Skip to content
← Portfolio

Bartłomiej Noworyta

Fullstack Developer · Web & Security

About me

Fullstack Developer with 3+ years of commercial IT experience - from ERP rollouts and server administration to building production web applications. Currently a developer at the Auschwitz-Birkenau State Museum: accessibility audits (WCAG 2.2 AA) and security testing of web applications. I build apps and REST APIs in Java/Spring Boot, React/Next.js, Python/FastAPI and Go, and work with Microsoft Azure, Docker and relational databases. I treat the infrastructure and cybersecurity background (Master's in progress, hands-on SIEM and hardening) as part of a developer's toolkit, not a separate track. Fluent with AI tools (incl. Claude Code, Codex) for building apps and bots, incl. three Discord bots in production. Also WordPress/WooCommerce.

Experience

Software Developer (Specialist)

2026 - present

Auschwitz-Birkenau State Museum in Oświęcim

  • Digital Repository department (Archival Analysis and Information Section): converting video material for the digital repository.
  • Designed and delivered the bilingual (PL/EN) Visitor Service Center website on WordPress: ~50 pages, a former-prisoner inquiry form stored in a database with SMTP delivery, and an accessibility statement.
  • Conducted two digital accessibility audits (WCAG 2.2 AA): manual and automated testing, reports with recommendations.
  • Building the tools the department needs to support its work and automate repetitive tasks.
  • Security audit and penetration testing of a web application (Vue) providing data on camp prisoners and victims (in progress).

Software Developer

2025 - 2026

LT2 Sp. z o.o.

  • Built a commercial, multi-platform SaaS for Sale Zabaw Fikołki Sp. z o.o. - the customer web app, the admin panel and related services (the 'Fikołki' project).
  • Built secure, responsive web apps in React/Next.js integrated with Python (FastAPI) backends; focus on scalable architecture and clean code.
  • Administered and monitored Microsoft Azure services; advanced log analysis (KQL) and IAM configuration (RBAC, Service Principals).
  • Integrated external systems (Firebase, Google Analytics) and built user-input validation mechanisms.
  • Worked in Linux, containerization (Docker), version control (Git) and secure coding practices.

IT Systems Implementation Specialist

2023 - 2024

REKORD SI Sp. z o.o.

  • End-to-end deployment of ERP and financial-accounting systems for business and the public sector (local government), including roles and access configuration.
  • Data migrations (ETL) to PostgreSQL and Firebird databases ensuring data integrity.
  • Process automation with scripts (Bash/PowerShell); CSV/Excel data import, export and transformation.
  • Administered Linux and Windows Server environments at clients; service configuration, access management, business continuity.
  • Client collaboration (training, technical support) and functional testing before production rollout.

Frontend Developer / QA Tester

2023 - 2023

REKORD SI Sp. z o.o.

  • Functional and integration testing of desktop and web apps; data-integrity verification.
  • Bug reporting and collaboration with the dev team across the full software development lifecycle (SDLC).

Education

Computer Science - Cybersecurity (M.Eng.)

2025 - present

Cracow University of Technology

Cybersecurity cohort representative.

Web application security, Advanced programming techniques, Threat detection & incident response, Cloud security, Penetration testing, Security audits & compliance

Computer Science - IT in Business (B.Eng.)

2021 - 2025

Witold Pilecki State University of Małopolska in Oświęcim

Year representative and Student Council President.

Data structures & algorithms (C++), Operating systems (Linux), Database systems (SQL), Computer networks (TCP/IP), Object-oriented programming

Physical Education (B.A.)

2016 - 2022

Witold Pilecki State University of Małopolska in Oświęcim

Specialization: recreation instructor.

Skills

Frontend: React, Next.js, TypeScript, JavaScript, Redux, Tailwind CSS, Angular

Backend: Java, Spring Boot, Python, FastAPI, Node.js, REST API, Go

Databases: PostgreSQL, MySQL/MariaDB, SQL Server, Firebird, MongoDB

Cloud & DevOps: Microsoft Azure, Docker, CI/CD, Git, Linux, Windows Server, Proxmox, Vercel

Security & accessibility: OWASP / ASVS, IAM / OAuth2 / OIDC, Hardening, SIEM (Wazuh, ELK), Incident response, Wireshark, WCAG 2.2 AA, Accessibility audits

AI, tooling & automation: Claude Code, Codex, Bash, PowerShell, KQL, Postman, Jira / ClickUp

WordPress & E-commerce: WordPress, Kadence Pro, Greenshift, WooCommerce

Certifications

  • Website accessibility auditing to the WCAG standard - Certes (2027) · planned
  • CyberOps Associate - Cisco / ECSC (2025)
  • Junior Cybersecurity Analyst - Cisco & Akademia CyberMIL (2025)
  • Ethical Hacker - Cisco & Akademia CyberMIL (2025)
  • Internal Auditor ISO 9001:2015 - Weil Consulting (2021)
  • Six Sigma Yellow Belt - Weil Consulting (2021)

Other: 2nd dan Ju-Jitsu (2024) · Martial arts instructor (2021) · Self-defence instructor (2021) · Fitness instructor (2021)

Selected projects

Fikołki

A commercial SaaS running in production for a children's play-centre business: a customer web app and an admin panel. Also available as a mobile app (iOS/Android).

