Contact | Bilal Köse

Home About

Services

Development, consulting and engineering services I offer.

Enterprise Microservices & Distributed Systems Architecture I design scalable, resilient, and high-throughput backend systems. With microservices architecture, event-driven design, Kubernetes infrastructure, and strong observability foundations, I build enterprise-grade systems that remain sustainable under real production load.
Enterprise AI Platforms, RAG & Agentic Workflow Architecture I design enterprise-grade AI platforms that securely use internal company data, take controlled actions, and integrate into real business workflows. I build production-ready AI systems with RAG, multi-step agent flows, tool calling, approval mechanisms, and observability layers — not just PoCs.
AIOps, AI Observability & Autonomous Operations Engineering I unify logs, metrics, traces, and operational events into a single operational intelligence layer to make your systems more visible, more predictable, and more resilient. With AIOps, AI-powered observability, anomaly detection, root cause analysis, and autonomous response workflows, I help production operations move from reactive firefighting to proactive control.

View all services

Projects

Selected work and client engagements I've delivered.

HSM-Signer Service (PDF/XML Signing and Verification with KamuSM) Enterprise security infrastructure A secure and scalable HSM-backed digital signature infrastructure was developed for KamuSM-compliant XML (XAdES) and PDF (PAdES) signing/verification processes. With REST APIs, PKCS#11 integration, asynchronous queue architecture, and Docker-based deployment, the solution delivered high performance, regulatory compliance, and strong operational observability.
Natro — Domain & Hosting Platform Modernization (10+ Services) Enterprise platform modernization More than 10 mission-critical VB.NET services, including domain activation, hosting provisioning, payment processing, customer management, and renewal workflows, were modernized and migrated to a more sustainable, observable, and high-performance .NET 7 architecture for one of Turkey’s high-traffic hosting platforms. This transformation reduced production error rates, improved API response times, shortened incident detection time, and significantly increased operational reliability in production environments.
Octapull — Remote Video-Based Collaboration Platform Real-time communication platform Contributed to the development of a real-time video-based collaboration platform designed for remote interviews, field operations, digital channel management, and enterprise communication scenarios. With a Jitsi-based communication infrastructure, a high-concurrency service architecture, performance optimizations, and operational modules, the platform evolved into a reliable, scalable, and enterprise-ready solution.
Parkinson’s Disease Detection Using Deep Learning AI and health technology research project A deep learning-based classification system was developed to detect Parkinson’s disease through voice signal analysis. In the project, multiple phonation recordings of the vowel “A” were analyzed to predict the presence of the disease. An end-to-end machine learning pipeline covering data preprocessing, feature extraction, model training, and evaluation was established, achieving approximately 92% classification accuracy.

View all projects

Blog

Notes on engineering, system design and the industry.

One Strait, Two Corridors: How Türkiye Protected 19.8 Million Tons of Wheat During the Hormuz Shock The Hormuz crisis that began on 28 February completed its 80th day; the FAO Food Price Index rose for a third consecutive month and fertilizer costs have already mortgaged the 2027 harvest. Türkiye's table tells a different story: a 19.8-million-ton bumper wheat harvest is on the way, 7.2 million tons of imports still flow from the Black Sea, and TMO purchase prices were lifted 35-46%. This piece walks through, from a systems engineer's eye, why Türkiye needed two supply corridors at once and which design choices held up during the 80-day shock.
Domestic Chip, 2027 Target: Is ASELSAN's 180 Billion TL Revenue Enough for a New Smartphone? On Monday 18 May 2026 in Ankara, Türk Telekom and ASELSAN unveiled a strategic partnership for a 100% domestic smartphone targeting a 2027 launch. The domestic processor and long-life domestic battery claims dominated the day's headlines. ASELSAN closed 2025 with 180.4 billion TL revenue and 1.36 billion USD R&D spend; Türk Telekom holds a 550,000-kilometre fibre network and won a 425-million-USD package in the 5G tender. This piece reads the partnership through a computer engineer's eye: is the 100% domestic chip claim realistic, can a domestic brand whose flagship Reeder holds a 0.33% market share against the Qualcomm-MediaTek-Apple triangle stem the 3.03-billion-dollar import bleed, and is JioPhone or Lumia the right template?
I/O 2026: Is Gemini Spark Quietly Taking Over Your Phone? Antigravity 2.0, Omni World Model & Android XR Glasses At Google I/O 2026, Sundar Pichai formally opened the agentic era. A single keynote introduced Gemini 3.5 Flash, the Spark proactive agent that wants to manage your phone 24/7, the Omni world model, Antigravity 2.0 developer platform, an AI Mode Search overhaul, and Android XR smart glasses. This article walks through each piece from a developer and end-user lens.
AttackProbes and ThreatScore: Scoring Attack Probes in .NET 10 Our origin classifier writes every attack attempt into the dbo.AttackProbes table; the ThreatScore persisted computed column produces a 0-25 score from the formula Severity × Confidence / 20. Forty-nine path patterns, thirteen scanner User-Agent signatures and twelve query-string patterns live in three separate static registries. A probe whose score crosses the threshold of 11 gets the IP auto-blocked; the ones below it fall to a 15-minute burst counter. The table schema, the reasoning behind the scoring formula, the three-layer pattern matching and the RecordAttackAsync classification code — straight from the live bilalkose.com.tr system.
Cloudflare IP List API: Pushing Bulk IP Blocklists from .NET 10 The Cloudflare free plan gives you 5 WAF rules per zone; turn each blocked IP into its own rule and you run dry almost at once. So we don't — one rule points at a Cloudflare List instead, and a list holds 10,000 IPs. Ten lists per account puts the real ceiling near 100,000 addresses behind a single rule. Our .NET 10 service writes every auto-blocked IP into the list with a fire-and-forget push, works around the bulk endpoint's operation_id vs item_id trap, and deletes the list item when the TTL expires. The ICloudflareIpListService interface, the IpBlocklist table and the TTL expirer — full production code from the live bilalkose.com.tr system.
.NET 10 LTS Production Patterns — A Migration Story On May 7, 2026, I migrated bilalkose.com.tr from .NET 8 to .NET 10 LTS — 6 csproj bumps, 26 Microsoft package updates, 9 custom packages major-bumped, AspNetCoreRateLimit dropped for native AddRateLimiter, AutoMapper 16 ctor adapt, SqlClient TLS defaults. 0 errors + 18 warnings, 10/10 smoke tests. This article walks through the six production gotchas I hit.

