Bartłomiej Noworyta
Fullstack Developer · Web & Security
About me
Fullstack Developer with 3+ years of commercial IT experience - from ERP rollouts and server administration to building production web applications. Currently a developer at the Auschwitz-Birkenau State Museum: accessibility audits (WCAG 2.2 AA) and security testing of web applications. I build apps and REST APIs in Java/Spring Boot, React/Next.js, Python/FastAPI and Go, and work with Microsoft Azure, Docker and relational databases. I treat the infrastructure and cybersecurity background (Master's in progress, hands-on SIEM and hardening) as part of a developer's toolkit, not a separate track. Fluent with AI tools (incl. Claude Code, Codex) for building apps and bots, incl. three Discord bots in production. Also WordPress/WooCommerce.
Experience
Software Developer (Specialist)
2026 - presentAuschwitz-Birkenau State Museum in Oświęcim
- Digital Repository department (Archival Analysis and Information Section): converting video material for the digital repository.
- Designed and delivered the bilingual (PL/EN) Visitor Service Center website on WordPress: ~50 pages, a former-prisoner inquiry form stored in a database with SMTP delivery, and an accessibility statement.
- Conducted two digital accessibility audits (WCAG 2.2 AA): manual and automated testing, reports with recommendations.
- Building the tools the department needs to support its work and automate repetitive tasks.
- Security audit and penetration testing of a web application (Vue) providing data on camp prisoners and victims (in progress).
Software Developer
2025 - 2026LT2 Sp. z o.o.
- Built a commercial, multi-platform SaaS for Sale Zabaw Fikołki Sp. z o.o. - the customer web app, the admin panel and related services (the 'Fikołki' project).
- Built secure, responsive web apps in React/Next.js integrated with Python (FastAPI) backends; focus on scalable architecture and clean code.
- Administered and monitored Microsoft Azure services; advanced log analysis (KQL) and IAM configuration (RBAC, Service Principals).
- Integrated external systems (Firebase, Google Analytics) and built user-input validation mechanisms.
- Worked in Linux, containerization (Docker), version control (Git) and secure coding practices.
IT Systems Implementation Specialist
2023 - 2024REKORD SI Sp. z o.o.
- End-to-end deployment of ERP and financial-accounting systems for business and the public sector (local government), including roles and access configuration.
- Data migrations (ETL) to PostgreSQL and Firebird databases ensuring data integrity.
- Process automation with scripts (Bash/PowerShell); CSV/Excel data import, export and transformation.
- Administered Linux and Windows Server environments at clients; service configuration, access management, business continuity.
- Client collaboration (training, technical support) and functional testing before production rollout.
Frontend Developer / QA Tester
2023 - 2023REKORD SI Sp. z o.o.
- Functional and integration testing of desktop and web apps; data-integrity verification.
- Bug reporting and collaboration with the dev team across the full software development lifecycle (SDLC).
Education
Computer Science - Cybersecurity (M.Eng.)
2025 - presentCracow University of Technology
Cybersecurity cohort representative.
Web application security, Advanced programming techniques, Threat detection & incident response, Cloud security, Penetration testing, Security audits & compliance
Computer Science - IT in Business (B.Eng.)
2021 - 2025Witold Pilecki State University of Małopolska in Oświęcim
Year representative and Student Council President.
Data structures & algorithms (C++), Operating systems (Linux), Database systems (SQL), Computer networks (TCP/IP), Object-oriented programming
Physical Education (B.A.)
2016 - 2022Witold Pilecki State University of Małopolska in Oświęcim
Specialization: recreation instructor.
Skills
Frontend: React, Next.js, TypeScript, JavaScript, Redux, Tailwind CSS, Angular
Backend: Java, Spring Boot, Python, FastAPI, Node.js, REST API, Go
Databases: PostgreSQL, MySQL/MariaDB, SQL Server, Firebird, MongoDB
Cloud & DevOps: Microsoft Azure, Docker, CI/CD, Git, Linux, Windows Server, Proxmox, Vercel
Security & accessibility: OWASP / ASVS, IAM / OAuth2 / OIDC, Hardening, SIEM (Wazuh, ELK), Incident response, Wireshark, WCAG 2.2 AA, Accessibility audits
AI, tooling & automation: Claude Code, Codex, Bash, PowerShell, KQL, Postman, Jira / ClickUp
WordPress & E-commerce: WordPress, Kadence Pro, Greenshift, WooCommerce
Certifications
- Website accessibility auditing to the WCAG standard - Certes (2027) · planned
- CyberOps Associate - Cisco / ECSC (2025)
- Junior Cybersecurity Analyst - Cisco & Akademia CyberMIL (2025)
- Ethical Hacker - Cisco & Akademia CyberMIL (2025)
- Internal Auditor ISO 9001:2015 - Weil Consulting (2021)
- Six Sigma Yellow Belt - Weil Consulting (2021)
Other: 2nd dan Ju-Jitsu (2024) · Martial arts instructor (2021) · Self-defence instructor (2021) · Fitness instructor (2021)
Selected projects
Fikołki
A commercial SaaS running in production for a children's play-centre business: a customer web app and an admin panel. Also available as a mobile app (iOS/Android).
