Sony Tumen

I am a solution architect and lead developer with about fifteen years of experience in demanding environments (public sector, banking/insurance, industry, startups). My guiding principle is simple: design systems that are useful, maintainable, and secure—and bring them to production with a consistent focus on quality, clarity, and industrialized delivery.

My work sits at the intersection of architecture and execution. I design application architectures (APIs, microservices, integration, event-driven), modernize legacy information systems, and build urbanization/mapping (HOPEX/Mega) to make complex landscapes understandable, governable, and evolvable. I value documenting decisions (standards, ADR/C4, reviews), securing delivery (CI/CD as code, quality gates), and enabling teams (mentoring, code reviews, workshops, risk management).

In recent years, I worked as an Angular / .NET Lead Developer at the European Economic and Social Committee (joint services with the Committee of the Regions), rebuilding a legacy Windows translation workflow tool into a modern, secure, UX-focused web application. I owned a significant part of the technical framing and implementation, with strong responsibility for CI/CD (Azure Pipelines), quality (e.g., SonarQube), and technical governance (standards, testing strategy, OWASP recommendations, accessibility). I also explored an LLM-based translation service (Python/.NET), with a pragmatic approach centered on business value, security, and robustness.

Previously, at BPCE SA as a Solution Architect, I contributed to target architectures and architecture dossiers, the merger/modernization of a rating system used across group entities, and enterprise mapping (applications, APIs, data flows, databases) using HOPEX/Mega—also covering security topics (acting as a reference point for authentication patterns and recommendations). I additionally facilitated a tech watch group on quantum computing applied to finance (Azure/Q#) and contributed to work related to the environmental footprint of information systems.

My foundation was built on high-throughput, regulated systems (up to ~1 TB/day processed in under 10 hours), the rollout of DevSecOps practices, and applied security topics (SAML2 SSO, OWASP Top 10, cryptography, HSM simulator, key management, AES/RSA, RSA-KEM, XML signature). This breadth taught me to stay structured: clarify the need, reduce risk, deliver incrementally, measure, then improve.

Since mid-February 2026, I have been deepening an "architecture + AI" track: AI-assisted development workflows (Copilot, LLMs), agent orchestration, and product-building (a document SaaS, a cross-platform assistant with Blazor/.NET MAUI).

I have a motorcycle license. As soon as I can, I go for a ride with my friends. Finally, to relax, I love swimming.