Ziv Ish-ShalomEngineering Leadership · AI-First

Engineering leadership
that ships at 10× velocity.

25 years scaling R&D orgs — now proving the AI-era playbook hands-on. I've led multi-team engineering groups through hypergrowth, incidents, and global delivery. Today I pair that judgment with AI-First methods to ship at a velocity most teams can't match.

The 1Month apps were the pressure test. The next step is bringing this playbook to a full R&D organization — I'm looking for my next engineering leadership role.

a portrait written in the work · click to read
0 Years in Engineering
0 Teams Led
0 Users Served
0 Tier-1 Clients around the globe
Explore

Leadership That Moved
the Business.

Two decades of engineering leadership — measured in teams grown, users served, and outcomes delivered.

Org Scale

Grew and led 15+ engineering teams — organic, near-shore and offshore, distributed globally — across Kaltura, Arbox, Assure, and FTS.

Growth Engine

Scaled the R&D org behind a B2B2C platform serving 500,000+ active users, re-architecting AWS for high availability under heavy traffic.

AI Efficiency

Initiated and led an automation initiative, automating complex workflows for hundreds of thousands of dollars in operational savings. Integrated AI via RAG on AWS Bedrock.

Global Delivery

Delivered enterprise software to 20+ Tier-1 clients across the US and Europe under strict compliance and security standards.

Enterprise Resilience.
Rapid Deployment.

The playbook I bring to engineering teams: architectural judgment paired with AI-First execution — accelerating delivery while holding the line on security, Business ROI, maintainability and observability.

Strategic AI Integration

Harnessing AI to accelerate delivery. Emphasizing prompt engineering, skills, harnesses, and cross-model prompt testing. Moving from AI-First → AI-Only, achieving incomparable velocity.

Scalable Architecture

Designing robust microservices, real-time spatial pipelines, and offline-first edge applications built on reliable, enterprise-grade cloud foundations.

ROI-Driven Engineering

Aligning technical strategy with commercial goals. Prioritizing features that drive business metrics, minimize technical debt, and ensure long-term system health.

Zero-Trust Security

Implementing OAuth, strict JWT RBAC, biometric guards, and automated PII redaction. Building security compliance natively into the architectural blueprint.

25 Years of Engineering. 10× Solo with AI.

Deep architectural judgment meets AI-First methodology at 10× velocity.

I went hands-on by design — to lead AI-era engineering from fluency, not nostalgia. The 1Month apps are how I pressure-tested the methodology I now bring to teams.

I'm a tech expert with 25 years deep in engineering. Today I build solo, leveraging AI for 10× velocity — shipping production apps single-handedly that would normally take a small team months.

Through 1Month my first app went from an idea to working on my mobile device in one month. Next ones were significantly faster — backed by production CI/CD, cloud-native architecture, and ready to scale. No prototypes. No demos. Real apps, real complexity.

Behind the velocity is two decades of architectural leadership: scaling global R&D teams across Kaltura, Arbox, Assure, and FTS; leading through leaders — growing team leads into autonomous managers with 100% retention while more than doubling the group; calmly managing incident response; aligning technical strategy with commercial ROI. The same judgment that shaped enterprise platforms now shapes every line of code, every infrastructure decision, every release.

Builder | 1Month
2026 - Present

Proving the exponential velocity of AI-First methodology: the first app took 1 month from idea to working product on my device; The second, utilizing established prompts, took a single night. In under 6 months, single-handedly engineered and shipped 7 applications across iOS, Android, watchOS, macOS, and Web — backed by CI/CD pipelines with automated and load testing, running on Cloud infrastructure. Every mobile app was delivered with uncompromising enterprise-grade architecture and rigorous security standards.

Engineering Group Manager | Kaltura
2021 - 2025

Direct leadership of a multi-disciplinary engineering group (4 teams) supporting the company's primary growth engine in a new business line. Served as central technical authority aligning R&D delivery with commercial goals. Initiated and led the development of a strategic product built on Node.js and React, later extended with complementary AI capabilities on AWS (Bedrock) to automate complex workflows for hundreds of thousands of dollars in operational savings.

