Skip to content
View AhmadVakil's full-sized avatar
:octocat:
DON'T LOOK BACK! You are NOT going that way!
:octocat:
DON'T LOOK BACK! You are NOT going that way!

Block or report AhmadVakil

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
AhmadVakil/README.md

Typing Animation

Typing-Animation


Matrix Rain Hacker Terminal Developer Coding


LinkedIn Email



bash Vim Java chartjs inkscape GIMP css3 jquery webpack npm python ssh Tomcat yarn debian Gradle Apache Docker dotnet express intellij jetbrains Android git HTML5 javascript laravel linux mongodb mysql nginx Chrome nodejs Composer php AWS vuejs typescript react nextjs nestjs postgresql redis rabbitmq kali openai huggingface pytorch ollama langchain


> whoami

+ Head of Software Development & Cyber Security @ PIPWISE Broker
+ 18 years in IT, from network infrastructure to software platforms
+ Web, native iOS/Android and cross-platform mobile, shipped to both app stores
+ BSc Computer Science (Linnaeus University, Sweden) + Network Security specialization
+ ACS-assessed Software Engineer (ANZSCO 261313, Skill Level 1)
+ I build, break, secure, and automate, then teach others how it works

Senior full-stack architect with deep roots in cyber security, fintech/trading infrastructure, and AI-driven workflow automation. I lead the modernization of brokerage operations, turning manual dealing-desk rituals into real-time pipelines across MT5, CRM, risk engines, PSP payments, and prop/copy/PAMM systems.

I travel the world for work and studies, ship production systems end-to-end, and treat every vulnerability as a puzzle waiting to be solved.


> cat focus.txt

$ tail -f current_work.log
  • πŸ”­ Building: Fintech CRM, AI risk scoring, prop trading platforms, copy/PAMM systems, MT5 API bridges, PSP gateways
  • πŸ€– AI & Agents: LLM pipelines, RAG systems, agentic automation, local/on-prem models, AI-powered risk & CRM intelligence
  • πŸ›‘οΈ Securing: VAPT, AI-assisted pentest automation, WAF/DDoS mitigation, incident response, OWASP-aligned hardening
  • βš™οΈ Automating: RabbitMQ pipelines, blockchain watchers, Telegram dealing bots, CI/CD, deployment orchestration
  • 🌱 Always learning: because uninvented stuff is still out there
  • πŸ‘― Open to collaborate on meaningful FOSS when the sprint calendar allows
  • ❀️ FOSS believer: who isn't? Right? :D

> ls ./tech_arsenal/

Languages & Runtimes

Languages

Frameworks & Platforms

Frameworks

Mobile & Cross-Platform

Mobile

Data, Messaging & Real-Time

Data

DevOps, Cloud & Infra

DevOps

Security, Trading & Specialized


> ls ./ai_arsenal/

Integrating AI into production fintech & security systems, not demos. Turning manual dealing-desk, risk, CRM, and pentest workflows into intelligent, automated pipelines.

What I Build with AI

Domain AI-Powered Systems
Fintech / Trading Client behavior analysis, toxic-trader detection, anomaly scoring, CRM intelligence over thousands of records, operational alerting
Automation Agentic workflows, LLM-driven task pipelines, document/report generation, API orchestration, workflow digitization
Security AI-assisted VAPT, automated recon & analysis, threat pattern detection, security hardening recommendations
Infrastructure Local/on-prem LLM deployment, RAG over private data, vector search, model routing, observability & guardrails

LLMs & Model Stack

Agents, RAG & Orchestration

MLOps, Observability & Data Science

AI Security & Pentest Automation

AI Stack


> ls ./mobile_arsenal/

Native and cross-platform applications shipped to both stores, plus the pipeline that builds, signs, and publishes them.

Layer What I work with
Cross-platform React Native with a shared JavaScript/TypeScript codebase across iOS and Android
Native Android Java, Kotlin, Android SDK, Android Studio, Gradle
Native iOS Swift, Xcode
Release pipeline Fastlane, Jenkins, code signing, keystores, provisioning profiles, certificates
Distribution Google Play Console, Apple App Store Connect, TestFlight beta channels
Integration REST APIs, push notifications, offline storage, crash & analytics reporting

Automated App Asset Generation

Built a tool equivalent to Roman Nurik's Android Asset Studio and wired it straight into CI/CD, so every build generated its own assets from a single source image:

  • Full Android density set (mdpi through xxxhdpi) plus adaptive icons
  • Complete iOS AppIcon catalogue at @1x, @2x, @3x with a valid Contents.json
  • Launcher icons, notification icons, and splash assets generated at build time
  • Removed a manual design-to-developer handoff that had to be repeated on every single release

This is the practical core of the published thesis: Automating the monotonous workflow.


