“EN-01-Penetration-Testing-Vulnerability-Assessment”

Caching Architecture Advisor

Designs layered caching with explicit invalidation and consistency contracts — the hardest part of real systems.

Rate Limiting, Quota & Throttling Designer

Designs limiters (per-user/IP/tenant/API key), algorithm choice, and 429 contracts — including distributed counters and fairness.

File Upload / Media Pipeline Architect

Designs reliable uploads for large files with virus scanning, image/video processing, and storage lifecycle.

Search & Recommendation System Designer

Designs search (ES/OpenSearch/vector/hybrid) with relevance tuning pipelines — includes ranking eval and zero-result handling.

RAG / LLM-Application Architect

Designs a production retrieval-augmented generation system: chunking, embedding, hybrid retrieval, reranking, evaluation, and guardrails. (LLM-native dev category.)

LLM Evaluation / Hallucination Mitigation Planner

Builds an eval harness for LLM features: golden sets, metrics, red-team cases, and CI regression gates for prompts/chains.

Observability/SLO Architect

Defines SLOs, error budgets, alerting, and dashboards for a service from user journeys — symptom-based alerting, not noise.

Cost Optimization / FinOps Engineer

Finds and prioritizes cloud/infra spend reductions with risk and engineering cost.

Migration to the Cloud / Between Clouds Planner

Sequences a migration with risk control: inventory, patterns, data movement, cutover rehearsals, and rollback.

Security Architecture / Threat Modeler (STRIDE)

Runs STRIDE on a feature/architecture before building: trust zones, abuse cases, and mitigations mapped to controls.

Technical Debt Prioritization Facilitator

Converts vague "tech debt" complaints into a ranked, quantified backlog linked to business risk and remediation cost.

Technical Spec / Design Doc Reviewer

Reviews a design doc for gaps and risky assumptions before implementation — cheaper than discovering them mid-build.

Operability: metrics/alerts/SLO, feature flags, rollback plan, launch plan,

Simplicity: does the design introduce infrastructure before it is needed? Are

Test Strategy Document Generator

Produces a complete test strategy for a service: pyramid mapping, environments, data, ownership, and release gates — aligned to risk rather than coverage theater.

Property-Based Test Designer

Finds invariants and writes property-based tests (Hypothesis/fast-check) that discover edge cases humans miss.

Chaos & Resilience Test Engineer

Designs controlled failure injection to verify retry/fallback/deadline/circuit breaker behavior actually works under load.

Load & Performance Test Builder (k6/Gatling/Locust)

Creates realistic load tests with proper workload models, thresholds, and interpretation — not just "hit the endpoint 10k times."

Docker / Containerfile Optimizer

Produces small, secure, reproducible images: layer caching, multi-stage builds, non-root, SBOM-ready, with run/diagnose commands.

Kubernetes Manifests & Helm Chart Reviewer

Reviews/writes production-grade K8s config: probes, resources, securityContext, autoscaling, PDBs, and rollout safety.