- Online payments (PayU) and notifications (Firebase)
- Multi-language, bookings, tickets & passes, shop
- FastAPI + PostgreSQL backend, React/Mantine admin
FastAPI · PostgreSQL · Firebase · React · Mantine · PayU · Docker
Visitor Service Center (Auschwitz-Birkenau Museum)
A bilingual WordPress site (~50 pages) for the Visitor Service Center of the Auschwitz-Birkenau State Museum.
- Full PL/EN version (Polylang): history of KL Auschwitz I, II-Birkenau, III-Monowitz and the Shoah, a 1939-1945 timeline, collections, archive, camp art, library, collections sharing, directions.
- A former-prisoner inquiry form (PL/EN) stored in a database with SMTP delivery; QR codes to museum resources.
- Built to digital accessibility guidelines (WCAG), with a PL/EN accessibility statement.
- Kadence + Kadence Blocks Pro, a consistent content layout and navigation in two languages; backups (WPvivid).
WordPress · Kadence · Kadence Blocks Pro · Polylang · WP Mail SMTP · WPvivid
Angelusy
Online voting for the “Angelusy 2026” contest (Słomniki municipality): multiple categories, live ranking, admin panel.
- Sign-up/sign-in, one vote per category, scoring and ranking
- Admin panel: categories, candidates, stats, users
Next.js · TypeScript · Drizzle ORM · PostgreSQL (Neon) · JWT · Tailwind CSS
KucharKi.org
A cooking platform built on user-generated content, live on its own domain: recipes added, rated and commented on by users, moderation, badges, a meal planner. Next.js 16, with SEO as the primary goal.
- In production at kucharki.org (Vercel + Cloudflare): 79 recipes, guides, SSR/SSG and JSON-LD structured data.
- Drizzle ORM + PostgreSQL (Supabase, migrated from Neon with no data loss), typo-tolerant FTS + pg_trgm, daily backups.
- Auth.js v5 (magic link), content reports and moderation, edit history, a PWA with Web Push, images on Cloudflare R2 + CDN, Sentry and Better Stack monitoring.
Next.js · TypeScript · Drizzle ORM · PostgreSQL (Supabase) · Auth.js · Cloudflare R2 · Sentry
MICHA
A meal ordering and billing system for hospitals, schools, offices and companies: menus, sign-ups with cut-off times, monthly billing and serving lists. A single Go binary serves both the API and the embedded React UI.
- A modular monolith in Go: sqlc + PostgreSQL, goose, Domain Events; a single binary (Windows Service / Linux) or Docker.
- Security and GDPR: JWT + refresh, argon2id, per-permission RBAC, audit log, rate limiting, CSRF, data erasure, retention.
- React + Mantine panel as a PWA, sales and dish-popularity reports with CSV export, email notifications.
Go · PostgreSQL · sqlc · React · Mantine · Docker
Airbnb Clone
A full-stack property-rental platform (Airbnb clone) with a Java/Spring Boot backend: REST API, map search, bookings and tenant/landlord panels.
- Backend: REST API in Spring Boot 3 (Java 21), Spring Data JPA + PostgreSQL, Liquibase, MapStruct, Maven.
- Security: Spring Security + OAuth2/OIDC (Auth0), role-based access control (tenant/landlord).
- Domain-driven design (DDD); Angular frontend with map-based search (Leaflet).
Java 21 · Spring Boot 3 · Spring Security · Spring Data JPA · Angular · PostgreSQL · Auth0 (OAuth2) · Liquibase · Maven
Price Watcher - Discord bot
A Discord bot tracking product prices in online shops: on-demand and scheduled checks, price history, thresholds and price-drop alerts. Products and sources are configured with a plain DM - no code changes, no restart.
- robots.txt-aware scraping, scheduling, slash commands; in production on Docker.
TypeScript · discord.js · cheerio · croner · Docker
Termin Prawka - Discord bot
A Discord bot alerting about free driving-test slots: mObywatel sign-in from a DM (Playwright), checks across several exam centres within the portal's rate limits. Running in production.
TypeScript · discord.js · Playwright · Docker · Tailscale
MAKO Security - Discord bot
A custom Discord bot keeping order on the MAKO server (~3000 members): role-ping moderation with exempt lists. Built, deployed, hosted and iterated on at the client's request.
- TypeScript + discord.js v14, containerized (Docker), event-driven architecture.
- Post-launch care and further development on the client's request.
TypeScript · discord.js · Node.js · Docker
Languages
Polish (Native) · English (C1) · Italian (B1)
Interests
Cybersecurity and homelab (Proxmox) · Optimization and automation · Sport, team and board games, puzzles
I hereby consent to the processing of my personal data contained in this CV for the purposes of current and future recruitment processes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).