PORTFOLIO
Communications & Platform Engineering
SIP telephony servers and the softphones that register against them, a self-hosted private network estate, a video platform, and the backend tooling the rest of this portfolio runs on.
The Systems Underneath the Systems
Much of this section exists because we needed it ourselves. A portfolio that spans four banks, several state platforms and a university estate cannot be run on somebody else’s hosted backend at somebody else’s price, and several of our clients cannot place their data outside their own control at all.
So we built the layer underneath. Self-hosted backend orchestration that provisions isolated environments on one machine, with credential generation, zero-downtime updates with health checks and rollback, encrypted backup and restore, and reverse proxy with certificate management. Offline-first synchronisation so an application keeps working on a local network with no internet at all, then reconciles.
The telephony work follows the same logic. Running our own SIP server stack means calling, presence, encrypted messaging and push wake-up behave the way we specified rather than the way a vendor’s roadmap decides, and a client who needs their voice traffic to stay on their own infrastructure can have exactly that.
Systems in this domain
SIP Server Stack
Telephony infrastructure
A production SIP server stack providing registration, audio and video calling, presence, encrypted one-to-one and group chat, push wake-up for both mobile platforms, media relay for network traversal, and self-service account provisioning.
eSystems Phone
Softphone
A cross-platform SIP softphone in Flutter registering against the stack above, with audio and video calling, one-to-one and group chat, presence and call history.
AeroVox WebRTC Client
Softphone
A secure WebRTC SIP client registering over encrypted websockets against an Asterisk cluster, built for stable registration and persistent traversal across wide-area networks.
TSATVoIP
Android telephony
A native Android voice-over-IP client for a dedicated deployment.
BrowsePoint VPN
Private networking
An Android client for a self-hosted private network estate. Registers automatically against the organisation’s own server on launch and routes traffic through it, so remote staff reach internal systems without a public exposure.
iTube
Video platform
A self-hostable, mobile-first vertical short-video platform. A monorepo pairing an API service and mobile client with a dedicated recommendation service and a transcoding pipeline that includes automated content-safety screening.
Self-Hosted Backend Tooling
Platform operations
Orchestration for multiple isolated self-hosted backend environments on one host: port multiplexing, secure credential generation, zero-downtime updates with health checks and rollback, encrypted backup and restore, and reverse proxy with automatic certificates. Paired with offline-first synchronisation so applications keep working with no internet connection.
Messaging & Proximity
Integration work
Business-initiated voice calling over a major messaging platform’s calling interface using real WebRTC session negotiation, plus a Bluetooth low-energy beacon broadcaster and scanner for proximity applications.
Technical detail
| System | Stack | Notable capability |
|---|---|---|
| SIP Server Stack | Flexisip, TURN and STUN relay, FCM and APNs push | Encrypted group chat and push wake-up on both platforms |
| eSystems Phone | Flutter | Audio, video, chat and presence in one client |
| AeroVox | Flutter, Riverpod, Dart WebRTC over secure websockets | Stable registration across changing networks |
| TSATVoIP | Native Android | Dedicated deployment client |
| BrowsePoint VPN | Android client against a self-hosted mesh server | Automatic enrolment with full traffic routing |
| iTube | NestJS, React Native Expo, Go recommendation service, FFmpeg pipeline | Transcoding with automated content-safety screening |
| Backend Tooling | Bash orchestration, Docker, Postgres, offline sync engine | Zero-downtime updates with health checks and rollback |
| Messaging & Proximity | WebRTC session negotiation, Flutter BLE | Business-initiated calling over a messaging platform |
Data that cannot leave your building
If regulation or policy stops you putting a system in someone else’s cloud, everything in this section was built to run on infrastructure you control.