Engineering Tools

Free, no-signup engineering calculators that run in your browser. No data is sent to a server — every calculation happens on your device.

Kubernetes Resource Budget Calculator Kubernetes Estimate how many nodes you need, your packing efficiency, and the projected monthly cost from pod requests and node size.
CIDR / Subnet Calculator Networking Compute the network address, broadcast, subnet mask, usable host range and address type from CIDR notation.
Cron Expression Parser DevOps Parse a cron expression field by field and see the next run times. For Kubernetes CronJobs and scheduled tasks.
Epoch / Unix Timestamp Converter Time Convert Unix epoch timestamps to readable dates and back. Seconds and milliseconds are auto-detected.
UUID Generator Generator Generate cryptographically secure UUID v4 and time-ordered v7. Bulk generation and format options.
Hash Generator (SHA) Security Compute SHA-1, SHA-256, SHA-384 and SHA-512 digests of text instantly. Via the Web Crypto API, in the browser.
JWT Decoder Security Decode the header and payload of a JSON Web Token, inspect the standard claims and expiry. The token never leaves your browser.
HTML / Entity Encoder-Decoder Security Encode text to HTML entities or decode it back. Escape special characters to prevent XSS; in the browser, no signup.
Base64 Encoder-Decoder Encoding Encode text to Base64 or decode it back. Standard and URL-safe (base64url) variants; UTF-8 aware, in the browser.
HTML Viewer Web Paste HTML source and preview it live instantly. In a sandboxed, isolated frame; scripts are disabled for safety.

Games

Free, no-signup classic games that run in your browser. Your best score is saved on your device — no data is sent to a server.

2048 Puzzle Slide matching tiles to merge them and reach the 2048 tile. Simple rules, deep strategy.
Sudoku Puzzle Fill the 9×9 grid with the digits 1-9 so every row, column and 3×3 box holds each digit once. Single solution, three difficulty levels.
Minesweeper Puzzle Reveal every safe square without touching a mine. No-guess mode generates boards solvable by pure logic.
Solitaire Cards Classic Klondike solitaire. Build the foundations Ace to King; draw-one/draw-three, undo and auto-complete.
Block Puzzle Puzzle Place blocks onto an 8×8 grid; full rows and columns clear away. The game ends when none of the three blocks fit.
Snake Arcade Steer the snake to collect food and grow. Score as high as you can without hitting a wall or yourself.
Word Guess Daily Guess the hidden 5-letter word of the day in six tries. Everyone gets the same daily word — keep your streak, share your result.
Grouping Daily Sort 16 words into four hidden groups by their shared theme. One puzzle a day — you get four mistakes.

Contact Support

TR EN AR

Home About Services Projects Blog Tools Games Contact Support

TR EN AR

Home
Contact

Get in Touch

Contact

🔒 I am temporarily not accepting new freelance projects. Feel free to reach out for other inquiries.

Please Fill Required Fields

We use cookies and Google Analytics 4 to measure site usage. If you accept, analytics and advertising storage (Consent Mode v2) may be enabled. With Google Signals, demographic and interest reports may be generated. For details see our Privacy Policy

Latest Posts

One Strait, Two Corridors: How Türkiye Protected 19.8 Million Tons of Wheat During the Hormuz Shock
Domestic Chip, 2027 Target: Is ASELSAN's 180 Billion TL Revenue Enough for a New Smartphone?
I/O 2026: Is Gemini Spark Quietly Taking Over Your Phone? Antigravity 2.0, Omni World Model & Android XR Glasses
AttackProbes and ThreatScore: Scoring Attack Probes in .NET 10
Cloudflare IP List API: Pushing Bulk IP Blocklists from .NET 10

All posts →

Privacy Policy Manage cookie preferences

2026 Updated by Bilal Köse