Ignacio Vigna
Computer Engineer (UdelaR) · Systems Team Leader at Netuy & Software Architect
Senior Software Engineer & Systems Architect focused on web systems architecture, multi-tenant SaaS platforms, Linux/Docker infrastructure, applied artificial intelligence (RAG), and real-time IoT hardware integrations. I currently serve as Systems Team Leader at Netuy and am the creator and architect of EzDIS and EzGYM, two production SaaS platforms designed and operated end-to-end: from data modeling, REST APIs, and mobile-first SPAs to multi-country electronic invoicing, AI conversational agents, and self-hosted Proxmox/Docker clusters.
Multi-Tenant SaaS
2 production platforms (EzDIS & EzGYM) with isolated per-tenant databases
Multi-Country & Tax
Electronic invoicing engines (DGI, ARCA/AFIP, SUNAT, Focus NFe), MercadoPago, PayPal & 4 languages
Applied AI & RAG
Python, FastAPI, Qdrant, Ollama & Whisper integrated with live business data & WhatsApp
Infrastructure & IoT
Self-hosted Proxmox/Docker cluster, ZKTeco ADMS, MQTT Mosquitto & GPS Traccar protocols
Technical Specialization
End-to-End Software Engineering & Architecture
Hands-on experience across the entire software lifecycle: systems architecture, technical leadership, full-stack development, distributed systems, applied AI, networking, and production infrastructure.
Backend Architecture & Multi-Tenant Systems
Design of RESTful APIs and enterprise applications in PHP 8 / Laravel and Python / FastAPI. Multi-tenancy with physical database isolation (MariaDB), high-throughput asynchronous job processing with Redis / Horizon, real-time WebSockets (Reverb), electronic tax invoicing, and automated payment reconciliation.
Modern Frontend, SPAs & Web Applications
Reactive interfaces built with Vue 3 (Composition API), TypeScript, Pinia, Livewire, Alpine.js, and Tailwind CSS. Progressive Web Apps (PWA), real-time interactive maps with Leaflet / OpenStreetMap, and technical SEO / Core Web Vitals optimization across 4 languages.
Applied Artificial Intelligence & RAG Systems
Production deployment of Retrieval-Augmented Generation (RAG) assistants and LLM tool-calling pipelines. Vector indexing in Qdrant for tenant documents (PDF, Word, text), self-hosted inference with Ollama or cloud LLMs, voice transcription with Whisper, and conversational orchestration over WhatsApp Business (Twilio).
Linux Infrastructure, Networking, Testing & IoT Protocols
Administration of Linux (Ubuntu / Alpine) servers, bare-metal virtualization on Proxmox VE, Docker containers, Nginx reverse proxies, perimeter security with OPNsense, WireGuard VPN, and Cloudflare WAF, encrypted backups on AWS S3, and automated test suites (PHPUnit, Vitest, Playwright). Direct hardware protocol integration (ZKTeco ADMS, MQTT Mosquitto, GPS Traccar).
Computer Engineer (Ingeniero en Computación) — Universidad de la República (UdelaR)
Facultad de Ingeniería (FING), Montevideo, Uruguay
Production Product Architecture
EzGYM: how it is architected and what technical challenges it solves
The Product & Domain
EzGYM is a comprehensive SaaS management platform for gyms, fitness centers, and sports academies. It automates recurring membership invoicing, online payments via MercadoPago and PayPal, automated late fees, and WhatsApp notifications.
It also includes mobile workout routines, electronic document signatures, and direct cloud connectivity with ZKTeco biometric time clocks without requiring a local PC.
Multi-Tenant Design & Scalability
Each gym runs on its own subdomain (client.ezgym.net) with physical MariaDB database isolation powered by Spatie Multitenancy.
The Laravel backend exposes a REST API consumed by a Vue 3 + TypeScript SPA, while Python/FastAPI + Ollama + Qdrant AI services enable natural-language queries across business metrics and tenant documents.
EzDIS (ezdis.net)
Commercial management, multi-country electronic invoicing, accounts receivable, stock control, and delivery fleet logistics.
EzGYM (ezgym.net)
Gym and fitness center management platform with automated recurring billing, workout routines, and biometric access control.
ZKTeco Cloud Server
Native ADMS protocol implementation receiving real-time biometric attendance punches, live serial tester, and client-side .dat parser.
Cold-Chain Telemetry
Authenticated Mosquitto MQTT broker per sensor (Shelly, ESPHome, Tasmota, LoRaWAN) with minute-by-minute ingestion and power-outage detection.
GPS Fleet Telemetry
Direct TCP/UDP integration with 2,100+ GPS tracker models, geofencing, trip telemetry, driver scoring, and route optimization.
