Christiaan Vogel — Software Engineer

Software Engineer · Cloud & Full-Stack Developer

Software engineering graduate and founder of Bezalel Software, building software end to end across the full stack, cloud and security, with day-to-day cloud engineering for a managed security service provider.

Cape Town, South Africa · SAST · UTC+2

See the work Download CV christiaanvogel2002@gmail.com

Christiaan Vogel, Software Engineer — Plate 01

03Selected work

Eight projects, from a multi-tenant SaaS to a marketplace

Two of these hold client data or are not yet demo-ready, so instead of a screenshot they get a drawing of the engineering — which is the part worth seeing anyway.

In development2026 — Present

Job Card SaaS

A multi-tenant white-label platform where each tenant company runs a branded job-card system on its own domain.

4
Clean-architecture layers: 2
SSO providers per tenant: Row-level
Tenant isolation

Solo, ground-up rebuild of a university team project (.NET MAUI) as a white-label SaaS, structured as a clean architecture across Domain, Application, Infrastructure and Web layers.
Implemented row-level tenant isolation using EF Core global query filters, with the active tenant resolved server-side from the request hostname only — never from anything the browser can set.
Built authentication end to end: local accounts with roles, guards and password reset, plus per-tenant SSO through Microsoft Entra ID and Google via OIDC, verified by a full round-trip integration test against a mock identity provider.
Developed the super-admin control plane used to manage tenants end to end, covering tenant CRUD, domain mapping and per-tenant SSO configuration.
Wrote unit and integration tests with xUnit and Testcontainers against real MySQL, kept every secret out of source control, and enforced Central Package Management with pinned versions.

C#
.NET 10
Blazor Server
EF Core
MySQL
Docker
xUnit

acme.example.com/jobs

Inbound request · hostname is the only tenant signal

?tenant= · cookie · form field

Never read

Host header

Tenant resolver

Server-side only · hostname → tenant id

TenantContext

EF Core global query filter

Applied to every entity, not per query

WHERE TenantId = …

Acme

Visible

Beta

Filtered out

Gamma

Filtered out

Each tenant company runs on its own domain. The active tenant is resolved server-side from the request hostname alone, then applied by EF Core as a global query filter, so every query is scoped whether or not the caller remembers to scope it.

In development2026

AMI Claims Operations Dashboard

Claims-operations analytics for an underwriting management firm, seeing inside a system that runs over remote desktop and cannot be instrumented conventionally.

40,800
Events across 13 months: ~170 KB
Gzipped client snapshot: 0
Inbound ports open

Built a claims-operations analytics platform giving per-handler visibility into activity windows, output, turnaround and reopen loops inside a claims system that conventional desktop monitoring cannot see, because that system runs over remote desktop.
Wrote the ingestion pipeline that parses monthly exports, derives events and dedupe-merges them into SQLite idempotently, so re-uploading an already-imported file is a no-op.
Designed a compact snapshot model shipping dimension tables and fixed-width integer fact arrays to the browser, so every metric recomputes client-side and date filters redraw instantly instead of round-tripping.
Made the metrics layer isomorphic and pure, so the same functions that render the charts are the ones unit-tested on the server, with an acceptance suite asserting every published figure plus field-by-field parity against the verified prototype.
Engineered for POPIA from the start: server-side-only parsing, raw event text isolated and never joined into an API response, uploads never written to disk beyond their SHA-256, anonymous integer indices to the browser, and a strict CSP blocking all external origins.
Packaged for a Linux VPS via Docker Compose behind a Cloudflare Tunnel with Cloudflare Access and no inbound ports open, using a non-root multi-stage image with health checks, log rotation and WAL-safe backup scripts.

TypeScript
Node.js
SQLite
Docker Compose
Cloudflare Tunnel
Cloudflare Access

Monthly export

Parsed server-side only · never written to disk beyond its SHA-256

derive

Event derivation

Raw event text isolated here and never joined into an API response

dedupe-merge

SQLite

Idempotent: re-uploading an imported file is a no-op

compile

≈170 KB gzipped snapshot

Dimension tables + fixed-width integer fact arrays

ship to client

Client-side recompute

Every metric derived in the browser · filters redraw instantly

same functions

Isomorphic metrics layer

The functions that render the charts are the ones unit-tested on the server

Monthly exports are parsed server-side into derived events and dedupe-merged into SQLite idempotently, so re-importing a month is a no-op. The browser receives a compact snapshot of dimension tables and fixed-width integer arrays — never raw event text — and recomputes every metric locally, so date filters redraw without a round trip.

