Computer Science graduate · Software & Cloud Engineer · Al Khor, Qatar
Python · Java · Rust · TypeScript · AWS Lambda · FastAPI · Flask · Docker
Computer Science graduate (Asia Pacific University, 2026) with production engineering experience and hands-on AWS delivery. I spent five months as a Software Engineering Intern at Joget Technology in Malaysia, shipping three production Java plugins to a live enterprise marketplace, cutting one codebase by ~40% through consolidating duplicate class logic, and integrating the platform with four enterprise databases under Docker. My core strengths are backend development, Python, Java, REST API design, and serverless architecture on AWS.
I got into software engineering because I wanted to build things that actually run in production, not just in theory. CyberMon is the clearest example — an 11,000+ line desktop SIEM alternative with a config-driven risk scoring engine, a client-server agent mode, and 318 passing tests at 13,400 events/second with zero false positives, built end to end by me. More recently I deployed a 13-endpoint serverless REST API on Lambda, API Gateway and RDS, which is where my focus is heading next. That drive to ship complete, tested, documented software is what I bring to every project.
Outside of work I'm into gaming, following the tech industry, and exploring whatever new tool or language catches my eye — that's how Rust ended up in my portfolio. I'm based in Al Khor, Qatar, I grew up here, and I'm genuinely excited to build my career in the region I call home. Valid QID, immediately available, no visa or relocation required.
☁️ Accessibility Accommodation Portal — Serverless AWS Application
A serverless accommodation-request platform built end to end on AWS. Deployed a 13-endpoint REST API on Lambda behind API Gateway, backed by Amazon RDS for MySQL through SQLAlchemy ORM.
File traffic is kept off the API tier entirely — browsers upload directly to S3 via pre-signed URLs issued by a dedicated Lambda endpoint. The data model is a 4-table schema with UUID keys, enum-constrained roles, and an allocation guard that blocks duplicate budget disbursement.
The frontend is a React 19 single-page app with role-scoped dashboards for four distinct user types (student, faculty, finance, admin), driven by the same role model enforced server-side.
Stack: AWS Lambda · API Gateway · RDS (MySQL) · S3 · FastAPI · SQLAlchemy · React 19 · Vite · Tailwind CSS
🛡️ CyberMon — Desktop Security Monitoring Platform
An 11,000+ line desktop SIEM alternative covering Linux syslog, Windows OpenSSH and Apache logs. Three detection rules feed a config-driven 1–25 likelihood × impact scoring engine, with findings persisted to SQLite for querying and visualization.
Also runs in client-server mode: remote agents POST log batches to a Flask endpoint secured by X-API-Key auth, and detection state carries across batches — so a slow brute-force spread thin over hours still gets caught.
Benchmarked at 13,400 events/second on real LogHub data with 318 passing pytest tests and zero false positives. Ships as two self-contained Windows executables via PyInstaller.
Stack: Python 3.12 · PyQt6 · PyQtGraph · Flask · SQLite · pandas · pytest · PyInstaller
⚙️ RTS Wiki Pipeline — Real-Time Stream Processor
Two complete Rust pipelines over live Wikimedia SSE streams — one async (Tokio), one threaded — sharing an identical parser, priority router, and leaderboard so the comparison isolates the execution model. Monitored against a 2 ms soft deadline.
The finding is that neither wins outright. Async takes live load (human p99 627 µs vs 1,231 µs), but threaded wins under stress by 34.9× (1,802 µs vs 62,815 µs) because a busy-spinning task starves the Tokio worker it occupies. The p50 hides this completely — async stayed at 105 µs while its tail hit 62 ms.
Zero-copy parsing verified by allocation audit: 2,728 of 2,728 parse calls with zero heap allocations, 2.08× faster than owned parsing.
Stack: Rust · Tokio · Crossbeam · parking_lot · DashMap · Criterion
🔗 Supply Chain DApp — Blockchain Traceability Platform
A role-based supply chain platform recording a product's full journey from manufacture to final sale on-chain. Anyone can verify authenticity by scanning a QR code — no crypto wallet required for public verification.
Solidity 0.8.20 contracts on a local Hardhat node, with a Next.js 14 / TypeScript frontend and MetaMask integration. Five distinct roles (manufacturer, distributor, retailer, regulator, public) with MySQL-backed audit logging and IPFS certificate storage.
Covers ownership transfers, lifecycle status updates, IoT sensor readings, product recalls, and CSV-exportable audit trails.
Stack: Solidity · Hardhat · Next.js 14 · TypeScript · MySQL · IPFS (Kubo) · MetaMask
🏢 CrestHRM — Distributed HR Management System
A three-tier Java RMI application replacing a paper-and-spreadsheet leave process with one authoritative record served over TLS. A 16-method typed remote contract hands leave evaluation to a fixed worker pool, so the client call returns immediately while the decision runs in the background.
Concurrency is guarded at two layers: synchronized mutating methods prevent interleaved writes, while the balance deduction is arbitrated at the SQL layer by a WHERE balance >= requested clause.
Stack: Java · Java RMI · JDBC · Apache Derby · TLS/SSL · ExecutorService
Languages
Web, API & Frameworks
Cloud & DevOps
Databases
Certifications
🦕 Fun fact: I like dinosaurs — fossils are just nature's version control.