Senior full-stack engineer with 11+ years designing and shipping scalable, distributed systems in TypeScript, from Node.js services and APIs on AWS to React applications and embeddable SDKs. I’ve architected authentication and anti-phishing infrastructure, real-time event pipelines processing millions of events a month and multi-tenant backend services. I’ve also worked on SSO, webhooks and rate limiting for enterprise platforms. I’ve led monolith-to-serverless migrations and cut cloud costs by up to 90% while improving API latency by 60–70%. I own product end to end, from customer problem and RFC to production, and I optimise for reliability, performance and developer experience across every surface I touch. I’ve also founded and shipped six products, several of them AI-powered. Remote-ready, based in Cologne.
At a glance
- Currently
- Senior Software Engineer at TrustedshopsSep 2025 – Present · 1 yr 2 mosView experience
- Based in
- Köln, Germany
- Experience
- 11+ yrs · 9 roles
- Industry
- Software Development
- Languages
- English, German, Urdu
- Education
- Bachelor, University of Swat
Experience
9- Senior Software EngineerSep 2025 — Present
AI Agent Trust & Authentication (TSAI), in collaboration with AWS:
Building TSAI (Trust Signals for Agentic Interactions), an open authentication protocol for AI agents co-developed with AWS (awslabs/tsai-protocol). It lets websites and APIs tell legitimate agents apart from malicious bots.
Engineering a Trust Authority credential service that vets agent operators and issues short-lived, cryptographically signed verifiable credentials that service providers can verify offline. Designed with hardware-backed key management and strict separation of duties between issuing and evaluating.
Building an event-driven agent reputation engine that verifies agent signatures and credentials, enriches traffic with behavioural signals and LLM-based intent classification, and continuously scores agents into trust tiers.
Designing the next-generation data pipeline for 100× traffic growth, built alongside production and validated against live results before cut-over.
TrstdLogin & Platform:Owned TrstdLogin, an anti-phishing authentication product, end to end from spec to production (Keycloak, Node.js, AWS), shaping the roadmap with product and security stakeholders.
Built a real-time event ingestion pipeline handling millions of events per month (Kinesis Firehose → S3 data lake → PostHog) for a platform serving 30,000+ customers.
Architected multi-tenant backend services and push notification infrastructure on Lambda and API Gateway, provisioned with Terraform.
Cut AWS costs by 90% for key services and improved API latency by 60–70%, prioritised from customer feedback. I backed this with an E2E, visual regression and integration testing strategy (Playwright, CircleCI).
Tech stack: TypeScript, Node.js, Express, AWS (Lambda, API Gateway, ECS Fargate, KMS, Kinesis Firehose, EventBridge, SQS, S3, DynamoDB, Aurora PostgreSQL, Glue/Athena, Bedrock), SD-JWT/VCs, Web Bot Auth, Keycloak, Terraform, PostHog, Playwright, CircleCI, Lit
- Senior Frontend EngineerSep 2025 — Oct 2026
Built a next-generation Enterprise Admin Panel from scratch for onboarding and managing large-scale enterprise customers, one of the core surfaces in Typeform’s move upmarket.
Implemented Typeform’s integration with Outset AI, using delegated authentication so Outset runs on the user’s Typeform-issued token and works as a native part of the platform. This brought AI-moderated research interviews into the form-response workflow as part of a strategic partnership launch.
Shaped API contracts with backend engineers for enterprise capabilities including SSO configuration, rate-limit policies and webhooks, so the platform could integrate cleanly into customers’ identity and automation stacks.
Rebuilt the invitation and access workflows end to end across organisation invitations, workspaces and public workspace management. I refactored the logic into a standalone, reusable library that is now shared across product surfaces.
Engineered enterprise-scale workspace and form management: bulk operations on forms and users, granular permissions, multi-level workspace hierarchies, and org-wide discovery and filtering.
Leading frontend architecture for the Typeform app redesign on a new design system, modernising core workspace and form surfaces with high-performance, reusable components.