Development Manager | Arbox (Startup)
2019 - 2021

Led 3 teams (organic, outsource & offshore) during growth, supporting B2B2C customers and 500,000+ active users. Built scalable R&D organizational structure to fit aggressive business goals. Overhauled the AWS cloud architecture to ensure high-availability for a high-traffic PHP/Angular/React platform, and implemented metrics-driven engineering KPIs.

Development Manager | Assure (Startup)
2011 - 2019

Owned the full technology lifecycle from early-stage infrastructure to global deployments. Scaled data-intensive BI solutions for Testing & Development domains digesting millions of records daily. Managed enterprise delivery for 20+ Tier-1 clients across the US and Europe, maintaining strict compliance/security standards.

Senior Team Leader | FTS
2005 - 2010

Managed 5 teams (organic, near-shore & offshore) overseeing complex CRM solutions for the telecom sector. Championed the group shift to Agile, drastically cutting development cycles and fostering cross-departmental collaboration.

Software Developer to Team Lead | Various
1995 - 2005

Progressed from core developer to Team Leader across multiple business domains (Retalix, NTR, Casdim).

Beyond Prompts.
AI Run as a System.

Velocity without amnesia. The 1Month portfolio runs on an operating system for AI-First work — a version-controlled company brain, reusable skills, production agents, and adversarial cross-model review — so every AI session starts with full context and ends by writing back what changed.

The Company Brain

A git-versioned memory that runs the whole portfolio — the single source of truth for everything the code can't tell you: naming traps, account ownership, decisions with their rationale, dead ends proven once so no AI session re-burns the time. Every work session opens by reading it and closes by writing back what changed. Its rule: brain pages are secondary sources — primary evidence (git history, CI logs, store consoles) always wins. Private by design (client and account context lives there); the numbers are the tour:

Built in one evening — Jul 30, 2026
2 Agent Fleets Survey fleet, Write fleet
30 AI Agents 13 Survey agents + 17 Write agents. In parallel
12 Repos Surveyed The whole portfolio, one pass
A living system — 7 days later
19grew to38 Files
~1,300grew to~3,100 Lines
18grew to68 Dated Decisions
0grew to18 Recorded Corrections
Read the story on LinkedIn

Reusable Skills

Four version-controlled skills — security audit, security remediation, product-manager audit, and the brain's own update protocol — written once, symlinked into every project, and kept project-aware through per-repo context files.

Production Agents

An autonomous agent lives on Cloud Run serving B4UGO: first-login-of-day alerts delivered to Telegram over HMAC-signed webhooks. Not a demo — live in production and verified end-to-end.

Cross-Model Review

One model's plan is a hypothesis, not a verdict — rival models poke holes in each other's plans before a line of code ships. Adversarial review as a standing rule, not an occasional trick.

Agent-Ready Repos

Every production repo carries an AI-facing architecture doc, dated audit trails, and handover notes recording what was verified versus assumed — so a fresh session is productive immediately.

Verified-Claims Manifest

Every public number on this site sits in a dated manifest beside the command that verified it. Claims decay — the manifest catches drift by re-running the evidence, not by luck.

The Leader's Playbook

Four phases, 13 rules for leading AI-First engineering — published on LinkedIn as it happened, wins and dead ends included.

Read the series

Hands-On, Still.
7 Apps. 5 Platforms.

The leadership is the headline — this is the proof. Seven production apps, solo-built with AI-First methods: the playbook above, pressure-tested in code.

B4UGO

🍎 iOS 🤖 Android (internal test)
Live · iOS

Location-based shopping reminders. Add items to your list, associate them with stores, and get notifications when you're nearby.

