About Me
I'm Alex aka maxeoneo, a software engineer and technical leader with 15+ years of experience, 10+ of them designing and delivering large-scale Android and cross-platform applications. My work is driven by a strong focus on performance, privacy, and developer enablement.
With deep expertise in Kotlin, WebView/native bridging, CI/CD, and architectural transformation, I’ve led cross-functional teams, scaled developer platforms, and shipped user-focused solutions in high-impact environments.
Over the years, I’ve developed a strong passion for mobile and application security. This includes hands-on experience with Android system hardening, secure WebView integration, and hybrid/native sandboxing strategies. I actively stay up to date on modern security principles and platform defenses through continuous self-education.
🚀 Own Apps
Available on Google Play:
After Google closed my old developer account in 2025, I moved all apps to a new developer account.
🛠 Skills
- Languages: Kotlin, Java, TypeScript/JavaScript, C++, Python, SQL, Rust
- Mobile: Android, Jetpack Compose, Kotlin Multiplatform Mobile (KMM), WebView, JNI, Qt, Angular
- Architecture: Clean Architecture, Modularization, Native/Web API design
- APIs & Auth: REST, GraphQL, OAuth2/OpenID Connect (FusionAuth)
- Build & Tooling: Gradle, CMake, Git, Jenkins, GitHub Actions, Docker, Appium, AWS Device Farm
Security Experience & Interests
- Applied secure coding practices in WebView/native bridging, including permission gating, input validation, and lifecycle isolation.
- Hands-on experience with Android Device Owner mode for enterprise-grade app management and kiosk deployments.
- Familiar with Android platform security models such as sandboxing, SELinux, permission scopes and scoped storage.
- Debugged WebView networking down to the request level: CORS, native request proxying and a long-standing WebView bug (see the blog).
- Ongoing personal study in Android malware analysis, network interception and hybrid app threat modeling, plus security wargames such as OverTheWire.
📈 Selected Projects
- Authentication Migration to FusionAuth
Migrated the apps' authentication to FusionAuth, built on OAuth2 and OpenID Connect.
- Open Source: Android Request Inspector WebView
Contributed fixes to a library that intercepts HTTP requests from Android WebViews: a race condition in the injected JavaScript, a scoping bug in fetch header injection, configurable request matchers and locale-independent header casing. The background is in my blog series.
- Hybrid App Platform Migration
Led the transformation of native
Android and iOS apps to a hybrid model using Angular within WebView. Designed and maintained secure native APIs, optimized performance and lifecycle integration, and enabled seamless cross-platform feature delivery.
- Automated Testing Infrastructure
Built automated testing pipelines for a web apps running within a WebView on mobile apps using Appium and AWS Device Farm. Reduced manual QA time and improved confidence in release cycles across multiple teams and hardware-dependent features.
- Kotlin Multiplatform Migration
Developed a Kotlin Multiplatform prototype to replace Qt-based apps. Created cross-target components for Android, iOS, and JVM. Investigated hybrid coexistence strategy to enable phased migration.
- Food Quality Control App
Designed and developed Android-first app for food quality assurance with device management, REST synchronization, and global deployment across 5,000+ devices.
- Android Device Owner Deployment
Engineered Android app deployments for Testo tablets in kiosk / device-owner mode, enabling secure administration, controlled updates, and remote app management. Designed the rollout process for mass configuration in production environments.
💼 Philosophy
Building software that empowers users and teams through clean design, reliability, and robust architecture.