Available for new opportunities

Bc. PatrikDuch

Senior Solutions Architect|

Transforming complex business challenges into elegant, scalable solutions.
10+ years designing enterprise systems that drive innovation and growth.

10+

Years Experience

20+

Projects Delivered

25+

Happy Clients

5+

Certifications

Who I Am

About Me

Building technology solutions that make a real impact

My Approach

I build solutions that are technically robust and aligned with real business goals and user needs. My experience spans startups to large organizations, including a role as an Integration Architect for Government, where I designed enterprise-grade systems using Apache Kafka, Schema Registry, Spring Boot, and Kubernetes on Azure Arc (AKS) with Helm Charts.

I enjoy exploring new technologies, continuous learning, and mentoring teams. When I’m not designing distributed systems, I contribute to open-source projects or lead technical workshops, such as React training sessions. Recently, I’ve also started exploring Vue and Nuxt. In fact, this website is built with Nuxt.

Performance Focus

Optimizing systems for maximum efficiency

Security First

Building secure and compliant solutions

Key Expertise

Cloud Architecture0%
System Design0%
Security Architecture0%
Performance Optimization0%

Technologies I Work With

KubernetesDockerAWSAzureGCPPostgreSQLPGVectorKafka.NETJavaNode.jsPythonGo LangRustFastAPIEmbeddingsVector StoresLangChainLangGraphLangfuseTypeScriptJavaScriptReactNext.jsNuxtVue.js

Career Journey

Work Experience

A decade of building scalable enterprise solutions

04/2020 – PresentFreelance & contracts

Senior Solutions Architect

Self-employed · Remote / Hybrid

Key Highlights

  • •Production AI architecture on LangGraph, LangChain and pgvector with end-to-end Langfuse tracing, replacing a hosted OpenAI vector store; adaptive chunking lifted relevance accuracy by 35%
  • •Spring Boot backend for the Czech Ministry of Labour ePodatelna sandbox (10.9M+ citizens): Kafka with Avro & Schema Registry, AKS + Azure Arc, FluxCD
  • •Voice assistant MVP for a dental clinic: Whisper, ElevenLabs and a lip-synced 3D avatar modelled in Blender, exported as glTF and rendered in the web app with react-three-fiber and drei on a FastAPI / Next.js stack
  • •OpenAI Assistants integration with streaming, tool use (code interpreter, file search) and function calling; admin app managing the knowledge base through file uploads
  • •GDPR-compliant AI services with PII tokenization before external LLM calls and client advisory on third-party LLM risks
  • •Earlier contracts: realtime courier tracking (gRPC, SignalR), Open Banking (PSD2) interfaces, retail SOA on Spring Boot & Kafka
Python / FastAPIJava / Spring BootGoLangGraphpgvectorKafkaKubernetesAWS / Azure
2024 – 2025Startup

CTO

King Gilgamesh · health-posture startup

Key Highlights

  • •.NET backend on GCP Cloud Run: controller → service → repository layers with hand-written mappers, deliberately avoiding MediatR and AutoMapper ahead of their commercial licensing
  • •Next.js (Pages Router, Redux Toolkit) web app and a PySide desktop client consuming the same API; supporting Go service deployed on the native Go runtime of Roští.cz (no Docker)
  • •ASP.NET Core Identity with Google Sign-In and classic login on JWT access + refresh tokens; role-based endpoint authorization
  • •Stripe subscriptions and billing, account management and transactional e-mail with Razor templates
  • •EF Core code-first migrations, fluent entity configurations and data seeders; disaster recovery strategy and centralized audit log
  • •xUnit unit tests (AAA pattern, mocks), integration and architecture tests enforcing layer boundaries; CI/CD and deployment via GitHub Actions
  • •End-to-end PoC with UML models, cost modeling and CDN strategy; worked directly with the CEO on product strategy
.NETASP.NET Core IdentityEF CorexUnitGoGCP Cloud RunGitHub ActionsNext.jsRedux ToolkitPySideStripe
2022 – 2023Full-time

Solution Architect

Ride-planning startup · Mobility SaaS & Enterprise Communication

Key Highlights

  • •Hands-on .NET backend development for a ride-planning platform (Clean Architecture, CQRS): ride request, passenger and geo-area APIs, Stripe payment fixes, redesigned refresh token flow
  • •Identity and SSO (OAuth2 / SAML), event-driven and serverless data pipelines, unified exception handling and logging, security reviews
  • •Took over infrastructure after the DevOps engineer left: Terraform modules (incl. Auth0), Twilio integration, improved Dockerization, observability
  • •Worked with the CTO on technical debt reduction and go/no-go decisions; code reviews, team mentoring, testing strategy and DB refactoring
.NETClean Architecture / CQRSStripeTerraformAuth0TwilioKafkaPostgres
2016 – 2020Employment