Live2026

Bezalel Software

The company brand and site — identity, keystone mark and a particle-engine hero, built and shipped end to end.

bezalelsoftware.co.za →

97–98
Lighthouse performance: 100
All other categories

Designed the brand identity, including a keystone mark drawn from the architectural and scriptural cornerstone image, and built the company site as a static export deployed to Cloudflare.
Built a live particle-engine hero in which binary digits assemble into the brand mark, a scroll-driven story section, and a dual light and dark theme.

Next.js 16
React 19
TypeScript
Cloudflare

Live2026

PowerSol

A WordPress site rebuilt onto Cloudflare Workers, with a POPIA-constrained migration of 321 historical enquiries.

powersol.co.za →

321
Enquiries migrated: Jul 2026
Live since

Rebuilt the client site and migrated it off WordPress onto Cloudflare Workers, live since July 2026, with deployment automated through Workers Builds on push.
Handled the migration of 321 historical customer enquiries under POPIA data-minimisation constraints, and isolated legacy hosting archives containing live database credentials out of the build and backup paths.

Next.js 16
TypeScript
Cloudflare Workers
OpenNext

The PowerSol homepage after the rebuild onto Cloudflare Workers.

Live2026

Savannah Tech

A Shopify storefront built and operated end to end, plus the commercial data work and the business case behind it.

savannahtech.co.za →

2
Vendor ranges audited: EFT
Payment flow with approval gate

Built and operated the Shopify storefront: custom Liquid theme sections, collection and brand grids, an EFT payment flow with an order approval gate, transactional email templates and Shopify Flow automation.
Ran the commercial data work behind it, including supplier catalogue reconciliation, margin and pricing analysis, duplicate cleanup, and product title and SEO audits across the Dell and Microsoft ranges.
Produced the business case for moving to an owned platform, and built a separate Next.js B2B lead-generation site for institutional buyers, currently pre-launch.

Shopify Liquid
Next.js 16
Cloudflare Workers
n8n

Live2026

F1 IT Solutions & DigiDeeds

The corporate site kept live and optimised, and a new client platform built on Cloudflare D1.

f1itsolutions.co.za →

Maintain the live F1 IT Solutions corporate site, including SEO work, a blog content pipeline and a scripted backup routine.
Built the DigiDeeds site on Next.js with a Cloudflare D1 database and migration tooling, currently pre-launch.

Next.js 16
Cloudflare Workers
Cloudflare D1
Tailwind

Live

SEAC Electricians

A freelance build for a registered Cape Town electrical contractor — hand-written, fully responsive.

seac.co.za →

Designed and built a fully responsive website covering a services overview, company information and a working contact form.

HTML
CSS
JavaScript

University project2025

MzansiMarket

A consumer-to-consumer marketplace for South African users, built on a relational schema with separate user and admin dashboards.

Built a full consumer-to-consumer marketplace with registration, product listings, wishlist and responsive layouts on a relational schema for users, products and transactions.
Implemented separate user and admin dashboards, secure authentication with server-side validation and hashed passwords, and deployed the application and database to shared hosting with Google Search Console verification.

PHP
MySQL
JavaScript
HTML
CSS

04Experience

Cloud engineering by day, building by night

Mar 2025 — Present
Cape Town
Cloud Engineer / Software Developer
F1 IT Solutions
- Design and build internal and client-facing software alongside the infrastructure role, including client marketing and lead-generation sites now live in production, and internal analytics tooling.
- Manage Microsoft 365 tenants across multiple SME environments, covering user administration, licensing, and enterprise application configuration in Entra ID.
- Deploy and monitor Sophos firewalls for client sites and the internal office, including VPN access, rule sets and connectivity validation.
- Run endpoint security rollouts across Sophos Endpoint Protection, SentinelOne, Acronis and ESET, validating agent health and central reporting.
- Resolve client incidents across desktop, network and application layers using the SuperOps RMM/PSA platform, previously N-able N-sight.
2026 — Present
Founder
Bezalel Software
- Founded a custom software company on a 'code as craft' ethos, named for Bezalel in Exodus 31 — the craftsman who is the first person in Scripture described as filled with the Spirit of God.
- Build web applications, automation and integrations for businesses and individuals, and develop the multi-tenant Job Card SaaS platform.
Aug 2024 — Mar 2025
Earlier roles
Cassia Restaurant · Butlers Pizza
- Waiter, Cassia Restaurant. Delivery Driver, Butlers Pizza.

05Materials schedule

The toolchain

What I actually reach for, grouped as on the CV.