Techs & Tools: TypeScript, React, React Query, Go, GraphQL BFF, Styled Components, Jotai, GraphQL, Jenkins, Figma, Slack, Notion, JIRA
- Senior Web EngineerMar 2025 — Aug 2025
Engineered core features of CreativeEditor SDK (CE.SDK), an embeddable, fully customisable design-editor SDK that developers integrate into their own products across web and other platforms.
Led UI architecture decisions for the SDK, designing extensible, scalable frontend systems that balanced performance and maintainability with long-term product goals.
Defined developer-facing APIs and UI interfaces with cross-functional teams, shaping how integrators customise and extend the editor with a focus on developer experience.
Authored RFCs to standardise architectural improvements and new proposals, and shipped features with high standards for accessibility, test coverage and usability.
Mentored engineers through pair programming and code reviews, raising code quality and consistency across the team.
Techs & Tools: TypeScript, React, React Query, MobX, SCSS, Webpack, GitHub, Figma, Slack, Notion
- Senior Product EngineerFeb 2021 — Feb 2025
Platform migration:
Led the rewrite of the core SaaS platform from a Java/IVY monolith to a serverless AWS architecture (Node.js, React micro-frontends, microservices). We reached full feature parity within a year.
Ran epilot classic and the new platform in parallel with continuous data sync, so customers could switch between classic and new views and migrate without disruption.
Exposed the legacy database as a GraphQL API via Hasura, which let the new frontends work against a monolith that had no usable APIs, and unblocked the migration.
360 XCRM platform:Co-designed flexible entities with dynamic schemas, the data model behind the entire 360 XCRM platform: contacts, accounts, opportunities, orders, emails, submissions and customer journeys.
Built the Entity Builder end to end, letting customers fully customise entity schemas through groups, attributes and protected core attributes. It scaled to 1,200+ attributes on a single entity, with purposes to toggle groups and attributes per use case and labels for filtering.
Built custom roles and fine-grained permissions across the entire platform, controlling exactly what each user can see and do on every entity and surface.
Built a document generation pipeline (Node.js + Python) behind the Document Builder, producing print-ready documents with dynamic data tables and QR codes generated from platform data.
Built a configurable analytics engine that lets customers define their own metrics and reporting views across platform data.
Built the central file management service end to end: a single, platform-wide store for every file an organisation uses, with versioning and labels shared across entities and emails.
Optimised platform performance and raised testing standards (unit, integration and E2E in CI). I also authored RFCs to standardise API contracts and architecture, and mentored engineers.
Techs & Tools: JavaScript, TypeScript, React, Storybook, Material UI, Redux, React Query, AWS Serverless, Node.js, GraphQL, Hasura, ElasticSearch, Docker, Postgres, GitLab CI/CD. - Product EngineerAug 2020 — Jan 2021
Shaped the product vision and feature roadmap for Vidy, a platform that uses NLP to embed contextual videos behind webpage text, and used competitive analysis of video-embedding solutions to decide what to build.
Led the build of Vidy Watch, the contextual video player embedded directly into article text, delivering instant, in-place playback designed to feel native, not like an ad.
Built scalable, accessible UI modules for a product serving 14M monthly unique visitors, with full responsiveness and cross-browser compatibility.
Re-architected the vanilla JavaScript codebase into modular Svelte components, improving maintainability, developer experience and onboarding speed.
Optimised performance with bundle-size reduction, lazy loading and tuned asset delivery for faster initial render.
Techs & Tools: Svelte (TS), JavaScript, React, Node.js, TypeScript, SCSS, JSX, CSS Modules, GitHub, Slack - Senior Full Stack DeveloperNov 2019 — May 2020
Built for TAMM, Abu Dhabi’s unified government services platform, which brings citizen services such as licence automation and permit applications into one portal.
Designed and built Node.js backend APIs and business logic, orchestrating microservices and workflows across multiple government services.
