Erik Stojković — Senior IT Business Analyst & Engineering Leader

EXECUTIVE DOSSIER // COVER STORY

Senior IT Business Analyst & Engineering Leader: The Power of the Hybrid Profile

The real edge in building software today is not just knowing syntax. It is the ability to take 20 years of understanding user needs, business logic, and banking security, step into the builder's shoes, and use AI tools like Gemini and Antigravity alongside modern cloud platforms to turn real problems into working production solutions.

Profile by Erik Stojković · Senior IT Business Analyst Slovenia & Engineering Leader

5 MIN READ

EXECUTIVE BRIEFING // IN 30 SECONDS ⚡ 30s Read

20-Year Hybrid Moat: 14 years in European payment schemes and card processing (Nexi, NLB), unified with modern frontend engineering leadership (Gamanza).
AI-Native Craftsmanship: Autonomous end-to-end delivery orchestrating Gemini, Antigravity, and Next.js from specification to production at $0.00/mo serverless scale.
Security & Governance First: Battle-tested PCI-DSS compliance, PostgreSQL Row-Level Security (RLS) enforcement, and zero-drift 5-point engineering discipline.

Explore Production Projects ↓

For twenty years, I worked with technology from the business, analytical, and leadership side — fourteen years in European card processing across global payment schemes (Mastercard, Visa, American Express) and PCI-DSS compliance at Nexi Group, five years at Gamanza (progressing from Technical Project Manager to Engineering Manager leading frontend teams), and today in core IT business analysis at NLB Bank. Leading a frontend team and jumping onto the AI engineering wave enabled a leap I had long aimed for: combining deep user understanding and security discipline with tools like Gemini, Antigravity, and modern frameworks (Next.js, Strapi CMS, React) to independently build and ship live production systems.

▾ Read Full Architectural Teardown & Incident Post-Mortem (Stojko Hub) 3 Min Deep Dive

In the development of Stojko Hub — the private operating system built for the entire family — that exact engineering discipline was put to the test. Unifying daily life into a coherent, multi-tenant digital hub, the platform integrates a personal nutrition and macro tracker, an intelligent meal prep and Sunday batch cooking engine, a Garmin health dashboard with AI-driven recovery analysis, and an automated GymBeam supplement scraper via MCP. Designed as a living system, future modules will orchestrate family hobbies and household chores scheduling — all running with zero monthly infrastructure waste while scaling seamlessly on demand.

$0.00

Monthly Infrastructure Cost

< 3.0s

Response Latency (Down from 60s+)

100%

PostgreSQL RLS Isolation

By splitting the Next.js 15 frontend on Vercel from Python FastAPI services on Google Cloud Run, the system scales to zero during idle hours. Migrating the Model Context Protocol (MCP) from legacy SSE to the modern stateless Streamable HTTP standard allowed microservices to sleep while guaranteeing instantaneous wakeups.

THE FILM ROOM // TACTICAL SCHEMAS

Sunday Batch Prep, Garmin AI Telemetry & GymBeam MCP

A 5x serving multiplier automatically scales shared family dinners while personal breakfast macros remain isolated at 1x. When cooking completes, an atomic PostgreSQL transaction transfers raw fridge inventory into freezer storage as individually portioned meals. Meanwhile, Python microservices on Google Cloud Run scrape live GymBeam supplement data via Model Context Protocol (MCP) and synthesize real-time Garmin recovery telemetry without cross-exposing private biometric records.

Next.js 15 FastAPI (Python) PostgreSQL RLS Google Cloud Run GymBeam MCP Garmin AI Telemetry

Hardening systems into a PCI-DSS compliant architecture: when an exposed service-role credential was discovered during an internal security audit, we ran a textbook incident response — rotated all production keys, audited 3 silently open tables, and rebuilt the authentication layer around JWT session tokens enforced strictly at the database layer.

EXECUTIVE BY-THE-NUMBERS // ARCHITECTURAL PILLARS

The Four Pillars of the 20-Year Hybrid Moat

BATTLE-TESTED CAPABILITIES

20+ Years Experience Business & Engineering

14 Yrs Payment Schemes Nexi · MC / Visa / Amex

$0.00 Monthly Cloud Waste Scale-to-zero Cloud Run

100% Security Isolation PostgreSQL RLS & Zero-Drift

FinTech & Core Banking Governance

14 years in European card processing across Mastercard, Visa, and American Express at Nexi Group. ISO 20022 payment messaging, SEPA clearing, transaction lifecycle governance, and NLB core banking modernization.