Technical Documentation
System manuals in 4 languages (ES, EN, PT-BR, FR) with an embedded AI assistant grounded on the documentation.
Technical Architecture
Technology Stack & Infrastructure
Select any technology below to inspect how it is implemented across the architecture.
Laravel
Core backend framework for APIs and domain logic: multi-tenant architecture with Spatie Multitenancy, DTOs, asynchronous queues, electronic invoicing, and role-based access control.
Vue.js
Frontend application: mobile-first SPA built with Vue 3 (Composition API), Vant UI, and Vue Router. The same core powers both EzGYM and EzDIS.
TypeScript
Static typing across the Vue 3 frontend to enforce strict data contracts and catch errors at compile time.
Pinia
Reactive state management for the frontend: session state, country-specific configuration, permissions, and cross-module synchronization.
Livewire
Multilingual public portals, interactive hardware diagnostic tools, and tenant onboarding flows on ezgym.net and ezdis.net.
AlpineJS
Lightweight browser reactivity: client-side file parsers, SMS configuration generators, and interactive UI components.
Tailwind CSS
Responsive design system optimized for both field mobile devices and desktop administrative dashboards.
PWA
Installable Progressive Web App on Android, iOS, and desktop directly from the browser with a native-like experience.
Reverb
Low-latency WebSocket server: biometric attendance punches, telemetry events, and payments update open screens in real time.
Horizon
Redis queue orchestration and observability: WhatsApp notifications, recurring invoicing, temperature alerts, and webhooks.
Python
AI engine microservices: LLM tool-calling orchestration, document ingestion pipelines, and data processing.
FastAPI
Asynchronous API for the AI decision engine connecting language models with each tenant’s database and operational tools.
Ollama
Self-hosted Large Language Model (LLM) inference, preserving strict privacy for financial and commercial tenant data.
Qdrant
Vector database for Retrieval-Augmented Generation (RAG): indexes tenant-isolated documents, policies, and manuals.
Whisper
Self-hosted speech-to-text transcription service to process voice notes in conversational WhatsApp workflows.
Claude
AI-assisted engineering workflows for static analysis, automated test suite design, and continuous refactoring.
Leaflet
Real-time cartographic visualization: customer geocoding, live GPS fleet telemetry, geofencing, and route playback.
OpenStreetMap
Self-hosted geospatial stack integrating Nominatim (geocoding), OSRM (road routing), and VROOM (vehicle routing problem optimization).
MercadoPago
Payment processing and recurring subscriptions across Latin America with automated reconciliation via signed webhooks.
PayPal
International payment processing and multi-currency subscription billing with automated ledger reconciliation.
Twilio
WhatsApp Business API integration for transactional notifications, delivery/read receipt tracking, and automated assistants.
Biller
Electronic tax invoicing (e-Tickets, e-Invoices, credit/debit notes) with DGI Uruguay, alongside ARCA/AFIP, SUNAT, and Focus NFe.
Docker
Full service containerization (Nginx, PHP-FPM, MariaDB, Redis, Traccar, Mosquitto, OSRM, VROOM, Documenso) with environment parity.
Alpine Linux
Minimal, hardened container base images to reduce resource footprint and attack surface in production.
Ubuntu
Operating system for Linux virtualization, storage, and production workload servers.
Proxmox
Bare-metal virtualization on Proxmox VE managing virtual machines, containers, and isolated virtual networks.
OPNsense
Perimeter firewall, subnet segmentation, filtering policies, and routing for the self-hosted infrastructure.
Wireguard
Point-to-point cryptographic VPN for secure remote administration and private inter-node communication.
Cloudflare
Anycast DNS management, WAF, DDoS mitigation, SSL/TLS certificates, and geo-routed country traffic.
Nginx
High-performance reverse proxy, TLS termination, and routing for HTTP, WebSockets, and ZKTeco ADMS traffic.
MariaDB
LTS relational database engine with isolated per-tenant schemas and automated multi-tenant migrations.
Redis
In-memory data store for distributed caching, sessions, rate limiting, atomic locks, and job queues.
Amazon S3
Object storage and encrypted daily off-site backups for disaster recovery.
Gitea
Self-hosted private Git server for repository management, submodules, and continuous integration workflows.
Passbolt
Centralized infrastructure secrets and credentials management backed by GPG encryption.
Swagger
OpenAPI documentation and specification for backend RESTful endpoints.
Vite
Frontend build and bundling toolchain with chunk optimization and Hot Module Replacement.
Vitest
Automated unit and integration testing across Vue 3 components, composables, and Pinia stores.
Playwright
End-to-End (E2E) test suite running in real browsers to validate complete business workflows.