Adrián Cabeza · Head of Engineering & Architecture, Paraty Tech

Platform, security and AI agents. In production.

I lead the engineering, architecture and cybersecurity teams. What we build runs behind the booking engine, the websites and the CRM that thousands of hotels worldwide sell through.

I lead the engineering, architecture and cybersecurity teams: the technology thousands of hotels worldwide sell through.

See projects About me

Málaga, Spain · Hospitality technology

Now: standardising the internal platform and bringing AI agents into two teams’ daily work →

Adrián Cabeza at the office, in a blue jacket and white shirt

12 yearsat Paraty Tech, from intern to leading engineering and architectureat Paraty Tech, from intern to leading
2 teamsreporting to me: one for engineering and architecture, one for cybersecurityreporting to me
Thousands of hotelsworldwide sell direct through the platformworldwide
Hundreds of projectson Google Cloud, under one IAM and cost controlon Google Cloud

What I do

What a hotel needs to sell online — card payments, PCI, seasonal peaks and thousands of hotels on the same platform — cannot stop. This is what I answer for.

Platform security
I answer for security in front of clients: the questionnaires and audits of large hotel chains, PCI and business continuity. And for the response when there is an attack or a phishing attempt. Underneath: secrets, trusted networks and a firewall that classifies traffic with machine learning.I answer for security in front of clients: the questionnaires and audits of large hotel chains, PCI and business continuity.
Internal platform and standards
Short backend, documentation and Git standards, written with the teams, so that a new service starts life with bootstrap, logging and deployment already solved and anyone can run it. On top, a family of internal services on a shared library.Short backend, documentation and Git standards, written with the teams, so that a new service starts life with bootstrap, logging and deployment already solved and anyone can run it.
Google Cloud at scale
The cloud bill is an engineering decision: hundreds of projects under one model of IAM, audit and cost control, and rollouts to hotels worldwide. App Engine, Cloud Run, BigQuery, Secret Manager.The cloud bill is an engineering decision: hundreds of projects under one model of IAM, audit and cost control, and rollouts to hotels worldwide.
AI agents in the company
I decide which agents enter the teams’ daily work, with what permissions and how their contribution is measured: a company MCP server with per-person permissions and a toolkit that gives coding agents the house rules and measures what they do.I decide which agents enter the teams’ daily work, with what permissions and how their contribution is measured.

Projects: the problem and the decision

What I build lives inside a platform that serves thousands of hotels. Each project, told through the problem there was and the decision that solved it.

See all →

SecurityIn production

Secrets and trusted networks

The problem. When projects go from ten to hundreds, keys end up scattered across files, variables and someone’s head; rotating a credential is an afternoon of finding where it lives.

The decision. A central vault with rotation and trusted networks between services. Projects ask for the secret; nobody copies it. Rotating is one change in one place.

Security · MLIn production

A firewall that learns

The problem. Malicious traffic that changes every week; hand-written rules arrive late and, once tightened, block real guests.

The decision. A model that classifies every request instead of hand-written rules; rules remain for what a model must not decide.

AI agentsIn use by the team

Company MCP server and agent toolkit

The problem. Everyone used coding agents on their own, without access to the company’s email, chat or knowledge base, and with no measure of what they added.

The decision. An MCP server with per-person permissions, shared skills and protocols, and telemetry to measure before extending.

From pixels to platform

I joined Paraty Tech as an intern in 2014, built hotel websites, led the front-end team from 2018 and, since 2024, I lead the engineering, architecture and cybersecurity teams, reporting to the CTO. I am a regular technical point of contact for management, product and the large hotel chains that review what we do before they sign. I have lived with the consequences of my own decisions five years on.

I care that what we build keeps working when something fails, that anyone on the team can understand and run it, and that security is earned by making it easy, not by imposing it.

I care that what we build keeps working when something fails and that anyone on the team can understand and run it.