Software Engineer & E-commerce Developer

NetDirect · Programia · Ness · ComProMiS

Key Highlights

  • •Sole .NET developer of Fastcentrik.cz, a multi-tenant e-commerce platform powering 800+ online stores
  • •Hybrid Razor / WebForms rendering layer, ~20–25% faster development and testing
  • •React-Redux modules for a GDPR compliance system; core banking components for Erste Group on Java EE
  • •Replaced WinForms with WPF, ~35% better UI responsiveness
C# / ASP.NETMS SQLEntity FrameworkJava EEReact / Redux

Portfolio

Featured Projects

Solutions delivering business value and innovation

🔐
FeaturedSecurity

Enterprise Identity & Access Management Platform

Designed and led an enterprise IAM platform with unified SSO across multi-tenant SaaS products. Integrated OAuth2/OIDC and SAML authentication flows, implemented AWS Cognito as a federated IDP, and added TOTP-based MFA for enhanced security. Delivered secure partner connectivity through AWS VPC Peering, routed private assets via S3 VPC endpoints, and built an event-driven audit/compliance pipeline using Apache Kafka, SNS, and SQS for reliable asynchronous processing.

.NETIdentityServerOAuth2/OIDCSAML +10
⚙️
FeaturedCloud & Distributed Systems

Scalable Event-Driven SaaS Platform

Architected a cloud-native SaaS platform for the US market using .NET, Node.js, and TypeScript with AWS serverless and event-driven microservices. Improved reliability, reduced latency, and enabled horizontal scaling for millions of monthly transactions.

.NETNode.jsTypeScriptAWS +3
🤖
FeaturedArtificial Intelligence

AI/LLM Consulting for US & Czechia Clients

Provided end-to-end AI consulting for US and Czechia companies, designing production-grade LLM workflows, retrieval-augmented generation (RAG) systems, and vector-search architectures. Delivered LangChain/LangGraph pipelines, custom embeddings, PGVector integration, FastAPI services, and real-time inference optimizations tailored to client use-cases.

PythonFastAPILangChainLangGraph +5
🔄
FeaturedData Engineering

Event-Driven Messaging Infrastructure

Designed and delivered a high-throughput Kafka-based integration platform enabling reliable event delivery across distributed microservices. Implemented stream processing, schema governance, and multi-service data pipelines powering real-time communication across enterprise systems.

Apache KafkaSchema RegistryJavaSpring Boot +2
🚚
FeaturedLogistics

Real-time Courier Tracking System

Developed a low-latency real-time courier tracking platform processing thousands of location updates per minute. Implemented bidirectional communication with SignalR and gRPC, optimized routing logic, and delivered a reliable tracking experience used in production by a major e-commerce provider for several years.

SignalRgRPCRabbitMQReact +2
🏆
FeaturedAcademic

Bachelor's Project – Isomorphic SPA Template

Web information system with dynamic rendering, isomorphic architecture and content management system.

ReactReduxNode.jsExpress +4

Verified Expertise

Professional Certifications

Industry-recognized credentials validating expertise in enterprise architecture

7

Total Certifications

2024-25

Recent Achievements

100%

Current & Valid

3+

Issuing Organizations

Verified

ArchiMate® 3 Foundation

The Open Group

Standard for enterprise architecture modeling for describing, analyzing and visualizing architecture within business domains.

Verified

ArchiMate® 3 Foundation

TaylorCox

Advanced enterprise architecture certification focused on practical use of the ArchiMate modeling language.

Verified

SystemsExpert

AlgoExpert

Comprehensive system design certification covering scalability, reliability and performance optimization.

Verified

FrontendExpert

AlgoExpert

Advanced frontend development certification covering modern frameworks, performance and best practices.

Verified

InfraExpert

AlgoExpert

Infrastructure and DevOps certification covering cloud platforms, containerization and deployment strategies.

Verified

Oracle Academy - Programming with PL/SQL

Oracle Corporation

Covers advanced PL/SQL development, including stored procedures, functions, triggers, exception handling, cursor management, packages, and implementing complex business logic inside Oracle databases.

Verified

Oracle Academy - Database Design and Programming with SQL

Oracle Corporation

Comprehensive 180-hour training covering conceptual and physical database design, ER modeling, normalization (1NF–3NF), relational mapping, advanced SQL querying (joins, subqueries, grouping, set operations), DDL/DML/TCL, constraints, views, sequences, and building a full end-to-end Oracle SQL database project (1Z0-071 preparation).