Where I've worked
Hands-on architect and lead engineer designing and shipping production SaaS platforms and data pipelines. Combines robust backend architecture (Node.js, PostgreSQL, distributed schemas) with practical AI-assisted automation, working directly with founders as an execution partner from blank page to production.
Replaced an aging telephony CRM with automated call-record processing, and built a production pipeline combining deterministic parsing, OCR, and LLM-assisted extraction to validate invoices against call-detail data. More on this below.
Led a from-scratch build of a multi-tenant restaurant operations platform, working alongside a 15-person team. Full write-up below.
Joined as a contributor on a healthcare and pharmaceutical data-analytics platform, and grew into its primary architect and lead developer across multiple stack iterations over eight years. Responsible for high-volume medical data handling, access control, and anonymization for enterprise clients. Conducted internal training sessions on Docker, Node.js, MongoDB, and container workflows for engineering teams.
Earlier
- Consultant & Trainer, Self-employed 2015 - 2016
- Senior Software Engineer, boo2 2014 - 2015
- Solutions Architect, Instalogic Inc. 2012 - 2014
- Senior Software Engineer, Sourcetop 2010 - 2012
- Software Engineer, Roots Information Technology 2008 - 2010
- Junior Programmer (part-time), Software SolutionS 2004 - 2005
A few things I've built
Restaurant ERP / POS Platform
Norway · Contract engagement, 2024Brought in to lead a from-scratch build of a multi-tenant restaurant operations platform for a Norwegian client. It worked more like a custom ERP for restaurant chains than a simple point-of-sale system, covering ingredient supply, kitchen display systems, and delivery routing alongside counter orders and Westpay card terminal hardware. I owned the specification, database schema, and API design, and led the build alongside a 15-person team.
MEAN stack (MongoDB, Express, Angular, Node.js) · microservices with distributed MongoDB · Westpay payment-terminal integration
Healthcare & Pharma Analytics Platform
IQVIA · 2016 - 2024A SaaS analytics platform for pharmaceutical clients, rebuilt across three major stack changes over eight years. My role on it grew over time: I started as a contributor and ended up as its primary architect and technical lead. The platform handled high-volume medical data, with strict role-based access control and tenant isolation built in from the data layer up.
.NET & Angular & MongoDB → Node.js & Angular & MongoDB · JWT auth · role-based access control
Telecom Invoice & Billing Automation
Hospitality / QA platform engagement · 2024 - 2025Replaced a legacy telephony CRM with an automated pipeline for processing call-detail records (CDRs), then built an auditing engine that combines deterministic parsing with OCR and LLM-assisted extraction to validate vendor invoices against telephony data. What used to take hours of manual checking now mostly flags exceptions for review.
Node.js · Next.js · Angular · PostgreSQL · GPT-based extraction combined with deterministic parsing
What I work with
Core: hands-on, project-backed
Familiar with
Code-level security & architecture audits
After 15 years of building production backends, you develop an instinct for where systems break under real traffic. Beyond standard feature engineering, I work with founders and engineering teams to audit their source code for data leaks, concurrency race conditions, and business logic flaws before they reach production.
Multi-Tenant & API Authorization (BOLA/IDOR)
Auditing route handlers, middleware, and database queries to ensure Tenant A cannot access or modify Tenant B's data through ID manipulation, hidden parameters, or missing tenant scoping filters.
Financial & Ledger Concurrency Audits
Reviewing transaction isolation levels, row locks, and idempotency logic to eliminate race conditions, double-spend bugs, and webhook replay vulnerabilities in payment and inventory workflows.
Pre-Due Diligence Code Review
Auditing fast-moving and AI-scaffolded codebases for architectural debt, leaked credentials, insecure dependencies, and structural bottlenecks before institutional investor technical reviews.
How it works: Rather than handing over an automated scanner report full of false positives, I inspect the actual source code and submit pull requests with tested code fixes, migration scripts, and defensive schema updates.
Background
- B.Sc. in Computer Science & Engineering United International University, Dhaka
- Diploma in Computer Science & Engineering Ahsanullah University of Science and Technology, Dhaka
- Microsoft Certified: Azure AI Fundamentals December 2021
Let's talk
Open to contract engineering, SaaS architecture, and remote execution roles. Email is direct, or start a conversation via LinkedIn.