  • Online payments (PayU) and notifications (Firebase)
  • Multi-language, bookings, tickets & passes, shop
  • FastAPI + PostgreSQL backend, React/Mantine admin

FastAPI · PostgreSQL · Firebase · React · Mantine · PayU · Docker

Visitor Service Center (Auschwitz-Birkenau Museum)

A bilingual WordPress site (~50 pages) for the Visitor Service Center of the Auschwitz-Birkenau State Museum.

  • Full PL/EN version (Polylang): history of KL Auschwitz I, II-Birkenau, III-Monowitz and the Shoah, a 1939-1945 timeline, collections, archive, camp art, library, collections sharing, directions.
  • A former-prisoner inquiry form (PL/EN) stored in a database with SMTP delivery; QR codes to museum resources.
  • Built to digital accessibility guidelines (WCAG), with a PL/EN accessibility statement.
  • Kadence + Kadence Blocks Pro, a consistent content layout and navigation in two languages; backups (WPvivid).

WordPress · Kadence · Kadence Blocks Pro · Polylang · WP Mail SMTP · WPvivid

Angelusy

Online voting for the “Angelusy 2026” contest (Słomniki municipality): multiple categories, live ranking, admin panel.

  • Sign-up/sign-in, one vote per category, scoring and ranking
  • Admin panel: categories, candidates, stats, users

Next.js · TypeScript · Drizzle ORM · PostgreSQL (Neon) · JWT · Tailwind CSS

KucharKi.org

A cooking platform built on user-generated content, live on its own domain: recipes added, rated and commented on by users, moderation, badges, a meal planner. Next.js 16, with SEO as the primary goal.

  • In production at kucharki.org (Vercel + Cloudflare): 79 recipes, guides, SSR/SSG and JSON-LD structured data.
  • Drizzle ORM + PostgreSQL (Supabase, migrated from Neon with no data loss), typo-tolerant FTS + pg_trgm, daily backups.
  • Auth.js v5 (magic link), content reports and moderation, edit history, a PWA with Web Push, images on Cloudflare R2 + CDN, Sentry and Better Stack monitoring.

Next.js · TypeScript · Drizzle ORM · PostgreSQL (Supabase) · Auth.js · Cloudflare R2 · Sentry

MICHA

A meal ordering and billing system for hospitals, schools, offices and companies: menus, sign-ups with cut-off times, monthly billing and serving lists. A single Go binary serves both the API and the embedded React UI.

  • A modular monolith in Go: sqlc + PostgreSQL, goose, Domain Events; a single binary (Windows Service / Linux) or Docker.
  • Security and GDPR: JWT + refresh, argon2id, per-permission RBAC, audit log, rate limiting, CSRF, data erasure, retention.
  • React + Mantine panel as a PWA, sales and dish-popularity reports with CSV export, email notifications.

Go · PostgreSQL · sqlc · React · Mantine · Docker

Airbnb Clone

A full-stack property-rental platform (Airbnb clone) with a Java/Spring Boot backend: REST API, map search, bookings and tenant/landlord panels.

  • Backend: REST API in Spring Boot 3 (Java 21), Spring Data JPA + PostgreSQL, Liquibase, MapStruct, Maven.
  • Security: Spring Security + OAuth2/OIDC (Auth0), role-based access control (tenant/landlord).
  • Domain-driven design (DDD); Angular frontend with map-based search (Leaflet).

Java 21 · Spring Boot 3 · Spring Security · Spring Data JPA · Angular · PostgreSQL · Auth0 (OAuth2) · Liquibase · Maven

Price Watcher - Discord bot

A Discord bot tracking product prices in online shops: on-demand and scheduled checks, price history, thresholds and price-drop alerts. Products and sources are configured with a plain DM - no code changes, no restart.

  • robots.txt-aware scraping, scheduling, slash commands; in production on Docker.

TypeScript · discord.js · cheerio · croner · Docker

Termin Prawka - Discord bot

A Discord bot alerting about free driving-test slots: mObywatel sign-in from a DM (Playwright), checks across several exam centres within the portal's rate limits. Running in production.

TypeScript · discord.js · Playwright · Docker · Tailscale

MAKO Security - Discord bot

A custom Discord bot keeping order on the MAKO server (~3000 members): role-ping moderation with exempt lists. Built, deployed, hosted and iterated on at the client's request.

  • TypeScript + discord.js v14, containerized (Docker), event-driven architecture.
  • Post-launch care and further development on the client's request.

TypeScript · discord.js · Node.js · Docker

Languages

Polish (Native) · English (C1) · Italian (B1)

Interests

Cybersecurity and homelab (Proxmox) · Optimization and automation · Sport, team and board games, puzzles

I hereby consent to the processing of my personal data contained in this CV for the purposes of current and future recruitment processes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).