> grep -r "architecture" ./repos/

Pattern Where it shows up
Microservices Bridge, Crypto Payment Solution, Forex Broker CRM
Event-driven / MQ RabbitMQ quote distribution, BullMQ blockchain watchers
API Gateway + HMAC PSP gateways, signed payment request pipelines
Multi-tenant SaaS Bridge broker isolation, subscriptions, feature flags
REST + WebSocket CRM, copy trading, prop data endpoints
Clean / layered arch Inversify use-cases across Express backends
Dockerized production Full-stack compose, Caddy TLS, PM2 clusters
RAG + Vector search Private knowledge bases, semantic CRM/risk data retrieval
LLM agent pipelines Multi-step automation, tool calling, workflow orchestration
AI risk & scoring Anomaly detection, behavioral analysis, real-time alerting

> cat flagship_projects.md

Production systems I've architected, built, and secured across ~150 repos.

🏦 Fintech & Trading Core

Project Stack What it does
Bridge NestJS, Next.js, MongoDB, Redis, RabbitMQ, Docker Multi-tenant broker bridge for MT4/MT5/FIX ↔ liquidity providers
Forex Broker CRM Next.js, Express, MongoDB, MT5 Web API, Python, Wine Full broker CRM with real-time MT5 sync & client intelligence
Prop System Express, Next.js, MongoDB, Firebase Prop trading platform with evaluations, violations, drawdown rules
Copy Trading Express, Next.js, WebSocket, MongoDB Master-follower copy engine with configurable risk filters
PAMM System Express, Next.js, MT5 equity/PnL Allocation logic, performance fees, investor dashboards
Risk Management Express, Next.js, MongoDB Toxic client detection, anomaly scoring, real-time alerts
AI Risk & CRM Intelligence LLMs, RAG, local models, Python Client behavior analysis, automated scoring, operational intelligence pipelines

πŸ’³ Payments, Crypto & MT5 Infra

Project Stack What it does
Crypto Payment Solution Express, ethers, tronweb, BullMQ, Redis Self-custody crypto gateway with EVM/TRON watchers
PSP Integrations Express, PM2, Nginx, PostgreSQL, Bull Multi-PSP deposit/withdrawal proxy, reconciliation, and crypto gateway middleware
MT5 Prop Data Express, RabbitMQ, WebSocket Prop trading data API with message queue pipeline
Copy Trading CLI Python, MT5Manager, MetaTrader5 Manager API to terminal copy trader (urgent client rescue)

πŸ›‘οΈ Security & Incident Response

Hacker at Work Matrix Code Rain Cyber Matrix

Project Focus
Automated Incident Response Forensic archive of a compromised CRM breach investigation, blockchain evidence
Margin Call Telegram MT5 MQL5 EA + Telegram bot for multi-terminal margin alerts
MT5 Proxy Enforcement Trading platform access control & proxy hardening
Security research repos BYOB, TheFatRat, btcrecover, OWASP ZAP workflows for ethical research & red-team tooling
Infrastructure & Network Ops Out-of-band management (HP iLO, Dell iDRAC, KVM over IP, managed PDUs, Wake-on-LAN), Cisco/MikroTik configuration, Ubiquiti airMAX point-to-point links, CCTV with NVR/DVR

> ls ./foundations/ --small

πŸ“š Academic & Early Projects Linnaeus University (2015–2021) & foundational learning

These shaped the fundamentals: OOP, networking, databases, and first deployments. Small repos, big lessons.

Era Projects Tech
2015–2017 Linnaeus Courses Part 1: Yahtzee, BoatClub, server admin Java, Maven, PHP
2018–2019 Android apps: Flag Quiz, Photo Frame, Chinese Ebook, Creature Game Java, Android SDK
2018–2020 Blackjack (Java/C#), SQLite-DB, Assembly micro-controller Java, C#, C, ASM
2019–2020 REST BookStore API, NodeJS Login, AJAX Quiz, thesis report Node.js, HTML/JS
~2022 av222gx examinations & exercises Node.js
Side projects Chess (Android/React/Web), Persian Dates, Responsive HTML React, Java

πŸ“„ Published research: Mobile application development and deployment (DiVA), CI/CD thesis at Naviga/Infomaker