Engineering Management & Agile Velocity

5 years at Gamanza progressing from Tech PM to Frontend Engineering Manager. Leading squads, continuous delivery velocity, stakeholder alignment, and IPMA Level C / Scrum Alliance CSM® accreditation.

AI-Native Agentic Craftsmanship

Directing Google Gemini Pro and Antigravity multi-agent systems to take complex enterprise requirements independently from specification to live production. Stateless MCP protocols and modern Next.js 15 / FastAPI.

PCI-DSS Security & Zero-Drift Principles

PCI-DSS compliant architecture, database-enforced PostgreSQL Row-Level Security (RLS), cryptographic key rotations, and strict 5-point engineering discipline: zero guess output, zero live migration drift.

PRESS WIRE // GET IN TOUCH

Always happy to connect with fellow engineers, builders, and curious minds — whether to swap ideas, talk shop, or simply say hello. Drop a line below.

Executive Briefing // The Hybrid Moat ⚡ 30-Second Summary

20-Year Institutional Governance: 14 years governing European payment schemes and card processing (Nexi, NLB) unified with high-velocity engineering management (Gamanza).
AI-Native Craftsmanship: Autonomous end-to-end delivery orchestrating Gemini, Claude, and Next.js 15 from architectural specification to production at $0.00/mo serverless scale.
Security & Regulatory Rigor: PCI-DSS Level 1 compliance, PostgreSQL Row-Level Security (RLS) enforcement, ISO 20022 messaging, and zero-drift engineering discipline.

When building modern banking and enterprise systems, writing raw code is no longer the main bottleneck — understanding user needs, architectural intent, and security compliance are. My advantage is combining 20 years of banking and card-processing experience with modern AI tools to deliver reliable production solutions.

Institutional Career Arc 20-Year Track Record

NLB d.d. (Nova Ljubljanska Banka) 2025 – Present

Senior IT Business Analyst · Core Banking Architecture

Core banking modernization, regulatory compliance, and systemic IT analysis for Slovenia's largest banking group.
Bridge enterprise business requirements with technical architecture, ensuring high availability and zero operational drift.

Gamanza Group 2020 – 2025 · 5 Years

Engineering Manager (2023–2025) & Technical Project Manager (2020–2023)

Advanced from Technical Project Manager to Engineering Manager, leading cross-functional agile development teams.
Directed high-velocity delivery of regulatory-compliant player platforms, CI/CD pipelines, and modular frontend architectures.

Nexi Group (formerly Intesa Sanpaolo Card & Banka Koper) 2006 – 2020 · 14 Years

Senior Technical & Payment Systems Analyst

14-year career progression across corporate succession (Banka Koper ➔ Intesa Sanpaolo Card ➔ Nexi Group).
Governed card processing across Mastercard, Visa, and American Express European payment schemes.
Led ISO 20022 migration initiatives, transaction clearing/settlement, and PCI-DSS Level 1 compliance audits.

Core Competency Matrix Enterprise Domains

1. Payment Schemes & Core Banking

Mastercard, Visa, American Express, SEPA, ISO 20022 messaging, clearing & settlement, multi-currency authorizations, core banking migration, transaction reconciliation.

2. Security, Audit & Compliance

PCI-DSS Level 1 compliance, PostgreSQL Row-Level Security (RLS) enforcement, zero-trust architecture, GDPR privacy standards, audit trail governance.

3. AI-Native Software Craftsmanship

Next.js 15 (App Router), Python FastAPI, Google Cloud Run, Supabase, Google Gemini, Claude, Antigravity orchestration, Model Context Protocol (MCP).

4. Executive Delivery & Governance

Agile & Scrum leadership, cross-functional engineering velocity, stakeholder alignment, requirement traceability, risk-weighted change management.

Executive Profile Dimensions Strategic Attributes

Risk-Aware Engineering Leadership

Over two decades handling mission-critical financial transactions with zero tolerance for security breaches, unverified outputs, or compliance regressions.

