SYED HUSNAIN KHALID
Top 50 engineer on Standout (YC-backed)

I build full stack products and run the infrastructure they ship on.

React, Next.js and React Native on the front. Node, NestJS and FastAPI behind. TypeScript throughout, shipped with tested CI/CD.

See my workContactAvailable for on-site Islamabad and remote roles
Ranked engineer globally
Top 50
Standout (YC-backed)
Mobile app shipped solo, 114 backend tests
< 4 days
OpsSwipe, React Native + Supabase
Students on a live exam platform at once
7,000+
Panaversity, Next.js
Independent AppSec score
9.7 / 10
TAC Security CASA assessment

Full stack work, web and mobile

Production apps and client platforms first, then the open-source tools.

Open-source mobile app

OpsSwipe

Fix production from your phone and prove it worked.

When production breaks, one card shows what broke, the likely cause, and a fix. A swipe and a fingerprint run it. A code fix can only merge after CI replays the exact failed production requests and every one answers 2xx, with the merge pinned to the proven commit. The backend is TypeScript on Deno (Supabase Edge Functions), with OIDC-signed CI proofs and RevenueCat entitlements checked on the server.

114 backend tests + SQL tenancy tests on Postgres 17

Built solo in under four days for RevenueCat Shipaton 2026

React Native, Expo, Supabase, Deno, GitHub Actions, RevenueCat

Client project

Telehealth platform

Updoc-style on-demand healthcare and consultation platform.

Modular NestJS backend (AuthModule, ConsultationModule, AppointmentsModule), strict DTO validation pipes with class-validator, role-based access control, and transactional appointment scheduling.

NestJS, TypeScript, PostgreSQL, RBAC, Docker

StageMySpace

Client product, Auroxa Tech

AI virtual staging for real estate agents, led end to end.

Agents upload an empty-room photo; the system infers the room type and generates a furnished version from the agent's own prompt. I built the backend, image pipeline, admin portal, and frontend, with PDF report export and an event-driven Celery/Redis queue so multi-model generation never blocks the request.

FastAPI, Celery, Redis, Next.jsVisit site
StageMySpace homepage with a before-and-after staging slider
stagemyspace.com, live today

Intent Studio

Open-source web app

AI image and video studio that reads intent from a plain-language prompt.

Format, camera move, and length are parsed from the prompt, the credit cost is shown live before you run it, and failed renders are refunded automatically.

Next.js, React, TypeScriptLive demo Source
Intent Studio create screen with preset prompts and a live credit balance
Live demo on Vercel

Panaversity exam engine

PIAIC learning platform

Live exams where a failed submission is a student's result, not a retry.

Server-side timed state for in-progress, dropped, and resubmitted attempts. Refresh without losing state or double-counting a submission.

7,000+ concurrent students · zero double-counts

Next.js, React, TypeScript, LangGraph

FounderFlow

Lead Systems & DevOps Engineer

AI inbox-intelligence platform: infrastructure, release pipeline, security.

145 REST endpoints across 22 FastAPI route modules on PostgreSQL + pgvector. Celery async queue with 12 scheduled tasks, 900+ pytest tests gating every release, CI/CD with Workload Identity Federation.

A+ SSL Labs on all 4 production hosts

FastAPI, pgvector, Celery, GCP, GitHub ActionsVisit site
FounderFlow homepage: Your AI Executive Chief of Staff, with SOC 2 Type I completed
founderflowhq.ai, live today

zerodom

Open-source library

Flat, addressable DOM graph generator for AI agents.

Python + TypeScript library that parses a live page into a flat graph of what's clickable and fillable. Every selector is checked for actual uniqueness against the document before it's trusted.

99.00% single-element resolution · 10,756 nodes · 111 real sites

Python, TypeScript, Playwright, MCPWebsite Source
ZeroDOM website hero with a terminal scan and its interaction graph
zerodom.vexralabs.com

infra-guard

Open-source agent

Autonomous observability agent on LangGraph and Groq LPU.

Root-cause analysis on raw log streams: scores anomalies and synthesizes a remediation report. Stability-first test suite: every graph run must reach a terminal state regardless of LLM output quality.

Remediation report in < 5 s

Python, LangGraph, GroqSource

Where I've worked

2.5 years shipping to production since May 2024, across five companies. Two were contracts run alongside a full-time role.

  1. BitBlazeTec Team Lead, DevOps & Platform

    Dec 2025 - Present

    Lead infrastructure, delivery, and security across the company's product portfolio via CloudPanel, mentoring a team of three engineers.

    • Built a distributed intercity ticketing platform where each station runs a standalone box with its own API, PostgreSQL, and Nginx, draining an outbox to HQ when connectivity drops. Per-seat terminal ownership with TTL holds, 22 permissioned actions across 6 roles, fully audited.
    • Delivered a national candidate-testing platform: registration, fee collection, biometric attendance, result processing, and appeals, with an encrypted question bank under role-scoped access.
    Show 2 more
    • Operate high-traffic platforms on Hetzner and GCP with cloud cost and capacity planning.
    • Own code review, architecture decisions, and the release process.
  2. FounderFlow Lead Systems & DevOps Engineer (Contract)

    May 2026 - Sep 2026

    Owned infrastructure, release pipeline, and security posture for an AI inbox-intelligence platform. Contract work, run alongside BitBlazeTec.

