Résumé · 2026

Full-stack software engineer, backend at heart. I ship production multi-tenant SaaS, real-time systems, and Zod-validated AI for healthcare, recruitment, travel, and AI SaaS clients.

Email
zforzain2000@gmail.com
GitHub
github.com/zainmustafai
LinkedIn
linkedin.com/in/zforzain2000
Location
Pakistan · UTC+5 · available globally

01Summary

Full-stack software engineer working across the whole system - interfaces, frontend state, backend services, data, queues. Deepest on the backend: NestJS, Postgres, real-time sync.

Fifteen-plus production projects across healthcare, recruitment, travel, and AI SaaS. TypeScript everywhere, Zod at every boundary.

Patterns over cargo-cult. Every architectural choice earns its place against current best practice - not last year's consensus.

02By the numbers

2+

Years shipping

Since Jan 2024 · updates itself

15+

Production projects

Across 5 client domains

4

Flagship builds

Healthcare · AI SaaS · Recruitment · Travel

100%

Type-safe stack

Zod at every boundary

03Experience

Software Engineer · Texagon

Lead engineer on multi-tenant enterprise platforms shipped to Irish, Pakistani, and US clients.

  • Architected the frontend for the Healthcare Ireland Group enterprise platform: React 19, TypeScript, Zustand + TanStack Suite. Patient management, scheduling, clinical notes, billing, analytics - real-time sync via Socket.io rooms mapped to the Org → Branch → Department hierarchy.
  • Led end-to-end development of the First Choice Recruitment 4-application platform (NestJS + Prisma + PostgreSQL): multi-step candidate intake, document verification, PDF pipeline, automated invoicing, Twilio SMS + Sendinblue email.
  • Architected ComplianceBot AI - a multi-tenant SaaS that automates construction-compliance docs via an adaptive AI interview backed by Google Gemini, the Vercel AI SDK, and Zod-validated structured output.
  • Delivered 6+ secondary client websites including VidVox (AI video transcription via Whisper + FFmpeg serverless workers) and a fine-art restoration dashboard backed by GraphQL/Apollo.
  • React 19
  • NestJS 11
  • PostgreSQL
  • Prisma
  • Socket.io
  • BullMQ
  • Google Gemini
  • Cloudflare Workers

Junior Software Engineer · Interactive Tech Solutions

Shipped full-stack features across React + Node/Express services for SMB clients.

  • Translated complex Figma designs into pixel-precise, responsive interfaces.
  • Designed MongoDB schemas and indexes for high-read workloads; reduced average list-view query time by removing N+1 patterns.
  • React
  • Node.js
  • Express
  • MongoDB

04Selected projects

  • Healthcare Ireland - Enterprise Platform

    Frontend architect

    Multi-tenant healthcare platform: Org → Branch → Department isolation, Socket.io rooms, Prisma tenant middleware, document pipeline with BullMQ + MinIO.

    • React 19
    • NestJS
    • PostgreSQL
    • Socket.io

  • ComplianceBot AI - Multi-Tenant SaaS

    Full-stack architect

    Adaptive AI interview generating type-safe construction-compliance docs. Schema is the contract: Zod validates every Gemini response before it touches domain code.

    • Next.js 15
    • Supabase
    • Google Gemini
    • Zod
    • Vercel AI SDK

  • First Choice Recruitment - 4-app Suite

    End-to-end lead

    Four interconnected applications: candidate intake, vetting, placement, billing. One NestJS backend, PDF pipeline, Twilio + Sendinblue, Cloudflare Workers.

    • NestJS
    • Prisma
    • PostgreSQL
    • Cloudflare Workers
    • Twilio

  • VidVox - AI Video Transcription

    Solo engineer

    Whisper-powered transcription with FFmpeg subtitle burning, serverless workers, S3-compatible storage.

    • Next.js
    • Whisper
    • FFmpeg
    • AWS S3

  • Otrip.io - Travel Ecosystem

    Frontend lead

    4-module travel platform: consumer app, marketing site, admin dashboard, blog CMS - shared design system and auth.

    • Next.js
    • TypeScript
    • Tailwind

  • NestJS Auth Architecture

    Open template

    JWT rotation with token-family reuse detection, Argon2id hashing, TOTP 2FA, OAuth 2.0, Redis-backed sessions.

    • NestJS
    • JWT
    • Argon2
    • OAuth
    • Redis

  • DATA-LINK-LAYER-REACT-v1

    Open library

    Type-safe data layer: discriminated unions for request states, three pagination strategies, request deduplication, optimistic updates.

    • TypeScript
    • React

05Stack & tooling

Languages
  • TypeScript (strict)
  • JavaScript
  • SQL
  • Bash
  • HTML5
  • CSS3
Frontend
  • React 19
  • Next.js 16 (App Router, RSC, Turbopack)
  • Tailwind v4
  • Framer Motion
  • GSAP + ScrollTrigger
  • Zustand
  • TanStack Query / Router / Table
  • Redux Toolkit
  • Mapbox GL
Backend
  • NestJS 11
  • Node.js
  • Express
  • Bun runtime
  • REST + JSON-RPC
  • WebSockets
Data + ORM
  • PostgreSQL (advanced)
  • MongoDB
  • Redis
  • Prisma 6
  • Drizzle
  • Mongoose
  • Supabase (Postgres + Auth + Edge)
Real-time + queues
  • Socket.io (client + server)
  • BullMQ
  • Redis pub/sub
Auth + security
  • JWT rotation + token-family reuse detection
  • Argon2id
  • TOTP / 2FA
  • OAuth 2.0 / OIDC
  • Passport.js
  • RLS in Supabase
Applied AI
  • Google Gemini
  • Vercel AI SDK
  • OpenAI Whisper
  • Zod-validated structured output
  • Prompt engineering for production reliability
DevOps + infra
  • Docker
  • Cloudflare Workers / Pages / R2
  • Vercel
  • AWS S3 + CloudFront
  • MinIO
  • GitHub Actions
Testing
  • Vitest
  • Playwright
  • Jest
  • Supertest
  • @axe-core/playwright
Tooling
  • Bun
  • Turborepo
  • ESLint + Prettier
  • Shiki
  • MDX (next-mdx-remote/rsc)

06Operating principles

Type safety is the contract

One Zod schema produces the type and the runtime check. Static and dynamic stay in sync because they're the same artifact.

Performance is perception

Optimise for LCP, INP, CLS - the metrics that map to how a UI feels, not the ones that look good on a chart.

Accessibility is structural

Reading order, focus, contrast, motion - designed in at layout time, not warned about during QA.

Honest scope

Three concrete callsites before any abstraction. No frameworks built for hypothetical futures.

07Education

2019 - 2023

Bachelor of Science - Information Technology

University of Gujrat

CGPA 3.43 / 4.00 · graduated with merit

08Languages

English
C2 - Professional working proficiency
Urdu
Native
Punjabi
Native

09Availability

Status
Open to senior roles and select project work
Time zone
UTC+5 (overlaps EU full day + US-East mornings)
Modality
Remote-first
Notice period
30 days, flexible for the right team

Best way to reach me: zforzain2000@gmail.com. I read every line.