Erik Stojković — Senior IT Business Analyst & Engineering Leader

EXECUTIVE DOSSIER // COVER STORY

Senior IT Business Analyst & Engineering Leader: The Power of the Hybrid Profile

The competitive edge in modern engineering is not merely knowing syntax. It is the hybrid capability to understand business architecture, regulatory security, and institutional governance — and then using Gemini, Antigravity, and React to independently drive mission-critical solutions from idea to production.

Profile by Erik Stojković · Senior IT Business Analyst Slovenia & Engineering Leader

5 MIN READ

EXECUTIVE BRIEFING // IN 30 SECONDS ⚡ 30s Read

20-Year Hybrid Moat: 14 years in European payment schemes and card processing (Nexi, NLB) unified with modern frontend engineering leadership (Gamanza).
AI-Native Craftsmanship: Autonomous end-to-end delivery orchestrating Gemini, Antigravity, and Next.js from specification to production at $0.00/mo serverless scale.
Security & Governance First: Battle-tested PCI-DSS compliance, PostgreSQL Row-Level Security (RLS) enforcement, and zero-drift 5-point engineering discipline.

Explore Production Projects ↓

When technology executives evaluate software engineering in 2026, raw code generation is no longer the bottleneck — architectural intent, business acumen, and security governance are. Across twenty years on both sides of the table — fourteen years in European card processing across global payment schemes (Mastercard, Visa, American Express) and PCI-DSS compliance at Nexi Group, five years at Gamanza (progressing from Technical Project Manager to Engineering Manager leading frontend teams), and core IT analysis at NLB Bank — my true edge is the hybrid profile: understanding business dilemmas, data architecture, and regulatory security, and then orchestrating frontier AI tooling like Gemini, Antigravity, and modern headless stacks (Next.js, Strapi CMS, React) to independently bring solutions from initial concept to live production.

▾ Read Full Architectural Teardown & Incident Post-Mortem (Stojko Hub) 3 Min Deep Dive

In the development of Stojko Hub — the private operating system built for the entire family — that exact engineering discipline was put to the test. Unifying daily life into a coherent, multi-tenant digital hub, the platform integrates a personal nutrition and macro tracker, an intelligent meal prep and Sunday batch cooking engine, a Garmin health dashboard with AI-driven recovery analysis, and an automated GymBeam supplement scraper via MCP. Designed as a living system, future modules will orchestrate family hobbies and household chores scheduling — all running with zero monthly infrastructure waste while scaling seamlessly on demand.

$0.00

Monthly Infrastructure Cost

< 3.0s

Response Latency (Down from 60s+)

100%

PostgreSQL RLS Isolation

By splitting the Next.js 15 frontend on Vercel from Python FastAPI services on Google Cloud Run, the system scales to zero during idle hours. Migrating the Model Context Protocol (MCP) from legacy SSE to the modern stateless Streamable HTTP standard allowed microservices to sleep while guaranteeing instantaneous wakeups.

THE FILM ROOM // TACTICAL SCHEMAS

Sunday Batch Prep, Garmin AI Telemetry & GymBeam MCP

A 5x serving multiplier automatically scales shared family dinners while personal breakfast macros remain isolated at 1x. When cooking completes, an atomic PostgreSQL transaction transfers raw fridge inventory into freezer storage as individually portioned meals. Meanwhile, Python microservices on Google Cloud Run scrape live GymBeam supplement data via Model Context Protocol (MCP) and synthesize real-time Garmin recovery telemetry without cross-exposing private biometric records.

Next.js 15 FastAPI (Python) PostgreSQL RLS Google Cloud Run GymBeam MCP Garmin AI Telemetry

Hardening systems into a PCI-DSS compliant architecture: when an exposed service-role credential was discovered during an internal security audit, we ran a textbook incident response — rotated all production keys, audited 3 silently open tables, and rebuilt the authentication layer around JWT session tokens enforced strictly at the database layer.

PRESS WIRE // GET IN TOUCH

Always happy to connect with fellow engineers, builders, and curious minds — whether to swap ideas, talk shop, or simply say hello. Drop a line below.

Executive Briefing // The Hybrid Moat ⚡ 30-Second Summary

20-Year Institutional Governance: 14 years governing European payment schemes and card processing (Nexi, NLB) unified with high-velocity engineering management (Gamanza).
AI-Native Craftsmanship: Autonomous end-to-end delivery orchestrating Gemini, Claude, and Next.js 15 from architectural specification to production at $0.00/mo serverless scale.
Security & Regulatory Rigor: PCI-DSS Level 1 compliance, PostgreSQL Row-Level Security (RLS) enforcement, ISO 20022 messaging, and zero-drift engineering discipline.

When modern enterprise technology scales, raw code generation ceases to be the bottleneck — governance, architectural intent, and regulatory compliance are. My focus is closing the systemic gap between institutional banking security and high-velocity modern software craftsmanship: resolving complex financial dilemmas and data architectures, then orchestrating frontier AI tooling and deterministic serverless systems to deliver mission-critical platforms with zero operational compromise.

Institutional Career Arc 20-Year Track Record

NLB d.d. (Nova Ljubljanska Banka) 2025 – Present

Senior IT Business Analyst · Core Banking Architecture

Core banking modernization, regulatory compliance, and systemic IT analysis for Slovenia's largest banking group.
Bridge enterprise business requirements with technical architecture, ensuring high availability and zero operational drift.

