Technology Enthusiast · Cloud Computing Engineer · Microservices Architect

Greater Sydney Area · About · LinkedIn · Portfolio · Articles

I am a technology leader and hands-on engineer with 20+ years designing, building, and scaling complex systems across cloud, microservices, and modern web and mobile platforms. I work with TypeScript, JavaScript, Python, Java, and Go, and with cloud-native services on AWS, GCP, and Azure. My technical focus includes serverless architectures, real-time systems, CI/CD, container orchestration, observability, and security, aligning technology strategy with business outcomes.

Currently Principal Engineer at Qantas Loyalty on the Universal Retail Platform (URP), where I lead technical strategy, engineering practices, and delivery for large-scale retail eCommerce, microservices, and event-driven integration. I also serve as DevOps Engineering Lead at Mekari, driving infrastructure maturity, CI/CD, observability, security, and cost optimization for multi-tenant SaaS, FinTech, and logistics platforms in Indonesia. Previously I was VP of Technology and Head of Infrastructure at Jojonomic (Mekari Officeless).

Outside day jobs, I build and ship products on suherman.net — platforms, macOS and mobile apps, developer tools, and local AI gateways — with signed releases, registry APIs, and Cloudflare-backed distribution. Full experience and achievements: iman.suherman.net.

Products and platforms already live — from community and health platforms to forms, analytics, macOS apps, and developer tools. Canonical portfolio: suherman.net/projects.

• Formiva Commercial forms and workflow platform — FormSpec as the contract, native Android/iOS operators plus a web console, anonymous public respondents, live results, and CSV/Excel export. Publish at formiva.suherman.net (guides).
• LinuxLens Vendor-neutral Linux estate risk assessment — lifecycle, patch lag, security exposure, and operational constraints with capability-first remediation. Open-source collect/assess CLI and offline mode for regulated estates (GitHub).
• Analytica Governed AI analytics Copilot — natural-language questions, evidence-backed answers via QueryPlan (never arbitrary SQL), and living dashboards. Live prototype at analytica-demo.suherman.net.
• HaloRT Multi-tenant community SaaS for RT, RW, residential clusters, and neighborhood organizations across Indonesia — marketing, platform, admin, and tenant sites.
• AloCare Personalized Health Intelligence — patient/clinician portals, AI clinical engine, hospital queue, and mobile apps for modern care delivery.
• Ticktopus Enterprise helpdesk and ticketing platform — omnichannel tickets, WhatsApp, email, SIP softphone, SLA, and AI agents in Google Chat.
• Lakuyo Local-first POS + inventory for warung, cafés, and shops — Android, iOS, macOS, and Windows; offline on every device; free on one device, Pro for multi-device sync.
• MarketPilot AI-powered marketing intelligence — product research, SEO & AI Search, multi-channel campaigns, attribution, and continuous optimisation.
• Sapa AI growth agent for restaurants — live in about 5 minutes from Google Places. WhatsApp receptionist, reservations, follow-ups, reviews, and pay-after-proof onboarding.
• HugeShop Cross-border e-commerce platform — catalog, cart, Adyen payments, search, content, and ops services powering hugeshop.com / hugeshop.com.au.
• LegalAdvice Australian legal enquiry and content platform — lawyer lead generation, SEO landing pages, NSW CTP, crawler fleet, and admin case management.
• MGP Growth OS AI-powered patient acquisition for Medical Growth Partners — DIV site rebuild, compliance-first content workflow, and local MLX article factory at ai.dentalimplantsandveneers.com.au.
• Raisd Campus Campus management portals on the existing CMS — applicant, student, lecturer, and staff journeys with a Portal API control plane (Cyberjaya-first).
• Brightannica Education brand sites and CRM for Australian college pathways — marketing, CMS, and lead operations.
• CheapCollege Marketing site and headless CMS for cheapcollege.com.au — SEO-friendly courses, enquiry capture, and serverless content publishing.

• Nucleus Personal Workspace for macOS — Gmail, Chat, Calendar, clipboard, and Markdown notes in one command center, with Cloud Sync, AI Overview, and Sparkle updates.
• DiskWise Intelligent disk analyzer and cleanup assistant for macOS — and iOS — with duplicate/stale media detection, reclaimable space, and an AI storage consultant.
• Soraku Lightweight Kubernetes IDE (Rust + React) — multi-cluster explorer, integrated terminal, and built-in AI assistant, starting in under a second.
• MigraSync Officeless desktop tool for migrating and deploying workflow configurations — signed macOS releases with registry and Sparkle updates.
• sshhh connect Modern SSH client for macOS — multi-tab terminal, SFTP, port forwarding, VNC, key vault, Touch ID lock, and optional Cloud sync.
• MongoMas MongoDB AI agent & dashboard (Rust + React) — multi-instance connections, live metrics, slow-query profiling, schema tools, and one-click AI index advisor.
• ArahBaik Daily guidance app rooted in Eastern tradition — shio, elements, direction, and calendar.
• ANANTA Spiritual companion across humanity’s wisdom traditions — provenance-backed practice and labelled AI reflection. Many paths. One journey inward.
• Dokter Alami Personal integrative health AI for Indonesia — understand symptoms and habits, explore labelled natural approaches, triage when to see a doctor, and follow a longitudinal health journey. Companion, not AI doctor.
• Titip Leave clear, recipient-scoped guidance — not passwords — and withhold it until presence checks, trusted people, and an explainable review say it may be released.

