Work

One of four engineers running the platform since 2023 — made its core architectural decisions, from service extraction and database topology down to the tenancy model — and initiated cross-cutting programs: security audits, observability, the admin design system and engineering tooling.

Built and evolved a multi-tenant shipping SaaS — OMS and TMS services plus admin and client portals — carrying 100K+ orders/month on NestJS, Next.js, PostgreSQL, MongoDB and Redis.

Rebuilt shipment creation as a standalone NestJS TMS serving FedEx, UPS, USPS, GLS, ShipStation and DoorDash; idempotency keys plus per-carrier retry and circuit-breaker policies eliminated duplicate-label incidents during carrier outages.

Cut orders-export response time by 57% and its memory peak by 40% by rewriting CSV generation around cursor-based pagination and batched queries — 50K+-row exports became routine.

Architected the split of the monolithic backend into two per-tenant PostgreSQL databases — runtime datasource routing, read replicas, dual-DB migrations — with zero downtime; host-based white-labeling launches new client portals without code changes.

Designed a shipping rates engine — zone lookups, dimensional weight, product-type guardrails, carrier/service validation — powering automatic cheapest-carrier selection across tenant accounts.

Planned and built the carrier-billing automation epic: parsing raw UPS/FedEx invoice files, classifying accessorials and generating cost-vs-revenue reports that replaced days of manual reconciliation every period.

Shipped core OMS workflows end to end: indexed order search, carrier webhooks, route throttling, 4x6 shipping labels and per-tenant address books.

Built an AI-powered support assistant, front-end and back-end, that aggregates order, shipment and system data into a conversational troubleshooting view.

Closed penetration-test findings across SSRF, SQL injection and endpoint access control, then rolled email-OTP MFA behind Cloudflare Turnstile with session refresh/revoke.

Owned authentication across both portals: Auth0 Universal Login rollout, refresh-token sessions, email-verification enforcement and hardened sign-in flows.

Initiated the platform's unified observability strategy: OpenTelemetry tracing, PII-redacted structured logging and tail sampling across the OMS and TMS, with security events — account blocks, credential attacks, throttling breaches — streamed to on-call.

Led a zero-regression Next.js 14→16 / React 19 / MUI v9 migration: defined the portal's design system and unified theme/token architecture behind a legacy-parity harness, then cut sales-orders overhead with server-side prefetch hydration into React Query.

Standardized engineering practice across 10+ services: self-hosted Renovate, shared CI gates for typecheck/lint/tests, ADR workflow and an indexed agent workspace.

Built a Vue/GraphQL healthcare CMS for versioned medical forms: diff view between versions, auto-fill and an interactive form builder; tuned bundle/render performance up front and SQL/PubSub on the back.

Worked across a medical AI platform — WebGL rendering, service workers, a PDF viewer with form layers and template-based generation — and contributed to a browser DICOM viewer for CT scans.

Built a flow-based visual editor for multi-channel marketing campaigns on React Flow: node graphs, config panels, validation rules — plus virtualized data tables and chart-driven campaign summaries for a top global consulting firm.

Developed a React/GraphQL claim platform for roof installation jobs: complex forms, server caching, real-time push/email notifications, Google/OpenStreetMap maps, OAuth and Salesforce sync.

Built sales account-planning features — strategy workflows, Socket.io reminders, Salesforce sync through Heroku Connect — with PDF reports generated on demand and stored in AWS S3.

Shipped a Vue/Nuxt conference site with a session-matching quiz, personalized agendas, a Contentful-powered page builder and a MongoDB Atlas migration.