LANG

Languages

C#
TypeScript
JavaScript
Python
Java
PHP
C
C++
Delphi

SRV

Backend

.NET 10
ASP.NET Core
Blazor Server
EF Core
.NET MAUI
Node.js
REST APIs

CLI

Frontend

React 19
Next.js 16
Tailwind CSS 4
HTML
CSS
Shopify Liquid

DATA

Databases

SQL
MySQL
SQLite
MongoDB
Neo4j
Relational design
Migrations
Query optimisation

OPS

Cloud & DevOps

Cloudflare Workers
Cloudflare Tunnel
Cloudflare Access
Docker & Compose
Microsoft 365 administration
Entra ID enterprise apps
Linux VPS
Git & GitHub
Workers Builds

TEST

Testing

xUnit
Testcontainers
Unit & acceptance suites
TypeScript strict typechecking
ESLint

SEC

Security

TLS & certificate hygiene
SPF/DKIM/DMARC
HTTP security headers
Vulnerability management
Sophos firewalls & endpoint
SentinelOne
Acronis
ESET

AUTO

Ops & Automation

SuperOps RMM/PSA
n8n
AI-assisted development workflows

06Credentials

95 vendor certifications

68 technical and 27 sales or presales, across four vendors, earned between Mar 2025 and Jul 2026. The certificates state 222h 30m of content hours between them. Browse the full catalogue →

Sophos

Architect · 4
Engineer · 18
Technician · 6
Specialist · 3
Delta · 6
Sales & Presales · 13

Sophos Firewall v21.5 Certified Architect (AT80)
Sophos Firewall v22.0 Certified Architect (AT80)
Sophos Endpoint Certified Architect v6.0 (AT15)
Sophos Central Endpoint Protection Certified Architect v5.0 (AT15)
Phish Threat v3.0

Acronis

Tech Pro · 10
Recertification · 4
Foundation · 15
Sales & Presales · 14

Cloud Tech Pro - Backup
Cloud Tech Pro - Disaster Recovery
Cloud Tech Pro - MDR
Cloud Tech Pro - XDR
Acronis Cyber Protect — Tech Pro

ESET

Specialist · 1

Certified ESET MSP Administrator Specialist v2

N-able

Specialist · 1

N-central Core Product Certification Exam

Completion dates come from the certificates themselves — Sophos, ESET and N-able record them as data, and the Acronis certificates were read from the documents. Two of the ninety-five carry no date and are listed without one rather than guessed at.

07Education

21 distinctions across two qualifications

Every distinction below is on the official transcript with its mark. See the complete academic record →

Eduvos

BSc Information Technology: Software Engineering · NQF 7

2023 — 2025

12 distinctions

99Procedural Programming
90Mobile Application Development and Big Data
89Enterprise Programming in C# (elective)
85Project: Mobile Application and Web Services
83Database Systems
83Web Development and e-Commerce
82Business English
82Usability Engineering
77Network Security
77Research Design and Methodology
76Technical Writing and Communication
76Business Management and Entrepreneurship

Nelson Mandela University

Diploma in Information Technology: Software Development

2021 — 2022

9 distinctions

99Systems Software I: IT Essentials
97Development Software I
89Information Systems 1A
85Technical Programming I
82Internet Programming II
81Information Technology Skills I
78Information Systems II
75Systems Software I: Networks
75Information Systems 1B

Two years completed before transferring to Eduvos to read for the BSc, where five modules were formally recognised for credit. The 2022 record is the November examination results slip and covers that sitting only.

Recognition of prior learning

5 modules from Nelson Mandela University were formally recognised for credit toward the BSc, worth 69 credits: Programming in C#, Computer Network and Security, Introduction to Programming, Advanced Information and Computer Skills, Computer Skills.

08Leadership & community

Outside the terminal

Broadcast Sound Section Head
2025 — Present
Testify Church (formerly CRC Cape Town)
Lead the broadcast sound team for weekly services, coordinating volunteers and managing live audio workflows and equipment.
Homecell Leader
2023 — Present
Testify Church (formerly CRC Cape Town)
CROSS Leader
2018 — 2020
Stellenberg High School
SA Leader
2018
Youth Camp

Languages

Afrikaans: Native
English: Fluent

09Contact

Get in touch

Open to engineering roles and to build work through Bezalel Software. A real address rather than a form, because that is what I would want.

christiaanvogel2002@gmail.com

Christiaan Vogel — Software Engineer · Cloud & Full-Stack Developer

At a glance

Job Card SaaS

AMI Claims Operations Dashboard

Bezalel Software

PowerSol

Savannah Tech

F1 IT Solutions & DigiDeeds

SEAC Electricians

MzansiMarket

Cloud Engineer / Software Developer

Founder

Earlier roles

Languages

Backend

Frontend

Databases

Cloud & DevOps

Testing

Security

Ops & Automation

Sophos

Acronis

ESET

N-able

Eduvos

Nelson Mandela University

Broadcast Sound Section Head

Homecell Leader

CROSS Leader

SA Leader