Filippo Carboni

Experience

1. Software Engineer & Team Lead @ Adamantic

   Sep 2025 - present
   Roma
   • Tech lead and core engineer on Wanda: a Go zero-trust access platform where agents on managed Linux/Windows hosts open E2E-encrypted SSH/RDP/TCP tunnels via a Wails desktop client, with authorization decided on-chain instead of by a single admin.
   • Built the fail-closed multi-factor gate: privileged logins require P-256 device-push approval with biometrics, as a Linux PAM module (C) and a Windows Credential Provider (C++) sharing one protocol with the local agent.
   • Multiplexed logical tunnels over a persistent gRPC bidirectional stream and a custom envelope protocol, secured via mTLS and ephemeral client certificates, with auto-reconnect and graceful shutdown.
   • Engineered the agent daemon as a single multi-OS Go binary: on-chain-driven user provisioning, secure file sync (whitelist + atomic writes), and audit-log notarization.
   • Co-authored the Solidity smart-contract suite (Hardhat + Hyperledger Besu QBFT): P-256-verified DAO governance auto-executing at quorum, identity binding, on-chain audit log, Merkle-root anchoring.
   • Owned packaging and delivery: signed .deb/.rpm/.msi packages, 16-service Docker Compose dev stack, CI/CD on Jenkins (Kubernetes agents) to GCP, Prometheus/Grafana/Loki observability.
   GogRPCAlmaLinuxUbuntuProtocol BuffersmTLSWailsC/C++P-256SolidityHardhatHyperledger BesuOpenZeppelingo-ethereumRedisSQLiteMinIODockerKubernetesJenkinsGCP

2. Firmware Engineer @ BTEngineering

   Feb 2025 - Jul 2025
   Consultant
   • Owned the following three core areas of a smart-lock firmware (nRF5340 + Zephyr RTOS, NB-IoT / SIM7022), while contributing across the rest of the firmware alongside the team.
   • Integrated the Bosch BHI360 IMU via I2C protocol for motion/orientation sensing.
   • Designed the operating-mode state machine (calibration, idle, installation, FOTA, alarm, hibernation) and the transitions between them.
   • Built a robust FOTA system with anti-loop protection, smart retries and dynamic URLs over MQTT, plus LTE modem management with an MQTT heartbeat.
   C/C++Zephyr RTOSnRF Connect SDKnRF5340NB-IoTSIM7022MQTTNordicI2CBosch BHI360

3. Software Engineer @ Acontel

   Apr 2023 - Sep 2025
   • Owned the full product pipeline: firmware, gateway, hardware and software tooling, backend, apps and cloud.
   • Coordinated the development team, with regular on-site visits to the client in Campodarsego (PD) to work alongside their engineers.
   • Designed and ran cloud infrastructure on DigitalOcean Kubernetes k8s cluster with CI/CD pipelines (Docker + GitHub Actions) for automated firmware, app, gateway and CRM builds and deploys.
   • Built telemetry-unit firmware (nRF9160 + nRF52840 / Zephyr RTOS) for Antonio Carraro tractors: CAN-bus read/write, BLE link, Teseo GNSS positioning and TCP/IP gateway uplink for Industry 4.0 features.
   • Developed an HMI display (STM32F7508 + TouchGFX) end to end, from Figma UI design to firmware and graphics.
   • Built Acontel Toolbox Flutter (firmware updates over BLE) end to end; designed the MyAC app in Figma.
   • Designed and built the first MVP of the management CRM, plus dashboards and diagnostic tools in Vue.js + Tailwind (dynamic router, multi-level access, Chrome Web BLE), with REST APIs in Node.js + Express + TypeScript (Prisma, MongoDB/Firebase) deployed on DigitalOcean and later migrated to Kubernetes.
   C/C++Zephyr RTOSCANBUSBLETeseo GNSSTCP/IPnRF9160nRF52840FlutterVue.jsTailwindNode.jsExpressTypeScriptPrismaMongoDBFirebaseDockerKubernetesGitHub ActionsDigitalOcean