React Native Expo SDK 54 NestJS ×3 Cloud Run PostgreSQL + PostGIS Upstash Redis Gemini AI Firebase Hosting Sentry
  • 3 NestJS microservices with PostGIS spatial queries
  • Smart Driving - 3-tier geofence auto-scaling
  • Battery discipline - idle self-sleep, geofence-wake on movement
  • Free / Pro tiers with server-driven, per-tier GPS profiles
  • 7-gate notification pipeline with Siri shortcuts
  • OAuth (Google/Apple/Facebook) + biometric unlock + JWT RBAC (70 endpoints)
  • 8-language i18n with full RTL support
  • Admin dashboard (Next.js) + marketing site

CityFix

🍎 iOS 🤖 Android
In Development

Civic issue reporting for municipalities. Citizens report geolocated problems; city employees triage and resolve via dedicated admin portals.

React Native Expo NestJS ×2 TensorFlow / NSFWJS Tesseract.js OCR PostgreSQL + PostGIS Docker + Nginx Sentry
  • AI moderation pipeline - profanity, PII blur, NSFW detection
  • Offline-first with background queue & auto-drain
  • Map-based reporting with GPS tagging
  • 2 admin portals - municipality + system admin (Next.js)
  • Gamification - leaderboard & milestone confetti
  • 4 languages (en, he, ar, ru) with full RTL

map.ping

🍎 iOS 🤖 Android
Live · iOS + Android

Private, offline proximity alerts. Import any Google My Map, then get a local notification when you're near a saved pin - even with the app closed. No backend, no accounts.

React Native Expo SDK 54 New Architecture bg-geolocation v5 AsyncStorage KML / KMZ RevenueCat Share Extension
  • Zero backend - 100% on-device, no servers or telemetry
  • Motion-aware GPS engine with adaptive driving tiers
  • 7-gate notification pipeline (anti-nag, quiet hours)
  • Hermes-safe KML/KMZ import: file, link, Drive, or shared list
  • Layers - per-folder map filters; personal pins with KML export
  • iOS Share Extension imports in-process via App Group
  • 5 languages (en, he, fr, ru, ar) with full RTL

Tap-Ching

🍎 iOS ⌚ watchOS
Live

Family expense tracker - log expenses in 3 seconds, share a household dashboard, and track budgets with Dynamic Island live updates.

SwiftUI SwiftData CloudKit WidgetKit ActivityKit App Intents Swift Charts
  • Pure Apple stack - zero third-party dependencies
  • Dynamic Island live activity with running total
  • Apple Watch companion - quick entry + complications
  • Family sharing via native CKShare on a private CloudKit database
  • Role-based access - Admin vs. Member (kids)
  • Siri shortcut, lock screen & home widgets

StashCache

🍎 iOS
Live

Personal inventory manager - snap a photo, tag to a storage location, find your tools and gear in seconds. 100% offline, zero cloud.

React Native Expo Router SQLite Secure Store Firebase Hosting
  • Strictly offline - no backend, no cloud, no telemetry
  • Optional passcode lock with seed-phrase recovery
  • Photo lifecycle: temp → permanent → orphan cleanup
  • Parameterized raw SQL - no ORM, no injection
  • 3 languages (en, he, ar)

Photographer's Social Helper

🖥 macOS

Offline EXIF extractor for photographers - scan massive RAW folders, format camera settings for social media, batch export with privacy stripping.

Electron React sips / JXA exifr piexifjs Firebase Hosting
  • 100% offline - photos never leave your machine
  • On-device AI photo tagging via macOS Vision Framework
  • 6 RAW formats (CR2, CR3, ARW, NEF, DNG, RAF) via native macOS sips
  • EXIF watermark via JXA - zero npm dependencies
  • Batch drag-export with EXIF privacy stripping
  • Code-signed DMG (Developer ID)

Doppel

🖥 macOS

Smart duplicate file finder - scans folders using content hashing or weighted name similarity, helps you reclaim disk space.

SwiftUI CryptoKit Swift Package Manager
  • 3-phase hash pipeline: size group → partial hash → full SHA-256
  • Name similarity via Union-Find clustering + Levenshtein
  • Handles 100K+ files efficiently
  • Cross-folder comparison & date-based splitting
  • Pure Apple stack - zero third-party dependencies

Technical Depth.
Not Toy Projects.

Every app uses production-grade architecture, security, and operational patterns.

