██╗ █████╗ ███╗ ███╗██╗
██║██╔══██╗████╗ ████║██║
██║███████║██╔████╔██║██║
██ ██║██╔══██║██║╚██╔╝██║██║
╚█████╔╝██║ ██║██║ ╚═╝ ██║███████╗
╚════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝Fractional CTO for AI-first, compliance-bound products · remote from Mexico · since 1998
I’m Jose Alonso Mendez Lieras — a software architect and fractional CTO working remotely from Mexico since 1998. I lead engineering teams, architect AI-first systems, and own the security and compliance standards that keep them defensible in production, not just in a demo.
Read the full background, see how engagements are structured on services, or start a conversation.
If This Sounds Familiar
You are a founder or product lead adding an AI feature and need someone who can architect it end to end — not just get a demo working.
A client security questionnaire, a SOC 2 prep, or a GDPR/LGPD requirement just landed on your desk and you need an engineer who speaks that language.
You need senior technical leadership — setting direction, reviewing architecture, unblocking a team — without a six-figure full-time hire.
No Case Studies Published Yet
I'm writing up recent engagements as client permissions clear. The first case studies publish the week of September 21, 2026. Until then, the fastest way to evaluate the work is a direct conversation — I'll walk through real architecture decisions I've made, not marketing slides.
Track Record
25+ years architecting and shipping software — Java, PHP, Ruby, Python, Go, Rust, Zig — across full-stack, cloud, and now AI-first systems.
Senior Software Engineer, vetted through a selective freelance platform’s technical screen. Led engineering teams of 20–50, set KPIs and OKRs, shipped MVPs and production tools for global clients.
Implemented NIST 800-53 Rev 5, OWASP ASVS 5.0, GDPR/UK GDPR, LGPD, PIPL, and the DPDP Act in production systems — an engineer-led assessment, not a certified audit.
A personal DGX Spark environment for local model testing, distillation, and RAG architecture — AI work grounded in hands-on infrastructure, not just API calls.