Owned features end to end, from schema design to deployment, and maintained 85%+ test coverage with unit and E2E suites.
Built bilingual React interfaces (Arabic/English) with full RTL support and seamless language switching for a diverse citizen base.
Worked with security (VAPT), DevOps, QA and UX teams to ship secure, accessible solutions that met government standards, and engaged directly with stakeholders in review sessions to drive improvements.
Mentored junior engineers through pair programming, code reviews and knowledge-sharing sessions, raising team standards in security and accessibility.
Tech Stack: Node.js, Express, TypeScript, Microservices, ElasticSearch, React, Redux, Jest, Docker, SonarQube, Swagger - Senior Full Stack EngineerJul 2018 — Sep 2019
uilt and scaled full-stack web platforms with Angular (NgRx) frontends and PHP/Laravel backends, owning features from database to UI.
Designed relational database schemas in MySQL and PostgreSQL, optimised for query performance as data and usage grew.
Built and documented REST APIs (Swagger/OpenAPI), leading the integration between frontend and backend systems across teams.
Delivered responsive, multi-device experiences, and kept delivery consistently on schedule through rigorous code reviews and QA practices.
Tech Stack: JavaScript, Angular, NgRx, PHP, Laravel, MySQL, PostgreSQL, Swagger, GitHub, HTML5, CSS3 - Front End EngineerNov 2016 — Apr 2018
Led the modernisation of a legacy Classic ASP application into a single-page application (AngularJS), moving users to a faster, more maintainable product.
Designed the SPA architecture: reusable drag-and-drop components, real-time notifications and an asynchronous API layer integrating with Django and PHP backends.
Trained and onboarded new engineers on SPA architecture and patterns through hands-on sessions.
Techs & Tools: JavaScript, jQuery, AngularJS, Bootstrap, Django, PHP, MySQL, MongoDB
- Full Stack DeveloperMar 2014 — Apr 2016
Grew from intern to Full Stack Developer, building web applications end to end with PHP/Laravel, MySQL and JavaScript.
Built integrations with third-party services and data sources: Google Maps API for location features, web scraping pipelines for external data collection, and browser extensions that connect users’ workflows to web platforms.
Led and trained a small engineering team, owning project planning and code reviews.
Tech stack: PHP, Laravel, MySQL, JavaScript, jQuery, Google Maps API, Browser Extensions, Web Scraping
Side projects
6
MyCareerWallFounderBuilt MyCareerWall, a smart resume builder that helps you create a professional resume in minutes. It uses AI to generate a resume from your LinkedIn profile. It also helps you to create a cover letter and personalized job application.
Implemented a smart resume builder that uses AI to generate a resume from your LinkedIn profile. It also helps you to create a cover letter and personalized job application.
MyGritWallFounderEvery group challenge I joined ran the same way: a WhatsApp group, a spreadsheet, and someone counting by hand. Proof got buried, late joiners gave up because they could never catch up, and nobody knew who was still in.
MyGritWall is one place where a group's challenge lives:
One link to join. Free, or at a price you set.
Daily check-ins in seconds: ticks, counters, numbers, optional photo proof with a verifier.
A leaderboard ranked by completion rate, so joining on day 10 is never a penalty, and nobody is shown at the bottom.
Rest days you plan ahead that do not break your streak. Withdraw a mistaken check-in the same day.
A recap at the end, a certificate anyone can verify, and a Grit Wall that fills up across every challenge you do.
For teams: seats, roles, approvals and insights. Private by default, hosted in the EU.
It works for any goal: no sugar in October, 10,000 steps, 20 pages a day, a savings sprint, a sales push, an onboarding month.
StickiescloudFounderDeveloped Stickies Cloud, a browser extension for creating and managing digital sticky notes across websites, featuring a centralized dashboard for search, categorization, and sharing. Integrated Generative AI for automatic note generation from text highlights and envisioned an audio-to-text feature for capturing insights from videos, calls, and recordings.
