Raka Alifiar Gunarto
Email: [email protected] | LinkedIn: linkedin.com/in/raka-gunarto | GitHub: github.com/raka-gunarto
Work Experience
Motion Applied | Woking, UK
Software Engineer (C# (.NET), Distributed Systems, Kafka, gRPC, Motorsports) | April 2026 – Present
- Open Streaming Architecture: Embedded in the Data Platforms team building the telemetry ingestion, distribution, and recording pipeline (Kafka, gRPC, protobuf) behind ATLAS and other motorsport products.
- Distributed Broadcast Service: Designed and built from scratch, replicating telemetry to multiple consumers with durable write-ahead logging, per-target offset tracking, automatic resume on recovery, and a Kafka export pipeline.
- Virtual ECU Modelling: Delivered the first version of a live virtual ECU modelling service, decoupling the execution engine from transport to support multiple protocols.
- Data Loss Fixes: Diagnosed and fixed critical data loss bugs in the streaming and recording pipeline (a partition offset defect, concurrent session handling), restoring correct recording in production.
- Performance: Led an initiative across five services, cutting memory and CPU usage via channel-backed bounded buffers, injectable buffer factories, and hot-path allocation elimination.
EnQuest PLC | Aberdeen, UK
Application Engineer (Copilot, Gen AI, Azure) | January 2025 – April 2026
- Sole Software Engineer: Worked in an operations-focused organisation with minimal technical infrastructure, owning internal engineering initiatives end to end.
- Deep Learning Research: Researched deep learning for oil well time-series modelling to support operational decisions and production optimisation.
- Knowledge Management: Integrated Microsoft Copilot with the wells team's on-prem file shares, enabling chat over gigabytes of reports dating back to 1980.
- Legal RAG: Built a custom RAG chat solution (Azure AI Search, Azure OpenAI) over the legal team's database, improving information discovery times by at least 4x.
Microsoft UK - Metaswitch Acquisition (Azure for Operators) | Edinburgh, UK
Software Engineer (Azure, Cloud, C#, Java, Linux) | November 2023 – September 2024
- Client Delivery: Tested complex upgrade paths for a key product and led a live on-site upgrade for a major client.
- Bug Resolution: Picked up a new project quickly, resolving critical bugs under tight deadlines to meet release commitments.
- OS Migration: Designed and implemented an in-place CentOS 7 to RHEL 8 upgrade for bespoke product VMs, preserving deployment state and ensuring continued security updates.
- Security: Blocked a product release containing critically vulnerable dependencies, then strengthened automated detection.
- Automation: Automated manual processes such as credential rotations, saving hours and reducing human error.
Microsoft UK - Metaswitch Acquisition (Azure for Operators) | Edinburgh, UK
Software Engineer Intern (CI, AzureDevOps, Jira, Python) | June 2022 – August 2022
- Migration: Coordinated a multi-team Jira to AzDO migration, preserving work history without blocking dev teams.
- Audit Automation: Improved automated package auditing and reporting in the Git pipeline, flagging and tracking vulnerable dependencies immediately to better meet our SLA.
Phlashweb (PhillAsh Ltd) | Remote, UK
Technical Architect / Software Engineer (Part-Time) | June 2020 – June 2022
- Team Leadership: Led a dev team on a client project for 'Orbit', building a web app for applications to the 'Orbit Better Days Fund'.
- DevOps: Automated CI/CD deployment to staging and production.
- Agile: Implemented Agile practices with Gitflow and Jira to keep the team working efficiently.
Capital DK | Kuala Lumpur, Malaysia
Software Engineer Intern (Ethereum, Smart Contracts, web3.js, C#) | July 2018 – August 2018
- DKCoin: Built a peer-to-peer Proof of Work cryptocurrency in C# in under three weeks as primary developer, working with one other intern.
- Implementation: RSA-signed transactions, SHA-256 mining with dynamic difficulty adjustment, full chain validation, and a custom TCP protocol for peer discovery, broadcast, and longest-chain sync.
- Smart Contracts: Explored and unit tested Ethereum smart contracts with the 'Truffle Suite'.
Skills
- Languages: C# (.NET), C, C++, Python, TypeScript/JavaScript, Java
- Systems & Infrastructure: Kafka, gRPC, protobuf, Linux, Docker, Kubernetes, Azure, AWS, CI/CD
- Security & Low-Level: OS internals (xv6, Linux), container hardening (seccomp, AppArmor, namespaces), Secure Boot, reverse engineering
- AI, Data & Web: Azure OpenAI, Azure AI Search, RAG, PostgreSQL, SQL, MongoDB, Redis, React, Node.js
Education
University of Leeds | Leeds, UK
MEng, BSc Computer Science | September 2019 – June 2023
- Honours: First Class Honours
- Experience: Teaching Assistant (4th Year)
- Awards: BIT94 Awardee
Notable Modules and Coursework
- Web Application Development: Wrote an Instagram clone with Python and Flask.
- Computer Graphics: Implemented a mini game engine in C++.
- BSc Project: Implemented VGA graphics for the xv6 OS.
Awards and Achievements
- BT Hackathon 2019: 1st Place
- RHB Hackathon 2021: 4th Place & "Best In Category" Special Award (out of hundreds of professional participants)
- XHacks 2021: 2nd Place
- Malaysian Computing Olympiad 2018: Silver Medal
Projects
ParanoidClaw - Hardened AI Agent Deployment
Linux, Security, Docker, Python | ParanoidClaw · agent-panopticon · Write-up
- Threat Model: Hardened a self-hosted OpenClaw deployment on the assumption that it will be prompt injected, limiting the blast radius when it is.
- agent-panopticon: An iptables-enforced mitmproxy sidecar with domain allowlisting, DNS filtering, and in-flight secret substitution so the agent never sees real API keys.
- Sandboxing: Unprivileged container with all capabilities dropped, custom seccomp and AppArmor profiles, a read-only root filesystem, and cgroup limits, plus a bwrap sandbox for each tool execution.
Building HVAC Reverse Engineering
Reverse Engineering, Python, BACnet, Home Assistant | Write-up
- Protocol Recovery: Decompiled my building's HVAC control app to recover its Azure Service Bus addressing, HMAC token flow, and AES-CBC/PBKDF2 encryption around BACnet read/write requests.
- Integration: Built a Home Assistant integration for per-room temperature readout and setpoint control, replacing the vendor's tablet app.
SIREKAP - Election System Analysis
Reverse Engineering, Android, Security | Write-up
- Analysis: Reverse engineered the Android app behind Indonesia's 2024 election quick count and published a design and security analysis.
- Findings: Identified an unreliable OMR-to-OCR fallback, unenforced fiducial markers, missing cross-field validation, and public-facing auth APIs without 2FA.
PPIUK - Member Portal & Central Database System
MERN Stack, DevOps, Open Source | Backend · Frontend
- Leadership: As Vice Head of the Data and Digital Technologies Department (2020 – 2022), started and led the project for PPIUK (Indonesian Students Organisation UK) with a small team.
- DevOps: Automated CI/CD deployment to staging and production and handled server administration.
RHB Hackathon 2021 - Decentralised Credit Bureau
ReactJS, web3.js, Ethereum / Solidity, Smart Contracts | GitHub
- Overview: Built with one other developer: a private blockchain where financial institutions run the validating nodes and share and validate credit histories through EVM smart contracts.
PVTx Calculator
Python, Django | Link
- Overview: Calculates brine density of aqueous binary solutions based on Mao & Duan (2008), used in critical calculations by an oil & gas company.