Skip to content
View mcoldibelli's full-sized avatar

Highlights

  • Pro

Block or report mcoldibelli

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mcoldibelli/README.md

Marcelo A. B. Coldibelli

Backend Engineer · Financial Systems · Java Ecosystem

Building distributed, compliant systems for financial environments — from legacy fiscal engines to cloud-native Open Finance APIs.

LinkedIn Email Codaline


Focus

My background spans enterprise Java at a Brazilian ERP/fiscal software company and greenfield microservices targeting financial regulation compliance. I'm drawn to problems where correctness is non-negotiable: payment reconciliation, identity federation, API security, and distributed system reliability under financial-grade constraints.


Featured Projects

Project What it does Stack
open-finance FAPI 1.0 API Gateway with mTLS, certificate-bound tokens (RFC 8705), JTI anti-replay, consent lifecycle management and CNAB240/CIP banking reconciliation engine Java 21 · Spring Cloud Gateway · Spring Cloud Config · Spring Batch · Redis · Kafka · Docker · Maven
Biked IoT system that turns a spinning bike into smart connected equipment ESP32 · MQTT · Spring Boot · RabbitMQ
FlightIssues Micro SaaS — generates EC 261/2004 flight compensation claim letters; structured passenger input → regulation-compliant PDF artifact, one-time payment React · Supabase · Stripe · React PDF

Financial Systems Experience

Open Finance Brasil — FAPI 1.0 Compliance [open-finance]

  • API Gateway with ordered filter chain: mTLS validation → JTI anti-replay → consent authorization → rate limiting
  • Certificate-bound access tokens per RFC 8705 (cnf.x5t#S256 thumbprint binding)
  • JTI replay prevention via Redis atomic SETNX with TTL anchored to JWT lifetime (fail-closed on Redis unavailability)
  • CNAB240/CIP reconciliation engine with Spring Batch
  • Reactive pipeline (Project Reactor) with security-safe error boundaries

Brazilian Fiscal Systems — PHD Sistemas

  • NF-e, CT-e and NFS-e generation, signing and transmission
  • PL/SQL stored procedures for fiscal calculation engines on Oracle DB
  • JWT security library across interconnected Java monoliths (RS256, JWKS endpoint, servlet filters, SOAP handlers)

Tech Stack

Java Spring Boot Angular React Python Docker PostgreSQL Oracle Redis Kafka RabbitMQ ESP32

The more we automate, the more human we must become — Ginni Rometty

Pinned Loading

  1. biked biked Public

    Biked is a Open-source IoT firmware for spinning bikes. Ride smarter, not just harder.

    Java

  2. infra-runners infra-runners Public

    Ansible playbooks to provision and remove GitHub Actions self-hosted runners on Proxmox LXC containers, connected over a Tailscale network.

  3. rpa-holiday rpa-holiday Public

    A RPA solution that reads Excel file and scrapes for holiday data on a website.

    Java

  4. vind vind Public

    Vind — Because great moments shouldn't be buried in long videos. Self-hosted highlight extractor from any URL. Vine is not dead.

    Python