Own your time
without the stress

Engineer who ships. I build and deploy production web platforms and AI products end-to-end — schema to UI to cloud.

End-to-end engineering.See availability

01 — About

The engineer behind the work.

I build and deploy production web platforms and AI products end-to-end. Schema to UI to cloud — no handoffs, no buzzwords.

Say helloSee the work
Portrait of Ahmad Shah, software engineer and tech founder

Engineer who ships. I build and deploy production web platforms and AI products end-to-end — schema to UI to cloud. Recent work: a multi-tenant RAG platform with database-level data isolation, a live commercial client platform on its own .ch domain, and a Go/Redis distributed task queue with a reproducible benchmark harness.

Working with
Global clients
Open for
Q3 2026
Languages
EN · DE · AR · BN
Approach
Stack agnostic
See the work Let's talk

AI & Agents

Multiagent systems that plan, decide, and act across workflows — with the orchestration and governance production demands.

  • Agentic AI workflows
  • Multiagent architecture
  • Agent orchestration
  • Agent governance & security
  • LLM integration
  • RAG systems

Data & Cloud

AI-ready data platforms that agents can actually read — retrieval indexes, vector storage, agent-readable governance.

  • AI-ready data pipelines
  • Data lakes & warehouses
  • Data governance
  • Real-time streaming
  • ETL / ELT
  • Analytics platforms

Product Engineering

AI-native products and the agentic platforms around them — modern web, mobile, APIs, and agent operation centers.

  • Web & mobile applications
  • Cloud migration & architecture
  • API design
  • Kubernetes & containers
  • CI/CD pipelines
  • Legacy modernization

Stack I ship in production

PythonFastAPITypeScriptNext.js 16React 19PostgreSQLpgvectorRedisNVIDIA NIMAWSTerraformDockerGoNestJSgRPCTailwind CSSShadcn/UIVercel AI SDKPrismaKubernetesPythonFastAPITypeScriptNext.js 16React 19PostgreSQLpgvectorRedisNVIDIA NIMAWSTerraformDockerGoNestJSgRPCTailwind CSSShadcn/UIVercel AI SDKPrismaKubernetes
ECS FargateRDSElastiCacheCloudWatchGitHub ActionsCaddySQLAlchemyJWTStripePrometheusGrafanaSocket.ioYjsReact-Three-FiberFramer MotionZustandTanStack QuerySpring BootJavaNextAuthECS FargateRDSElastiCacheCloudWatchGitHub ActionsCaddySQLAlchemyJWTStripePrometheusGrafanaSocket.ioYjsReact-Three-FiberFramer MotionZustandTanStack QuerySpring BootJavaNextAuth

01 — What I do

Infrastructure rigor. Product polish. Same engineer.

I can architect your multi-region Kubernetes cluster and ship your customer-facing storefront — without handing either off to someone else.

Infrastructure

RAG that doesn't leak

Most multi-tenant RAG setups filter tenants in Python after the vector search. That gap is where data leaks. I push the tenant boundary into the SQL query plan, before pgvector runs.

FastAPI + SQLAlchemy 2.0 async + PostgreSQL RLS + NVIDIA NIM (nv-embed-v1, llama-3.1-70b). Token streaming over SSE. Isolation enforced at the SQL query layer, provable live.

FastAPIpgvectorNVIDIA NIMRLS
Infrastructure

Cloud bills that don't scale with traffic

If your AWS bill grows linearly with users, you're paying for on-demand when you could be paying for spot. I move stateless workloads to spot and shift them across regions hourly.

Terraform-managed spot fleets, 2-minute drain grace, Caddy at the edge. Stateless workloads move to spot and shift across regions hourly. The connection pool — not CPU — is usually the real bottleneck.

AWSECS FargateSpot FleetTerraformCaddy
Product

Commercial platforms that convert

A medical practice, a restaurant, a salon — they don't care about Kubernetes. They care that the site loads in 0.8s, books appointments without double-booking, and looks premium on a phone.

Next.js 16 App Router + Tailwind CSS + Framer Motion. ISR for content, edge functions for booking, multilingual routing. Live in production for Swiss clients.

Next.js 16Tailwind CSSFramer MotionVercel
Infrastructure

Legacy code that stops costing you hires

Tech debt isn't a code problem — it's an onboarding problem. When new hires take weeks to ship their first PR, the debt is winning. I measure debt in time-to-first-PR, not lines.

jQuery/JSP → React + Spring Boot, feature-flagged strangler pattern, SonarQube complexity as the metric. Phased migration with parallel-run validation behind a feature flag gateway.

ReactSpring BootFeature FlagsSonarQube

02 — Selected Work

Three builds, all live.

Commercial platforms shipping in production and a RAG platform where tenant isolation is provable, not promised.