YourzelfFounderDeveloping Yourzelf, a natural language-driven personal memory system designed to help users store and query thoughts, tasks, and notes using conversational input. Implemented intelligent categorization, timestamp extraction, and semantic search to unify unstructured user input into structured entities.
Scan The FakeFounderBuilding ScanTheFake, a document authentication platform that leverages AI vision analysis to verify authenticity of documents in real-time. Designed an extensible verification pipeline combining computer vision, OCR, and structured rule checks to flag tampering, forgeries, and inconsistencies.
CoterglobalCo-FounderBuilt Accounts, a recruitment management system that handles companies, candidates, purchase orders, and end-to-end financial tracking with automated invoicing. Designed entity-driven workflows around hiring pipelines, contracts, and billing — turning manual spreadsheet work into a single, auditable system.
Skills
48- expert4
- JavaScript10YNode JS8YREST9YTypeScript8Y
- advanced33
- Angular4YAuth & Identity (OAuth/OIDC, SSO)5YAWS7YCDK3YDjango4YDocker4YDynamoDB6YElasticSearch4YEsBuild4YGit8YJatoi4YJest8YJWT7YMocha3YMongoDB4YMySQL8YNextJS5YOpenAPI8YPostgres6YPython4YReact8YReact Query6YRedis4YSAM4YSASS3YStorybook6YSwagger7YTailwind6YTerraform3YTurboRepo3YVitest5YWebpack5YZustan4Y
- intermediate10
- Clickhouse3YFastAPI2YFirebase3YFlask2YGo2YGraphQL3YRabbitMQ2YReact Native3YSvelte2YVue JS3Y
- beginner1
- Rust1Y
Tools
20- expert1
- Git8Y
- advanced17
- Android Studio5YConfluence6YCypress4YDatadog5YFigma3YGitlabCI5YJIRA8YJupyter6YLaunchDarkly6YMac OS8YMS Teams5YPagerDuty3YPlaywright5YTuple3YTurboRepo4YVitest4YWebPack6Y
- intermediate2
- Instana3YPosthog2Y
Writing
3- Exploring Svelte Stores: Reactivity, Dependency, and Advanced Usagemedium.com…7bb408107
The
useImperativeHandlehook in React allows a child component to expose certain functions or properties to its parent component, giving the parent component more control over the child component.It was introduced in React 16.3 and provides a more explicit way for parent components to interact with child components. It's typically used in situations where a parent component needs to interact with a child component directly, such as for form validation or handling of user input.
When compared to
useRef,useImperativeHandleallows for more direct interaction with child components. However, it can add complexity to code and be error-prone if not used correctly.
- Understanding window.matchMedia: A Key Tool for Responsive Web Designmedium.com…66c3538e3
In today’s world of web development, creating websites that look and function well across a wide range of devices is a must.
From tiny smartphone screens to large desktop monitors, users expect a seamless experience. To meet this challenge, developers often rely on media queries in CSS.
But what if you need more dynamic control over your design, beyond just CSS? This is where
window.matchMediacomes in.
Today we’ll explore what
window.matchMediais, how it works, and how you can use it to build more responsive, adaptable web designs. - React Bottlenecks Uncovered: A Comprehensive Guide to Solving Common Performance Issues in Your Appmedium.com…3f98b3669
React is a powerful and popular JavaScript library used for building user interfaces.
While React offers many benefits, it can also present some performance bottlenecks that can be difficult to understand and diagnose.
In this article, we will discuss some common React bottlenecks and provide examples of how to overcome them.
Education
1- Bachelor
Data Structures & Algorithms / Algorithm Analysis / Digital Logic & Designs
Software Architecture & Designs / Software Requirements & Specifications
Project Management
Artificial Intelligence / Cloud Computing
Cyber Security
Data Mining
Aug 2014 — Sep 2018
Languages
3- Englishfluent
- Germanbasic
- Urdufluent
Want to work together?
Get in touch with Nadeem today.