Mobile

React Native
Expo SDK 54
SwiftUI
SwiftData
React Navigation
Expo Router

Backend

NestJS
Node.js
Prisma ORM
PostgreSQL 16
PostGIS
Upstash Redis

Frontend & Desktop

Next.js 16
React 19
Tailwind CSS v4
Electron 29
TypeScript
electron-vite

AI & ML

Google Gemini API
TensorFlow.js
NSFWJS
Tesseract.js OCR

Cloud & Infra

GCP Cloud Run
Cloud SQL
GCS
Firebase Hosting
CloudKit
Docker Compose

Security & Auth

OAuth 2.0
JWT + RBAC
Passport.js
Face ID / Touch ID
Seed Phrase Recovery
Apple Sign-In

Native Apple

SwiftUI
ActivityKit
WidgetKit
App Intents (Siri)
CryptoKit
Swift Charts

CI/CD & Ops

GitHub Actions
EAS Build
Workload Identity Federation
Sentry Monitoring
k6 Load Testing
Developer ID Signing

Leadership

Org Design
Agile / Scrum
Vendor Management
Stakeholder Management
Metrics & KPIs
Budgeting

Production-Grade.
From Day One.

Real deployments, real domains, real CI/CD - not localhost demos.

B4UGO Serverless
Compute Serverless Cloud Run
Database Managed PostgreSQL + PostGIS
Cache Serverless Redis
Storage Google Cloud Storage
CDN Firebase Hosting (3 custom domains)
CI/CD GitHub Actions + WIF keyless deploys
Mobile EAS Build → TestFlight / Play Console
CityFix VM
Compute GCP VM - Docker Compose (6 containers)
Database PostgreSQL 16 + PostGIS 3.4 (containerized)
Proxy Nginx + Certbot SSL (4 domains)
Storage Docker volumes (uploads, certs, DB)
CI/CD GitHub Actions → SSH deploy on VM
Backups Nightly PostGIS cron dump
map.ping Offline-First
Backend None - 100% on-device, no servers
Storage AsyncStorage + SecureStore (local)
Engine react-native-background-geolocation v5
Website Firebase Hosting — map-ping.app
Build EAS Build (Expo)
Distribution App Store (iOS) · Google Play (Android)
Tap-Ching Native Cloud
Backend Apple CloudKit (public database)
Sync iCloud automatic sync + CKShare
CI/CD GitHub Actions (macOS-15, XcodeGen)
Distribution Xcode → TestFlight → App Store
StashCache Offline-First
Storage SQLite + Secure Store (local)
Website Firebase Hosting — stashcache-home.com
Build EAS Build (Expo)
Distribution App Store via TestFlight
Photographer's Social Helper Offline-First
Storage Local filesystem (RAW + EXIF)
Website Firebase Hosting (static CDN)
Build electron-builder + native sips/JXA
Distribution Code-signed DMG (Developer ID)
Doppel Offline-First
Storage Local filesystem (scan + hash)
Build Swift Package Manager (Xcode)
Stack SwiftUI + CryptoKit (zero deps)
Distribution Code-signed macOS app

Tested. Load-Tested.
Monitored 24/7.

Building fast doesn't mean cutting corners. Every platform has automated tests in CI, load testing scripts, real-time error tracking, and uptime monitoring.

Testing Strategy

882 automated tests across the portfolio, all passing — re-verified by running every suite on Aug 3, 2026. On B4UGO, CityFix and Tap-Ching, every push to main runs the suite; B4UGO's Cloud Run deploys fire only on a green run.