    • Secured Google OAuth verification for restricted Gmail scopes and authored an 11-document OWASP ASVS v4.0 evidence package for the CASA assessment. Independent assessment by TAC Security returned an ESOF AppSec score of 9.7.
    • Led SOC 2 Type I readiness across a 48-item evidence programme: 35 compliance policies authored, 35/35 compliant, cloud configuration driven to 34/34 findings passing, zero failures. Caught 4 audit-blocking issues before the formal scan.
    Show 3 more
    • Built CI/CD on GitHub Actions with Workload Identity Federation (no long-lived credentials) and test-gated deployment enforced across every release path.
    • Ran six containerized services on GCP behind Nginx with automated TLS; A+ SSL Labs rating on all four production hosts.
    • Delivered 145 REST endpoints across 22 route modules (FastAPI), backed by PostgreSQL with pgvector. Asynchronous processing on Celery (12 scheduled tasks and webhooks) behind 900+ pytest tests gating every release.
  3. Panaversity Full Stack Agentic AI Engineer

    Aug 2024 - Dec 2025

    AI Engineer on Panaversity's learning platform, an education initiative under PIAIC serving 1,000+ learners. Worked across the assessment system, the agent layer, and the student-facing frontend over 17 months.

    • Built the exam system students use to take tests (question delivery, attempt handling, scoring), scaled to 7,000+ learners sitting exams concurrently, where a failed submission isn't a retryable error, it's a student's result.
    • Handled the state a live exam needs: in-progress, dropped, or resubmitted attempts timed server-side rather than in the browser, refreshing without losing state or double-counting a submission.
    Show 2 more
    • Built AI agents for automated teaching and assessment, generating and evaluating student work rather than relying on fixed answer keys. Started on LangChain/LangGraph as the agent layer matured, and designed automated eval flows so agent responses were checked against expected outcomes instead of spot-checked by hand.
    • Worked across the full student-facing frontend with the team (Next.js, React): the learning interface, assessment flow, and results views.
  4. Auroxa Tech Full Stack Developer (Contract)

    Aug 2024 - Jan 2025

    Full stack and backend engineer building client products, with technical lead responsibility on one of them. Contract work overlapping Panaversity.

    • Led StageMySpace.com end to end (backend, image pipeline, admin portal, frontend), an AI virtual-staging product for real estate. Agents upload a photo of an empty room; the system infers room type and generates a furnished version from the agent's prompt. Built PDF report export and an event-driven Celery/Redis job queue so multi-model image generation never blocked the request cycle.
    • Built an AI outbound calling assistant for Merit Investment Bank on Vapi with Deepgram voice, HubSpot CRM sync for automatic call logging, Microsoft Graph calendar integration, and a 320KB knowledge base covering 50+ objection handlers and 100+ FAQs. FastAPI backend, containerized on Fly.io.
  5. Al-Basiir Technologies Full Stack Developer

    May 2024 - Aug 2024

    First professional role, at NSTP (Pakistan's National Science and Technology Park) while still in school.

    • Built a scholarship-matching platform end to end: students submit a profile and CV, the system parses unstructured CVs via the OpenAI API and returns which scholarships they qualify for and how to apply. Early 2024, when most teams were still deciding whether to use LLMs at all.
    • Built both frontend and backend, then deployed and ran it on AWS EC2: first time owning a service in production rather than handing it off.

Case study: ticketing that keeps selling offline

Terminals across Pakistan lose connectivity for hours. Most ticketing systems stop selling when the cloud drops. This one was built the other way round.

$ inspect station-box
Sells, refunds, transfers, and boards with no network. The counter UI is static files behind Nginx, so there is no Node process to crash at 4am with nobody technical on site.

Station-box autonomy

Each station runs a standalone box with its own FastAPI service, PostgreSQL, and Nginx. It can sell, refund, transfer, and board with no network at all.

Sync engine

Changes queue in a local outbox and drain to HQ when connectivity returns.

Seat locking without cloud locks

The hard part isn't offline mode, it's the seats. Per-seat terminal ownership with TTL holds means two stations never sell the same seat, and abandoned checkouts release automatically.

Nothing to crash at 4am

The counter UI is exported to static files, so there is no Node process on station hardware. 22 permissioned actions across 6 roles, every one audited for cash control.

Security and compliance, independently assessed

I'd rather find the hole myself than read about it in someone's incident report.

9.7 / 10

ESOF AppSec score

CASA assessment, OWASP ASVS v4.0

TAC Security

Authored an 11-document OWASP ASVS v4.0 evidence package for Google restricted Gmail OAuth scopes.

Independent assessment by TAC Security returned an ESOF AppSec score of 9.7.

34 / 34

cloud checks passing

SOC 2 Type I readiness

48-item evidence programme

Authored 35 compliance policies, 35/35 compliant.

Zero failing cloud checks. Caught 4 audit-blocking issues before the formal scan.

SSRF

validated finding

Bugcrowd vulnerability research

Independent

Bypassed a vendor's outbound-fetch allowlist via redirect chaining and DNS rebinding, reaching internal cloud metadata after passing validation.

Vendor and exploit details under active disclosure policy.

Bugcrowd profile

Stack

What I use day to day, grouped by layer.

Frontend and mobile
TypeScript, React, Next.js, React Native, Expo, Tailwind
Backend
Node.js, NestJS, FastAPI, PostgreSQL, pgvector, Redis, Celery, Supabase, Deno
DevOps and infra
Docker, GitHub Actions, Nginx, GCP, Hetzner, AWS EC2, CloudPanel, Fly.io, Render
Delivery and security
Workload Identity Federation, OIDC, test-gated releases, OWASP ASVS, SOC 2, RBAC
AI systems
LangGraph, LangChain, Groq, OpenAI API, Vapi, Deepgram, MCP