Stay up to date with practical insights on backend engineering, system design, and building reliable software.
Some client briefs are invitations to a good engagement. Others are invitations to a difficult one. The difference is usually visible in the brief itself, if you know what to look for.
Read moreYou offered $180K base and your candidate called it "a good starting point." Welcome to San Francisco backend hiring, where six figures is the floor and the ceiling keeps moving.
Read moreMicroservices distribute your codebase, not your technical debt. Bad domain modeling, tangled logic, and poor separation of concerns survive service splits intact — now with network latency attached.
Read moreMulti-tenancy requires tenant isolation at every layer: the tenant must be resolved from the request, propagated through the call stack, and enforced in database queries and cache keys. Missing any layer is a data leakage vulnerability.
Read moreURL-level authorization is coarse-grained — it protects paths, not resources. Method-level authorization with @PreAuthorize enables fine-grained access control that considers the current user, the method arguments, and the resource being accessed.
Read more