882 Tests · Aug 2026
73 Test Suites
0 Failures
Coverage by Layer
Backend
453
Mobile
311
Web
118
Unit & integration tests via Jest across NestJS backends, Next.js admin web, and React Native mobile
Critical background task logic extracted into pure functions for deterministic testing
CI matrix runs B4UGO, CityFix and Tap-Ching in parallel on every push — tests gate every deploy

Load Testing

k6 scripts validate that the B4UGO serverless backend handles real-world traffic patterns without degradation.

k6 Load Runner
+80% Cache Hit Rate
5 Services Tested
Ramp-up scenarios testing health, auth, items, stores & scan endpoints concurrently
Rate limiting validation — confirms 429 throttling behaves correctly under burst
Scripts live in tests/load/ — part of the monorepo, versioned alongside services

Observability & Admin Dashboards

How I monitor my production apps without a team — custom-built admin dashboards with real-time health checks, error tracking, analytics, and CI/CD visibility. Every platform has its own System Admin portal.

API Health Monitor
  • B4UGO: real-time liveness checks on 8 services with 30s auto-refresh
  • CityFix: health dashboard tracking 5 services with latency bands (Fast / Moderate / Slow)
  • Per-service response time, status, and last-checked timestamp
  • Aggregate uptime % and average response time
Sentry Integration
  • B4UGO: @sentry/nestjs on 3 backends + @sentry/react-native on mobile
  • CityFix: dedicated Sentry dashboard tracking 4 projects (auth, reports, admin, mobile)
  • Unresolved vs. new issues (24h) surfaced directly in the admin UI
  • Source maps uploaded via CI for readable stack traces
CI/CD & DevOps
  • GitHub Actions pipeline status and deployment history in admin UI
  • B4UGO: test count tracking (590 tests / 49 suites) and CI success rate
  • B4UGO: EAS mobile build status and submission history
  • CityFix: CI Pipeline + Production Deploy run logs with commit-level detail
Analytics & Telemetry
  • B4UGO: DAU/WAU/MAU metrics, user stickiness ratio, event trends (7d/30d/90d)
  • Event tracking: scan_triggered, app_open, item_added, settings_changed
  • Cache hit rate, average latency, and scan volume monitoring
  • Growth & activity dashboards with completion rate tracking
Scan Debug Logs
  • Per-user trace-level scan execution debugging
  • Gate decision visibility (Auto / Background / No Stores)
  • Speed, tier, and GPS mode logged per scan event
  • Filterable by type and outcome with CSV export and pagination
UptimeRobot
  • 60-second interval HTTP health checks on CityFix
  • Monitors all 4 public domains & API endpoints
  • Instant Slack/email alerts on downtime

Building in Public.

Dispatches from the 1Month experiment — posted on LinkedIn as it happened, wins and dead ends included.

“The risk for a senior engineering leader isn’t falling behind on strategy. It’s quietly losing touch with how the work actually gets done — and starting to lead from nostalgia instead of fluency.”

So I built. Seven production apps in under six months, solo, with AI — across iOS, Android, watchOS, macOS, and web.

“AI amplifies a sharp spec or a vague one at the same speed. The spec is your real IP now.”

Part 1 of the manager’s AI playbook — set the foundation: explore before you decide, make clarity the multiplier, keep architecture human.

“Take one model’s plan to a rival and make it poke holes. ‘Claude Code says do X’ is a hypothesis, not a verdict.”

Part 2 — run AI as a system: match the model to the task, pit models against each other, run a token economy, layer your instructions.

“The scarce skill is no longer typing the code. It’s judging what came back.”

Part 3 — hold the quality line: raise the review bar, own hardening explicitly (AI ships the happy path), and institutionalize audits — quality as a standing ritual, not a one-time gate.

“A ranking is a decision. A list is not.”

Part 4, the finale — ship and decide: force-rank with AI, instrument and let real usage set priorities, and lead the “no.” The whole playbook: four phases, 13 rules.

“I built my projects a brain. Its first act was calling me a liar. (Technically, it called my documentation a liar.)”

How a 12-project solo portfolio got a shared, git-versioned memory — and immediately caught confident falsehoods the docs had been telling for months. The rule that emerged: primary evidence wins; docs are just claims.

Follow the experiment on LinkedIn

Open to a Good
Conversation.

Hiring an engineering leader who's already fluent in AI-era delivery? Or just want to talk architecture, AI-First methodology, the 1Month playbook — the inbox is open.

Typographic portrait of Ziv Ish-Shalom, full size and readable.