AFSHIN ARANI
Copenhagen, Denmark — available to talk

I build systems that are not allowed to fail.

Senior software engineer and solutions architect. A decade of .NET, distributed systems and cloud platforms — most of it inside a regulated bank, where an outage is not a bug report but a regulatory event.

I am self-taught, I read specifications and C source for fun, and everything I can show you publicly is open source.

[email protected] GitHub — @aarani LinkedIn
Afshin Arani
10 yrs
Production .NET, most of it in regulated environments
235
Merged pull requests across open-source projects
2016
Shipping open source continuously ever since
0
Formal CS degree. Everything here was learned by building it
Core expertise

Languages & runtime

  • C# — primary, since 2014
  • F# — production, at scale
  • .NET / ASP.NET / gRPC
  • Golang
  • C and C++
  • TypeScript, SQL

Distributed systems

  • High-throughput services
  • Grid computing, load scheduling
  • Master/worker architectures
  • Concurrency and performance work
  • Protocols from specification
  • Distributed caching

Cloud & platform

  • AWS — EKS, networking, IAM
  • Kubernetes, Cilium, Envoy
  • Terraform — incl. custom providers
  • Pulumi, Cloud-Init, OpenShift
  • GitHub, GitLab, Azure DevOps CI/CD
  • Internal developer platforms

Security

  • PKI and certificate automation
  • Secure remote development
  • Hardened machine images
  • Applied cryptography
  • Vulnerability research
  • Regulated-environment approvals

Work

2026 —

Software Engineer P4

Danske Bank · Copenhagen
Quant engineering. Distributed compute scheduling on Kubernetes, secure remote development tooling with custom distributed caching and compilation, and hardened machine images built from scratch. I also interview and onboard.
2025 — 2026

Software Engineer, Cloud Specialist (Senior)

Danske Bank · Copenhagen & Vilnius
Cross-team technical accelerator for more than a hundred developers. Infrastructure-as-code tooling, department-wide platform standardisation, internal software distribution, and full ownership of two of the highest-criticality systems. Active in the DevOps Center of Excellence.
2024 — 2025

Solutions Architect

Danske Bank · Vilnius
Architected a transitional enclave for a bank-level public-cloud migration and carried it through its security approval process. Re-engineered a top-criticality service into a distributed architecture, raising throughput through concurrent processing.
2023 — 2024

Software Engineer, Cloud Specialist (Senior)

Danske Bank · Vilnius
Migrated and refactored seven mission-critical microservices, delivered a shared high-performance application framework now used across services, and drove company-wide CI/CD standardisation. Frequent hand in production incident mediation.
2020 — 2023

OSS Developer

NodeEffect Ltd · Hong Kong, remote
Bitcoin Lightning protocol and wallet logic, a Tor implementation in F#, a complete Lightning watchtower, polyglot C#/F# backends over ASP.NET and gRPC, and blue-green deployment automation with Pulumi and Cloud-Init.
Architecting on AWS AWS Technical Essentials AWS Security Fundamentals, 2nd ed.

Open source

Undocumented protocols, cryptography and build infrastructure. Read the code.

hpcc.dev

HPCC

Security-oriented distributed compilation and caching for large-scale C++ codebases, isolating every build in AWS Firecracker or Hyper-V microVMs. Written in Golang.

GolangFirecrackerHyper-V
Tor from spec

NOnion

The Tor network specification implemented in pure F# — no interop with C binaries, so it runs anywhere .NET does. Cryptography read off the spec and out of the C source.

F#CryptographyNetworking
Since 2016

TgSharp / TLSharp

A Telegram MTProto client in C#. Eight years of chasing an undocumented, moving protocol taught me code generation and reflection-based programming the hard way.

C#MTProtoCodegen
Lightning Network

DotNetLightning.Kiss

Core Lightning protocol and wallet logic in F#, including a complete watchtower implementation.

F#BitcoinLightning
Non-custodial wallet

geewallet

Lightning support inside a cross-platform F# wallet — the protocol work above, put in front of real users.

F#WalletCross-platform
Also a critical vulnerability reported to GitLab through HackerOne. See all repositories

Writing

Notes on protocols, .NET internals and infrastructure that misbehaves.

Firecracker, part four: BusyBox init, SquashFS, and a day lost to systemd

Replacing a fragile init, building rootfs images in Docker, and ending up exactly where I started — but better.

Firecracker, part three: a request's journey through MangoFaaS

Gateway to Kafka to a microVM and back over vsock — with the first cold-start numbers.

Firecracker, part two: one rootfs, many microVMs

OverlayFS, sparse writable layers, and how to stop a not-so-micro VM running out of disk.

Firecracker, part one: getting a microVM to boot

What Firecracker actually is, why it isn't a container, and the unglamorous work of a first boot.
Get in touch
[email protected]
Phone
+45 60 13 10 54
GitHub
@aarani
LinkedIn
in/afshinarani
Based in
Copenhagen, Denmark

A CV is available on request — I share it privately rather than publishing it.