Skip to main content

BACKEND
ENGINEERSystem Architecture · PHP & Laravel · REST APIs · Workflow Automation

I architect secure, high-reliability backend systems for SaaS and enterprise platforms—specializing in centralized SSO & access control, stateful workflow engines, background processing pipelines, and high-throughput APIs.

3 YEARSEXPERIENCE

Production Delivery

Building and maintaining production software across enterprise systems and SaaS products.

BUSINESSSYSTEMS

Purpose-Built Platforms

Software designed around real operational requirements, business rules, and user workflows.

WORKFLOWAUTOMATION

Reliable Backend Processes

APIs, queues, background jobs, integrations, and asynchronous processing.

RECENT
PROJECTS

Close-Out Package (COP) System
Production · Enterprise

Close-Out Package (COP) System

Telecom construction management platform automating Verizon-format PDF deliverables, multi-stage photo workflows, GPS verification, and manager approval gates.

Chunked UploadsPDF PaginationScoped RBACWorkflows
Enterprise Unified SSO
Production · Enterprise

Enterprise Unified SSO

Centralized identity platform connecting multiple applications through secure authentication, access provisioning, and cross-application access control.

Single Sign-OnJWT AuthTOTP 2FAUser Sync
CCMS — Enterprise Sales & CRM
Production · Enterprise

CCMS — Enterprise Sales & CRM

Production enterprise sales & client CRM with territory-based data isolation, manager-approved pipelines, cascade revenue targets, and quote-to-PDF workflows.

Territory RBACApprovalsCascade TargetsQuote to PDF
Job Portal — Recruitment & Onboarding
Enterprise · Laravel

Job Portal — Recruitment & Onboarding

Enterprise recruitment platform covering job publishing, candidate applications, document-heavy onboarding and employee administration — with SSO identity sync and a live analytics dashboard.

SSO SyncDocument OnboardingApplication PipelineGeo Analytics
Genealogy SaaS Platform
Production · SaaS

Genealogy SaaS Platform

Collaborative genealogy platform combining interactive family trees, historical records, OCR data extraction, intelligent matching, and subscriptions.

Graph ABACBFS Family SearchOCRRecord Matching
AI Assistant Platform
Personal R&D · Python

AI Assistant Platform

Omnichannel AI automation system built with FastAPI, combining RAG pipelines, Pinecone vector search, voice AI, and Meta WhatsApp Cloud API workflows.

FastAPIRAG PipelinePinecone Vector DBWhatsApp API
Zametrix — Real Estate Intelligence
Production · SaaS

Zametrix — Real Estate Intelligence

Property intelligence platform combining market data, investment analysis, location intelligence, property comparison, and business workflows.

PropTechModerationLead RoutingMarket Analytics
Shipment Tracker & IMS
Production · Enterprise

Shipment Tracker & IMS

Telecom logistics platform managing shipment lifecycles, inventory, automated email processing, installation workflows, and operational tracking.

IMAP ParsingQueue JobsItem TrackingLifecycle States
Samsung Network Migration & Diagrams
Production · Enterprise

Samsung Network Migration & Diagrams

Internal telecom tooling that extracts structured data from Samsung circuit paths, assigns router and VDU ports, and renders the result as a printable network topology.

Regex ExtractionPort Auto-MappingVirtualized GridHardware Print Bridge

PROFESSIONAL
EXPERIENCE

Surfiq Technologies

Backend Engineer (PHP / Laravel)

Architecting and maintaining production backend systems across telecom, CRM, logistics, and workforce operations — including centralized SSO/OAuth2 identity infrastructure, multi-stage approval and PDF generation pipelines, IMAP email automation, and fine-grained RBAC/ABAC access control.

2024 — Present

Independent & Contract Engineering

Backend & Full-Stack Developer

Designed and shipped custom web platforms and RESTful APIs for early-stage and SMB clients — owning database schema design, third-party payment and webhook integrations, authentication flows, and end-to-end production delivery.

2023 — 2024

KEY
ACHIEVEMENTS

  • Identity Hub: Built a centralized OAuth 2.0 authorization server with PKCE (S256) and RS256-signed JWTs, backed by TOTP two-factor authentication, JTI blacklisting for immediate logout, refresh-token rotation, and HMAC-SHA256 user sync across internal applications.

  • Resumable Media Pipeline: Designed a stateless HMAC-signed chunked upload pipeline — 5 MB chunks, idempotent append, concurrent-safe finalization, and orphaned-asset pruning — feeding queued Headless Chromium (Browsershot) PDF generation.

  • Graph-Aware ABAC Engine: Engineered a five-role attribute-based access control layer that resolves each user's editable branch scope by running breadth-first graph traversal, so permissions follow a person's position in the family tree rather than a flat role check.

  • Territory & Budget Cascade Engine: Architected hierarchical RBAC with set-diff cascade revocation down reporting subtrees, multi-tier target-budget allocation, and race-free sequential quote numbering under a distributed lock feeding a Dompdf quote-to-order flow.

  • Telecom Path Extraction Engine: Built a priority-ordered regex engine that parses circuit and port paths out of CIENA and Samsung migration data, scoring every match by confidence and persisting the pattern used so each extraction stays auditable.

  • Automated Logistics Ingestion: Engineered an IMAP email pipeline with Word/HTML layout parsing and message-ID deduplication, driving a nine-state shipment lifecycle machine spanning notice, transit, warehouse, install-site, and transfer.

  • Archival Search & OCR Pipeline: Integrated the US National Archives and OpenArch APIs into a unified search layer, feeding idempotent Tesseract OCR with Google Gemini structured entity extraction to connect archival records back to family trees.

  • High-Throughput Data Imports: Built chunked Excel import pipelines that bulk-insert contacts in 1,000-row batches, with in-memory caching for repeated lookups and US state inference from a 230-entry phone area-code map.

TECHNOLOGY
STACK

Back-End

  • PHP
  • Laravel
  • Python
  • FastAPI
  • REST APIs
  • Eloquent ORM
  • Queues & Horizon
  • Modular Monoliths

Database & Performance

  • MySQL
  • Redis
  • Pinecone Vector DB
  • Query Optimization
  • Chunked Batch Processing
  • N+1 Remediation

Security & Access Control

  • OAuth 2.0 / SSO
  • PKCE (S256)
  • JWT (RS256)
  • TOTP 2FA
  • HMAC-SHA256
  • RBAC & Graph ABAC
  • Gates & Policies

AI & Integrations

  • RAG Pipelines
  • Google Gemini API
  • Tesseract OCR
  • WhatsApp Cloud API
  • Microsoft Graph API
  • Stripe & PayPal
  • IMAP Parsing
  • Pusher / WebSockets

Tools & DevOps

  • Git & GitHub
  • GitHub Actions (CI/CD)
  • PHPUnit / Pest
  • Laravel Telescope
  • Headless Chromium (Browsershot)
  • Linux
  • Postman

Front-End

  • JavaScript
  • TypeScript
  • React
  • Inertia.js
  • Laravel Blade
  • Tailwind CSS
  • Bootstrap

LET'S BUILD
YOUR NEXT SYSTEM

Whether you are hiring for a backend engineering role, architecting a multi-system SaaS platform, or automating complex operational workflows — let's connect.

0/1500

or download my technical resume →