Deterministic Software Architecture

Clean separation of concerns: scale-to-zero serverless backends, stateless microservices, strong typing, and deterministic test-driven validation suites.

Erik Stojković // Architecture, Governance & Accreditations

Page 2 of 2 · Boardroom Briefing

Enterprise Banking Milestones Proven Track Record

14-Year Scheme Processing Track Record Nexi · ISP Card · Banka Koper

Managed end-to-end card scheme compliance and payment authorization lifecycles across Mastercard, Visa, and American Express European payment schemes, delivering robust uptime and regulatory alignment (2006–2020).

PCI-DSS Level 1 & Security Compliance Zero-Drift Security

Executed rigorous PCI-DSS Level 1 audit controls, network segmentation, and credential hardening for cardholder data environments across multi-national payment networks.

ISO 20022 Financial Messaging Transformation Core Modernization

Directed business requirements and architectural translation from legacy SWIFT/MT messaging into modern XML-based ISO 20022 MX protocols for systemic banking workflows.

Modern Architecture Proof Production Blueprint

Stojko Hub Multi-Tenant Platform

Scale-to-Zero Cloud

Next.js 15 (Vercel) · Python FastAPI (Cloud Run) · PostgreSQL (Supabase RLS)

Architected and deployed a multi-tenant cloud application with autonomous microservices. Achieves a true $0.00/month idle footprint by leveraging Google Cloud Run scale-to-zero containers, sub-3.0s P99 latency, and strict Supabase PostgreSQL Row-Level Security (RLS) credential rotation.

Five Immutable Engineering Disciplines Operational Creed

1. Immutable Shared Git History: Never rewrite or force-push shared history; always fix forward with incremental semantic releases.
2. Database Migration Safety: No blind or unreviewed live database mutations; draft, review, and dry-run all DDL statements.
3. Authentic Output Verification: Strictly empirical verification; never present predicted or guessed outputs as executed results.
4. Credential & Secret Hygiene: Never hardcode secrets in code or chat; rely on environment variables and zero-trust token flows.
5. Strict Scope Control: Maintain laser-focused boundaries; never silently introduce unreviewed architectural drift.

Board Accreditations & Credentials Verified Badges

IPMA Level C Certified Project Manager

Certified ScrumMaster® Scrum Alliance® (CSM®)

Cloud Architecture Google Cloud Run & Serverless

Enterprise Alumni NLB · Nexi Group · Gamanza

Direct Executive Channels Confidential Inquiries

CURRENT ROLE: Senior IT Business Analyst, NLB d.d.

LOCATION: Koper, Slovenia 🇸🇮 (Adriatic Coast · Remote Ready)

EMAIL: erik@stojko.si

LINKEDIN: linkedin.com/in/erikstojkovic

CANONICAL ASSET: https://stojko.si

ERIK STOJKOVIĆ: SPECIAL EDITION

Senior IT Business Analyst & Engineering Leader: The Power of the Hybrid Profile

Sunday Batch Prep, Garmin AI Telemetry & GymBeam MCP

The Four Pillars of the 20-Year Hybrid Moat

FinTech & Core Banking Governance

Engineering Management & Agile Velocity

AI-Native Agentic Craftsmanship

PCI-DSS Security & Zero-Drift Principles

SPORTS & TELEMETRY DESK

Basketball Analytics Dashboard

Lights Out: F1 Reaction PWA

Garmin Strength & Health Resolver

MARKET & SPATIAL DATA DESK

Local Market Radar

StojkoDoku Android App

Specification-Driven AI Engineering

LOCAL & FAMILY ROOTS DESK

Studio 100 Salon Koper

Pralnica Koper Laundromat

Stojko Creative Hub

Videocenter Koper ↗

SCOUTING REPORT: CAPABILITIES

Two Decades on Both Sides of the Table

01 // WEB & FRONTEND

02 // BACKEND, CLOUD & AI

03 // BANKING & GOVERNANCE

Cryptographically Verified Credentials & Board Accreditations

Google Cloud: Cloud & AI Architecture (Exam Candidate)

IPMA Level C: Certified Senior Project Manager

Certified ScrumMaster® (CSM®)