Senior Software Engineer
Hi, I'm Frank Costoya.
|
Full-stack engineer with nearly a decade of experience shipping enterprise platforms, headless architectures, and cloud-native applications. Currently engineering at HUB International.
Tech Stack
Full-Stack Development
Cloud & Infrastructure
DevOps & Observability
AI & Machine Learning
Data & Streaming
Platforms & CMS
What People Say
Chief Executive Officer, Partner at Imarc
“Frankie joined Imarc about four years ago and immediately stood out not just for his technical acumen but also for his adaptability and can do attitude. As CEO I've been impressed a hundred times over with Frankie's willingness to jump into any problem and his ability to come out the other side with and excellent, if not perfect result. As one of our lead Sitecore engineers, Frankie was responsible for the successful management of one of our largest clients, not just on the implementation side, but as a key consultant. I can't recommend Frankie enough for your organization - there isn't a single role he wouldn't be successful in.”
Chief Revenue Officer, Partner at Imarc
“Working with Frankie has been incredible. He is a very smart and talented developer, and the quality of his code is impeccable. Frankie is more than a developer, though; he is also a business strategist and can understand how his work can directly impact a client's business objectives. He can easily translate technical nuances to a non-technical person and clients love him. He is a unicorn for sure! Frankie would be an incredible addition to any team.”
Director of Engineering at Imarc
“Frankie is an incredible and talented senior engineer. He has an excellent understanding of the entire stack and is always up for facing a new challenge or technology. He also has a very impressive set of soft skills and is a great communicator. He quickly and naturally establishes productive working relationships with both coworkers and clients. Working with Frankie is a real pleasure.”
Latest Posts
How To Cure log4net's Lock Convoy on a Sitecore CD
At the worst moment of a load test, 279 of our Sitecore Content Delivery server's 427 threads were parked on a single lock, waiting for permission to write a log line. This is the story of how log4net's synchronous file appender becomes a lock convoy under concurrency, how a memory dump and two WinDbg commands convicted it in ten minutes, and the sixty-line never-blocking appender — built against Sitecore's log4net fork, because Apache-targeting packages won't load — that structurally abolished it. Plus an honest accounting of the trade-offs: dropped events over blocked threads, a crash that eats the queue, and a log that lags reality.
You Probably Don't Need Vault: How Deleting a Cache Made Our Key Storage More Secure
pCraft is a BYOK 'Postman for LLMs' whose database is full of other people's provider API keys, bearer credentials with a credit card behind them. This article walks through the envelope-encryption scheme that keeps a stolen database backup worthless, then tells the counterintuitive story of replacing HashiCorp Vault with a local key-encryption key: a change that deleted a plaintext-DEK cache a security review had flagged as critical and collapsed the key's in-memory lifetime from sixty seconds to microseconds. It covers AEAD binding contexts that defeat cross-tenant splicing, self-describing ciphertext, KEK rotation without re-encrypting rows, and how to tell when a managed secrets service is actually worth its operational cost.
Introducing pCraft: A Workbench for People Who Build With LLMs
For a year my most important work, the prompts, lived in Python strings, scattered notes, and 1am messages to myself, with no version history and no way to fairly compare one model against another. pCraft is my answer: a workbench for building with language models, 'Postman for LLMs', where you bring your own key, wire up multi-step chains, and run the same prompt across several models side by side. This founder-tone launch post covers why I built it, why I think it's useful, and the unglamorous lessons the project taught me: overbuilding infrastructure for a scale that didn't exist, falling in love with an architecture instead of a product, and what it means to hold someone else's API key.