> experience --timeline

2011 ─── IT Infrastructure @ STNJ (Dubai) ─── Cisco/MikroTik, Ubiquiti airMAX PtP, iLO/iDRAC, CCTV, racks
2016 ─── Code Hub Manager @ Kodkollektivet (Sweden) ─── Django community platform, workshops, speaking
2017 ─── Thesis Research @ Naviga ─── Mobile CI/CD, Fastlane, automated asset generation (published)
2018 ─── System Developer @ Ericsson ─── Java, Python, Groovy, Jenkins, Spring Boot, AWS
2019 ─── System Developer @ Contribe AB ─── React Native, Swift, Kotlin, architecture, security analysis
2021 ─── Software Developer @ Megaminers ─── ERP, accounting automation, IT leadership
2023 ─── Head of Software Dev & Cyber Security @ PIPWISE ─── Fintech platforms, MT5, AI risk, VAPT
2025 ─── Featured Speaker @ CyberX Summit & Awards (Muscat, Oman)

> cat speaking.md

Event Role Where When
CyberX Summit & Awards 2025, 26th Global Edition, Oman Featured Speaker Grand Millennium Hotel, Muscat Nov 2025
Kodkollektivet Kalmar Code Hub Manager & Speaker Kalmar, Sweden 2016–2018

Two years running a student programming community in Sweden, still speaking at industry events today. Explaining a system is how you find out whether you actually understand it.


> certifications --list

Academic & Professional Certifications

Credential Issuer
BSc Computer Science Linnaeus University, Sweden
AS Computer Science + Network Security Linnaeus University, Sweden
Object-Oriented Programming with Java Coursera
RESTful API with HTTP and JavaScript Coursera
Web Application Security Testing with OWASP ZAP Coursera
IBM Cybersecurity Fundamentals Coursera / IBM
SQL for Data Science Coursera
Bash Shell Scripting Coursera
CompTIA Network+ CompTIA
Mentor Certificate, Hackathon SΓ–DRA Hackathon SΓ–DRA

International Credential & Skills Assessments

Assessment Authority Code / Result What it means
Educational Credential Assessment (ECA) World Education Services (WES) 4-Year Bachelor + 2-Year Diploma, Computer Science WES is designated by Immigration, Refugees and Citizenship Canada (IRCC) to verify foreign degrees. My Swedish qualifications were assessed and confirmed equivalent to completed Canadian post-secondary credentials
Migration Skills Assessment Australian Computer Society (ACS) ANZSCO 261312, Developer Programmer Positive assessment. Interprets specifications & technical designs, builds, maintains, tests, and documents software application code.
Migration Skills Assessment Australian Computer Society (ACS) ANZSCO 261313, Software Engineer Positive assessment. Designs, develops, modifies, documents, tests, implements, installs, and supports software applications and systems. Skill Level 1, AQF Bachelor with ICT major equivalent confirmed.
Migration Skills Assessment Australian Computer Society (ACS) ANZSCO 261399, Software and Applications Programmers nec Positive assessment. Covers ICT programming roles not elsewhere classified under other ANZSCO 2613 codes: design, develop, test, maintain, and document program code per user & system specifications.

Languages: English (Full Professional) Β· Swedish (Professional Working) Β· Persian/Farsi (Native)

Portfolio: softwarepower.ir: full experience, projects, articles, and resume


> git log --stats




> ping collaborators

! Looking for open-source collaborators on security tooling, fintech automation, and developer experience projects
+ If you're building something that needs a hacker-minded architect, let's talk

GitHub followers Profile Views


exit 0 Β· Wish you a lovely day! β˜•

Pinned Loading

  1. AppAssetStudio AppAssetStudio Public

    A collection of tools to easily generate assets for mobile applications such as launcher icons, buttons, notification icons, find and edit configuration files, and creating mobile application direc…

    JavaScript 1 1

  2. AppAssetAutoDeploy AppAssetAutoDeploy Public template

    Automate Android deployment using Fastlane

    Ruby

  3. Image-file-tools Image-file-tools Public

    A set of tools I used to solve ASIC miner's control board related challenges. Including unpacking, editing, and repacking the image file used to boot the control board firmware.

    9 7

  4. GTP-GuessThePass GTP-GuessThePass Public

    Guess all the possible passwords which a person might use. Specific victim has specific name, birthday, pet name, partner name, etc. which is not in all dictionaries for brute force attack.

    Python

  5. REST-BookStore-API REST-BookStore-API Public

    A REST API that represent the back-end for e-commerce website with authentication, user login and also the Command Line Interface

    Java 2 1

  6. SQLite-DB SQLite-DB Public

    SQLite database with tests

    Java