4. Team Lead & Fullstack Developer @ On Electric Charge Mobility

   Mar 2020 - Sep 2025
   • Technical lead and reference engineer for an EV charging and sharing startup, often acting as the technical liaison between the team and suppliers and clients, from multinationals to Italian SMEs.
   • Scaled the On Mobility PWA to 10k+ users, refactoring it from jQuery/PHP to Vue/Node.js.
   • Built a white-label B2B CRM and the Life for Silver Coast app for an EU intermodal-sharing project.
   • Led the migration from LAMP to Dockerized microservices on DigitalOcean with CI/CD.
   • Integrated charging stations (Siemens, Etrel, Circontrol), Teltonika telemetry and vehicles (Askoll, Renault), plus Stripe payments with pre-authorizations and subscriptions.
   Vue.jsCordovaNode.jsPHPFigmaDockerDigitalOceanStripeGitHub ActionsLAMP

5. Fullstack Developer @ For Company

   Oct 2019 - Mar 2020
   • Developed CRM modules and management PWAs in PHP, jQuery and vanilla JS, with early Vue integrations via CDN.
   • Built cross-platform PWA apps with Cordova/PhoneGap on LAMP + Plesk infrastructure.
   PHPJavaScriptjQueryVue.jsCordovaPhoneGapLAMPPlesk

6. Firmware Consultant @ Sefero

   Jun 2017 - Sep 2018
   Consultant
   • Developed the HMI and embedded logic for AliBox, a smart box for transporting biological samples.
   • Built a fully custom UI on a TFT touch display with custom text, image and chart rendering, on an ARM processor in C and Arduino (Arduino IDE, Atmel Studio).
   • Integrated RFID-card access control, temperature/light/acceleration sensors and fan/lock actuators.
   CArduinoAtmel StudioARMRFIDembeddedTFT

Skills

Firmware

C/C++ · Zephyr RTOS · nRF Connect SDK · Nordic nRF (52840/9160/5340) · Arduino

Mobile

Flutter (Dart) · SwiftUI · Capacitor · Cordova

Backend

Node.js · Express · Fastify · Go · gRPC · Protocol Buffers · PHP · Python · Prisma

Data

PostgreSQL · MySQL · MongoDB · Firebase · Redis · SQLite · MinIO

DevOps

Docker · k8s · Jenkins · GitHub · GCP Artifact Registry · nginx · DigitalOcean · Cloudflare

Frontend

Vue · Composition API · Pinia · Vite · Nuxt · Tailwind CSS · TypeScript · JavaScript

Design

Figma · Photoshop · After Effects · Premiere Pro

Selected projects

1. Book Spine - Apps · iOSbookspine.app

   2026

   The app for people who own books and want to read them: scan your library, pick what to read this month and follow what others are reading.

2. HouseKeyper - HackRome 2026 · AI / Securitygithub.com/filopixel/mcp-wrapper

   2026

   Human-in-the-loop approval gateway for MCP servers - "sudo for AI agents": gates sensitive tool calls behind on-device P-256-signed push approvals.

3. Hush Blocks - Puzzle · iOShushblocks.app

   2026

   A quiet block puzzle for moments you want to slow down - no timers, no combos, just breathing room.

4. Preppp - AI · iOSpreppp.app

   2025

   Simple AI meal planning - tailored recipes and automatic shopping lists.

5. Surveyvor - ETH Lisbon 2023 · 2,000 USDC (Sponsor bounty) · Webgithub.com/fedemagnani/surveyvor.xyz

   2023

   Privacy-preserving Web3 survey platform with on-chain rewards.

Also: Per Diem, Thinking of You, Driving License Preprocessor, OnSat, Photovoltaic PLC Controller, Olivetti to Arduino, JoinTheBricks, Negartive, Flappy Pope, iFrusta.

Beyond code

Piano, photography, 3d printing and some books on the shelf - the full kit and reading list live on the website.