked alongside senior developers to map pain points and bottlenecks, and delivered a report of recommended architecture and process improvements that was presented to leadership as the basis for technical roadmaps.

Internal customer service tool. I started as a fullstack developer and moved into the Scrum Master role, leading sprint estimation and planning with key stakeholders and running end-of-sprint demos. I also maintained the team's CI/CD setup in TeamCity.

Geshdo's internal time reporting system. I'm a recurring contributor to its React and TypeScript rewrite, and contributed to the Vue 3 predecessor before that.

I owned core reporting functionality end to end: enforced workplace selection, overtime calculation, and the hours and workplace-distribution reporting used across the organization, including the filtering and analytics built on top. I also built the accounting-critical features admins and accountants rely on for sales, reporting, and invoicing, giving finance a clear view straight from the system.

I led a type-safety push across the frontend, making URL state handling fully type-safe with Zod, and integrated authentication against the backend via Microsoft Entra ID (MSAL).

The backend runs on AWS (DynamoDB, Aurora, Lambda), shipped through reusable GitHub Actions workflows into separate dev and prod environments.

Geshdo is my employer. The client contracts in this timeline (Friends of Executive, Norion Bank, CDON, GN Hearing, StepStone, and Securitas) were all carried out from here, in parallel with the internal product work listed above.

On the Tech Excellence team I develop our consultants' knowledge, skills, and career growth. As Technical Lead in Gothenburg I help grow our regional office by building engineering culture and running technical interviews. As a Senior IT Consultant I help clients with cloud architecture and performance, and guide their teams to work more efficiently.

I define the golden paths our engineers build on: a shared React and TypeScript project template, CI/CD and code review conventions, a reusable workflow library for preview environments, and a repeatable platform baseline for new products, established on Kompass, Friends of Executive, and Secret. I also set our AI governance through the AI Policy & Toolkit. None of this comes with line authority; it spreads because teams choose to adopt it.

I joined as a SharePoint developer, saw the need to modernize, and led the frontend re-architecture to React with microservices. Releases went from 6-hour deployment windows to zero-downtime deploys. I also trained the team in React and managed planning and prioritization.

Web application for modeling and simulation of dynamic systems. I turned my graduation project into the prototype that became a core commercial product, migrated the frontend to React and TypeScript, and supported backend services in Node.js, Python, C#, and Java.

I tutored students in programming, data structures, and object-oriented design, and helped plan the workshops.