Granada · Valencia · München · London · Since 2008

Identity & Access.Legacy, modernized.

SSO, SAML, OIDC, Okta, Entra ID. Java platforms brought up to date. The tool is new. The judgement is thirty years old.

Seen this before.1:04
60 seconds · no voice-over

Seen this before.
One bug. Four AI guesses. One old pattern.

A mobile login that fails sometimes. The AI proposes four fixes. Thirty years of pitfalls spot the real one. Sixty seconds, sound optional.

Watch the 60 seconds
01 — Identity & Access · Legacy Modernization

Old platforms. New identity.
Step by step. No rewrite.

Java in production since version 1.2. Login has been the first job on every platform since 2003, because it is where every user starts and where every platform breaks first. Legacy systems move forward one measurable step at a time, each one proven by end-to-end regression before it ships.

Identity & Access

Legacy logins moved to federated SSO without breaking the platform underneath. Token lifecycles, claim mapping, mobile redirect flows: tested, hardened, documented. When someone asks “can you do Okta?”, the answer comes with the mapping, not a workshop.

SAML 2.0 · OIDC · OAuth2Okta · Entra IDSpring Security
Legacy Modernization

Platforms brought up to date while they keep serving customers. Six MongoDB major upgrades with maintenance windows in the range of minutes, because every cut-over was rehearsed on a copy first. Java 21 and Spring Boot 3 on a running platform, same release cadence throughout.

Java 8 → 21Spring Boot 3MongoDB 4 → 8VMs → KubernetesGitLab CI
AI-augmented delivery

AI in daily work since 2024. It types, we decide. Thirty years of pitfalls are what tell a plausible fix from a correct one. Every open thread is written down at night, so the next morning starts where the last one stopped. You don’t pay for ramp-up.

Claude CodeTicket → merge requestWritten hand-over
Since 1994Production systems. The first one at sixteen.
Since 2003Login and identity on regulated platforms, banking first.
Since 2012Remote by default, written hand-over every evening.
02 — QA & Test Automation

Quality engineering.
Senior-led. No compromises.

We build test automation systems and lead QA for teams that can't afford to guess. Framework architecture, interim QA leadership, CI/CD quality gates — owned end to end.

Test Automation Strategy

Coverage planning, tool selection, risk-driven prioritization. We assess what you have, define what you need, and build a roadmap that maps to your actual exposure.

Coverage auditRisk mappingRoadmap
Framework Architecture

Playwright, Cypress, pytest — structured for maintainability, parallel execution, and long-term ownership. Page Object Model, fixture strategy, CI-ready from day one.

PlaywrightCypresspytestTypeScript
QA Leadership / Interim Lead

Step in as QA Lead when you need seniority fast. Process setup, team alignment, stakeholder reporting. We own the quality function until your hire is ready.

Interim LeadProcess designTeam mentoring
CI/CD Quality Integration

Quality gates that teams actually respect. We integrate automated checks into your pipeline so broken builds stay broken and the signal is always clean.

GitHub ActionsGitLab CIQuality gates
API & System-Level Testing

End-to-end coverage across microservices, REST APIs, and distributed backends. We test the contracts between systems — not just the UI layer on top.

API testingContract testsMicroservices
Test Infrastructure & Reliability

Flakiness elimination, parallelization, environment strategy. We rebuild pipelines teams have stopped trusting into something that blocks a release for the right reason.

Flakiness auditParallelizationTest envs
03 — Senior-Led Solution Creation

Full-stack. From architecture
to production.

We build complete systems — not prototypes. Backend, platform, identity, and frontend. Delivered by practitioners who've done it before.

Backend Architecture

APIs, microservices, and platform backends that hold up under real load. Designed for longevity — with the failure modes already handled.

Java 21Spring Boot 3AWS CDK · LambdaNode.js 22
Platform Engineering

Kubernetes platforms run as products: GitOps delivery, golden paths, RBAC and security hardening, observability. We build the platform and enable the teams on it.

Kubernetes · EKSGitOps · GitLab CIObservability
Auth & Identity

SSO, SAML, OIDC, Entra ID — enterprise identity done right. From IAM architecture assessments to hardened token lifecycles in production.

SAML · OAuth2 · OIDCEntra IDIAM Assessments
Frontend & Design Systems

Fast, accessible frontends with React and Vue. Strong UX instinct, obsessive about performance and bundle size. Design systems that actually get maintained.

React · Next.jsVue 3 · NuxtTailwind
04 — AI & Platform Innovation

AI systems that run
in the real world.

Production AI — not demos. Multi-agent pipelines, RAG, LLM integrations built to be deterministic and reliable at scale.

Multi-Agent Systems

End-to-end AI pipelines with multiple specialized agents. Claude API, AWS Bedrock, coordinated workflows — built to be reliable in production, not just impressive in a notebook.

Claude APIAWS BedrockMulti-Agent · MCP
RAG & LLM Architecture

Retrieval pipelines that answer correctly: chunking, vector search, evaluation. LLM application architecture that stays debuggable in production.

RAG · Vector DBsLangChainClaude Code
AI-Native Product Development

We build products where AI is a first-class citizen from day one — not bolted on later. Architecture, data flows, and UX designed around what models actually do well.

FastAPISupabaseLLM integration
How we work

Small by design.
Quality by default.

No account managers. No handover layers. The person who scopes the work is accountable for the outcome.

One named lead per engagement

Every project has a lead with full accountability. They set direction, communicate directly, and are responsible for the outcome — not a delivery manager who translates.

Scope first, then execution

We define what done looks like before we start. Clear criteria, no moving goalposts. If something changes, we tell you before it affects delivery.

Vetted expert network

When scale demands it, we bring in specialists we've worked with directly — not sourced from a marketplace. Same standard, regardless of team size.

Own product

Built for our own studio.

AI-nativeOpen Source

LaMusicaEsTuDios

A full-stack suite for independent artists and studios — from royalty tracking to AI-powered media production. Built and maintained by IT Rockstars.

lamusicaestudios.com
Artist Gallery

Next-gen media galleries for artists and labels.

Studio Player

HLS streaming player built for professional audio.

Royalty System

Automated royalty tracking and distribution.

Cloud Video Editor

Browser-based video cutting and publishing for studios.

And more…

Full stack for the independent music ecosystem.

Get in touch

Let's talk about your project.

15 minutes is enough to know if we can help — and if we can't, we'll tell you who can.

Available for remote engagements — based in Europe, working globally.