abbas tolgay yılmaz

Governate Oy

Helsinki, 1.2025 – Present

Post-quantum file security on GCP — Kyber-1024 hybrid encryption, policy-based access, cross-platform clients, and production observability.

• Hybrid crypto (AES-256-GCM + Kyber-1024 via Cloudflare CIRCL / Go); on-demand key wrapping — no long-lived keys in DB; cross-platform CLI (macOS, Windows, Linux).
• ZK-based device activation (Zig + Circom); led Windows client (C# / WPF / minifilter, print & screen controls) and Go Fiber backend — mTLS, WebAuthn, MFA, audit to ClickHouse.
• Real-time layer (WebSocket + NATS, Redis); ClickHouse + Grafana + Prometheus on GCP; GitHub Actions CI/CD.

ConsAuth Systems

Remote · 2025 – Present

Consent-first identity platform: custom IdP + OAuth2/OIDC (Ory Hydra), Go services, PostgreSQL/Redis — SSO across apps with user-owned preferences and Solid/WebID-aligned flows; optional private pod provisioning.

• Owned protocol and service design around Hydra: authorization & token issuance, client/developer lifecycle, consent and scope modelling — same mental model as scaling trusted auth for many consumers.
• Shipped containerized stack (Docker, Nginx), REST APIs and admin/developer surfaces; comfortable owning identity boundaries in a supply-chain–sensitive world where provenance of trust matters.
• Async-first, globally distributed collaboration — when we align in person, bonfires are my jam for the kind of deep planning that doesn’t fit a stand-up.

Vattenfall Energy Trading GmbH

Hamburg, 2019 – 2022

• Contributed building a containerized data platform aggregating real-time feeds from 50+ wind turbines at Princess Alexia Wind Park.
• Designed modeling pipelines processing 5M+ telemetry events/day using Kafka and Cassandra.
• Improved energy trading accuracy by 18% through turbine curtailing and production scheduling optimizations.
• Reduced forecast deviation by 25%, increasing revenue from wind asset trading.
• Engineered secure infrastructure for EV charging networks, supporting 1,000+ active charging sessions/day.
• Secured SCADA communications for power plants including CHP and nuclear facilities, strengthening cybersecurity compliance with OpenMUC library.

Element Insurance AG

Lübeck, 2018 – 2019

• Enhanced and scaled insurance microservices serving 100K+ policyholders across multiple internal teams.
• Delivered 5+ new platform capabilities by integrating APIs and shared services across departments.
• Led cloud migration efforts, moving 70% of workloads to AWS, improving system reliability.
• Implemented Infrastructure-as-Code (Terraform) reducing environment setup time by 80%.
• Built and optimized React dashboards used daily by 50+ internal users.

Türkiye İş Bankası A.Ş.

Istanbul, 2017 – 2018

• Reverse-engineered and integrated legacy SOAP/WSDL endpoints using SmartBear SoapUI's Java SDK, enabling automated testing of the bank's internal service infrastructure.
• Built and maintained internal web tools with Spring Boot backend and jQuery/vanilla JS, HTML, CSS frontends.
• Optimized API testing workflows, improving reliability and reducing manual verification overhead across core banking services.
• Collaborated with cross-functional banking teams to document and standardize internal service contracts, improving onboarding for new engineers.