• Agent On Rails Docs-first, spec-driven control plane for AI software delivery — define the contract, let agents implement with review, escalation, and evidence before done. CLI + Android monitoring; GitHub as the operating surface.
• Ngelur Farm for AI agents — give chickens work orders, harvest eggs (plans & artifacts) asynchronously. Playable pet prototype at ngelur.suherman.net/play.
• CT MCP Commerce MCP Studio: a VS Code extension to configure, explore, and test Commerce MCP servers with commercetools — signed VSIX via the public registry.
• Officeless MCP Officeless Code Intelligence / MCP stack — VS Code tooling, registry API, and signed downloads on suherman.net.
• AI Engineering Workbench Open-source hub for AI-assisted engineering investigation — multi-repo evidence workflows with a public marketing/demo site.
• FinOps Intelligence Kubernetes and cloud cost visibility for Teknopus / Mekari VAS — agent-fed workload costing, efficiency scoring, and multi-cloud pricing.
• Capacity Intelligence Kubernetes memory capacity intelligence — OOM prediction, growth-rate analysis, and deterministic workload risk scoring.
• Cloud Secret Manager Multi-cloud secret platform with tenant RBAC, GitHub OIDC for CI, developer CLI, and per-project secret storage.
• Tentacles CI/CD control plane + agents — GitOps deploy and OCI builds as a replacement path for Jenkins + Argo CD.
• SurveyDesk Open Spec-Driven forms demo (FormSpec, local API, native operators) — ancestor of Formiva.

• Maya WhatsApp-first AI travel companion for Anamaya / yBizTrip — natural-language trip intake, policy-aware flight & hotel picks, ESPPD + approval, and e-ticket delivery.
• Ollama AI Authenticated local-LLM gateway — chat UI, API keys, OpenAI/Ollama-compatible endpoints via Cloudflare Tunnel.
• CineView Movies & TV library player for Apple TV — TMDB metadata, subtitles, favorites, and continue watching.

Articles on Spec-Driven Development, Agent On Rails, and craft vs AI-generated code — all on suherman.net/articles:

• Crafted vs AI-generated: how to read a Spec-Driven repo (13 Sep 2026)
• Agent On Rails + SurveyDesk specs (12 Sep 2026)
• Spec-Driven Development (11 Sep 2026)
• Agent On Rails escalation watchdog (9 Sep 2026)
• OpenCode + Ollama coding agent (7 Sep 2026)

Languages: TypeScript, JavaScript, Node.js, Python, Bash, Swift, Java, Go, HCL

Cloud: AWS (Lambda, API Gateway, CDK, ECS/EKS, S3, CloudFront, Cognito, SES, Secrets Manager), GCP (Cloud Run, Cloud Functions, GCS, Firestore, Secret Manager, BigQuery, Pub/Sub, Vertex AI), Cloudflare (DNS, Workers, Tunnels), Hetzner Cloud, Azure

Infrastructure: Terraform, OpenTofu, AWS CDK, Ansible, Kubernetes (K3s), Helm, Kustomize, Argo CD, Docker, Podman, cert-manager, ingress-nginx, Traefik

Data: PostgreSQL, MariaDB, MySQL, DynamoDB, Redis, Firestore, Elasticsearch, Meilisearch, BigQuery, ClickHouse

Delivery: GitHub Actions, Bitbucket Pipelines, Jenkins, GitOps, Turborepo, Wrangler, macOS launchd services

Observability: Prometheus, Grafana, Loki, SigNoz, OpenTelemetry, Alertmanager, Splunk, Uptime Kuma

Security & edge: oauth2-proxy, JWT, Cognito, Google OAuth, Sealed Secrets, Tailscale, Cloudflare Workers

Achievements: Pull Shark (×4), Pair Extraordinaire (×4), YOLO, Quickdraw, Arctic Code Vault Contributor

Organizations: LinuxLens, Formiva, HaloRT, alocare-ai, ticktopus, HugeShop, Qantas Loyalty, Qantas Cloud Platform, PT Jojonomic Indonesia, officeless-platform, rml-ecv-mekari, BrightannicaTech, LegalAdviceCTP, Tutorial-System, Pojokan-Guru-Ahli, Khitah-LMS, Ujian-Online, Appitzr-Project, Trauma-Screening, pojokandev

Email: iman.suherman@gmail.com · LinkedIn · About · Portfolio

Sydney, Australia

Languages: English (professional), Indonesian (native), Malay (limited working)