Gamanza Group 2020 – 2025 · 5 Years

Engineering Manager (2023–2025) & Technical Project Manager (2020–2023)

Advanced from Technical Project Manager to Engineering Manager, leading cross-functional agile development teams.
Directed high-velocity delivery of regulatory-compliant player platforms, CI/CD pipelines, and modular frontend architectures.

Nexi Group (formerly Intesa Sanpaolo Card & Banka Koper) 2006 – 2020 · 14 Years

Senior Technical & Payment Systems Analyst

14-year career progression across corporate succession (Banka Koper ➔ Intesa Sanpaolo Card ➔ Nexi Group).
Governed card processing across Mastercard, Visa, and American Express European payment schemes.
Led ISO 20022 migration initiatives, transaction clearing/settlement, and PCI-DSS Level 1 compliance audits.

Core Competency Matrix Enterprise Domains

1. Payment Schemes & Core Banking

Mastercard, Visa, American Express, SEPA, ISO 20022 messaging, clearing & settlement, multi-currency authorizations, core banking migration, transaction reconciliation.

2. Security, Audit & Compliance

PCI-DSS Level 1 compliance, PostgreSQL Row-Level Security (RLS) enforcement, zero-trust architecture, GDPR privacy standards, audit trail governance.

3. AI-Native Software Craftsmanship

Next.js 15 (App Router), Python FastAPI, Google Cloud Run, Supabase, Google Gemini, Claude, Antigravity orchestration, Model Context Protocol (MCP).

4. Executive Delivery & Governance

Agile & Scrum leadership, cross-functional engineering velocity, stakeholder alignment, requirement traceability, risk-weighted change management.

Executive Profile Dimensions Strategic Attributes

Risk-Aware Engineering Leadership

Over two decades handling mission-critical financial transactions with zero tolerance for security breaches, unverified outputs, or compliance regressions.

Deterministic Software Architecture

Clean separation of concerns: scale-to-zero serverless backends, stateless microservices, strong typing, and deterministic test-driven validation suites.

Erik Stojković // Architecture, Governance & Accreditations

Page 2 of 2 · Boardroom Briefing

Enterprise Banking Milestones Proven Track Record

14-Year Scheme Processing Track Record Nexi · ISP Card · Banka Koper

Managed end-to-end card scheme compliance and payment authorization lifecycles across Mastercard, Visa, and American Express European payment schemes, delivering robust uptime and regulatory alignment (2006–2020).

PCI-DSS Level 1 & Security Compliance Zero-Drift Security

Executed rigorous PCI-DSS Level 1 audit controls, network segmentation, and credential hardening for cardholder data environments across multi-national payment networks.

ISO 20022 Financial Messaging Transformation Core Modernization

Directed business requirements and architectural translation from legacy SWIFT/MT messaging into modern XML-based ISO 20022 MX protocols for systemic banking workflows.

Modern Architecture Proof Production Blueprint

Stojko Hub Multi-Tenant Platform

Scale-to-Zero Cloud

Next.js 15 (Vercel) · Python FastAPI (Cloud Run) · PostgreSQL (Supabase RLS)

Architected and deployed a multi-tenant cloud application with autonomous microservices. Achieves a true $0.00/month idle footprint by leveraging Google Cloud Run scale-to-zero containers, sub-3.0s P99 latency, and strict Supabase PostgreSQL Row-Level Security (RLS) credential rotation.

Five Immutable Engineering Disciplines Operational Creed

1. Immutable Shared Git History: Never rewrite or force-push shared history; always fix forward with incremental semantic releases.
2. Database Migration Safety: No blind or unreviewed live database mutations; draft, review, and dry-run all DDL statements.
3. Authentic Output Verification: Strictly empirical verification; never present predicted or guessed outputs as executed results.
4. Credential & Secret Hygiene: Never hardcode secrets in code or chat; rely on environment variables and zero-trust token flows.
5. Strict Scope Control: Maintain laser-focused boundaries; never silently introduce unreviewed architectural drift.

Board Accreditations & Credentials Verified Badges

IPMA Level C Certified Project Manager

Certified ScrumMaster® Scrum Alliance® (CSM®)

Cloud Architecture Google Cloud Run & Serverless

Enterprise Alumni NLB · Nexi Group · Gamanza

Direct Executive Channels Confidential Inquiries

CURRENT ROLE: Senior IT Business Analyst, NLB d.d.

LOCATION: Koper, Slovenia 🇸🇮 (Adriatic Coast · Remote Ready)

EMAIL: [email protected]

LINKEDIN: linkedin.com/in/erikstojkovic

CANONICAL ASSET: https://stojko.si

ERIK STOJKOVIĆ: SPECIAL EDITION

Senior IT Business Analyst & Engineering Leader: The Power of the Hybrid Profile

Sunday Batch Prep, Garmin AI Telemetry & GymBeam MCP

SPORTS & TELEMETRY DESK

Basketball Analytics Dashboard

Lights Out: F1 Reaction PWA

Garmin Strength & Health Resolver

MARKET & SPATIAL DATA DESK

Local Market Radar

StojkoDoku Android App

Specification-Driven AI Engineering

LOCAL & FAMILY ROOTS DESK

Studio 100 Salon Koper

Pralnica Koper Laundromat

Stojko Creative Hub

Videocenter Koper

SCOUTING REPORT: CAPABILITIES

01 // WEB & FRONTEND

02 // BACKEND, CLOUD & AI

03 // BANKING & GOVERNANCE

Cryptographically Verified Credentials & Board Accreditations

Google Cloud: Cloud & AI Architecture (Exam Candidate)

IPMA Level C: Certified Senior Project Manager

Certified ScrumMaster® (CSM®)