Live in production for Swiss clients
Beauty Lounge Khatera

Premium salon booking platform

Problem

A Swiss beauty salon needed a booking platform that matched their premium brand — fast, multilingual (DE/EN), and able to handle stylist portfolios + reservation flow without double-booking.

Solution

Next.js 16 App Router with ISR for service pages, Tailwind CSS design system, Framer Motion micro-interactions. Appointment state machine in PostgreSQL with row-level locking. Deployed on Vercel edge.

Next.js 16Tailwind CSSFramer MotionVercelPostgreSQL
beautylounge-khatera.ch
Live in production for Swiss clients
MigMig Gastro

Multilingual restaurant storefront

Problem

A restaurant needed a storefront that handled online ordering, real-time menu updates, and a kitchen display integration — 70% of their customers order from phones.

Solution

Next.js with locale-based routing (DE/IT/EN/TR), optimistic UI for cart updates, Server-Sent Events for order status, image optimization for food photography. Mobile-first interaction patterns.

Next.jsTailwind CSSSSEi18n RoutingImage Optimization
migmiggastro.ch
Isolation enforced at the SQL query layer, provable live
Multi-tenant RAG Platform

Secure retrieval-augmented generation

Problem

Enterprise clients needed a RAG pipeline where tenant data isolation is provable — not just application-layer filtering, but enforced at the SQL query layer before vector similarity search runs.

Solution

FastAPI + SQLAlchemy 2.0 async + PostgreSQL RLS policies scoped per-request. NVIDIA NIM (nv-embed-v1 + llama-3.1-70b) for embeddings + token streaming over SSE. Isolation enforced at the SQL query layer, provable live.

FastAPIpgvectorNVIDIA NIMPostgreSQL RLSSSE
Live demo + 90-sec video

03 — Open Source

Things I build in the open.

Distributed systems, multi-tenant infrastructure, Kubernetes tooling, real-time collaboration.

Buraq

Distributed Task Queue

Highly concurrent, resilient distributed task queue built with Go and Redis Streams. Handles async jobs, scales workers, and manages failures through automatic retries and a Dead-Letter Queue.

  • 13,356 tasks/sec publish throughput
  • Automatic retries + DLQ with one-call replay
  • Real-time SSE event stream via Redis Pub/Sub
13.3K/s
Throughput
582ms
p99
10K
Concurrent
Go 1.24+Redis StreamsPrometheusGrafana
Star on GitHub

TenantKit

Multi-Tenant SaaS Boilerplate

Secure, scalable starting point so you don't rebuild auth, billing, and tenancy. PostgreSQL RLS per request via AsyncLocalStorage, JWT rotation with reuse detection, Stripe billing, Terraform AWS.

  • PostgreSQL RLS via SET LOCAL ROLE
  • JWT rotation with reuse detection
  • Stripe + signed webhook verification
  • Terraform AWS (ECS, RDS, ElastiCache)
6+
Concerns
11
Stack
Actions
CI
NestJS 11Next.js 16PostgreSQL RLSStripeTerraform
Star on GitHub

Sentinel-Aura

K8s Geographic Arbitrage

Kubernetes Operator and 3D Dashboard that visualizes and executes geographic compute arbitrage in real-time. Tracks Spot prices across 5 regions; operators trigger 1-Click Migrate when margin is profitable.

  • Multi-cluster orchestration via client-go
  • Safety dry-run: blocks if egress > savings
  • WebGL 3D Earth with custom ShaderMaterial
5
Regions
Live
3D
1-Click
Migration
Go Operatork8s/client-goR3FWebGLTailwind v4
Star on GitHub

Omni-Sync

Real-Time Collaborative Markdown

High-performance, real-time collaborative markdown editor for SRE Incident Playbooks. Go backend with CRDTs (Yjs), Next.js 15 frontend with Tiptap/ProseMirror, presence cursors, live K8s status blocks.

  • Yjs CRDT binary persistence in Redis
  • Floating presence cursors via Awareness
  • Inline K8sStatusBlock with live sparkline
  • Cmd+K command palette
Real-time
Collab
Zero-loss
Persistence
y-websocket
Protocol
Go + WSYjs CRDTNext.js 15TiptapRedis AOF
Star on GitHub

04 — Writing

Notes from production.

Deep dives on RAG isolation, FinOps, and backend work that makes SaaS scale.

View all posts 
# rag_search.py
async def rag_search(q):
  emb = await nim.embed(q)
  sql = "SELECT ... WHERE"
  sql += " user_id = :uid"
  res = await db.fetch(sql,
                       uid=user.id)
  # no leakage ✓
AI / RAG·Jul 2026

Eliminating Cross-User Data Leakage in Multi-Tenant RAG Pipelines

Why most multi-tenant RAG implementations leak data, and how enforcing per-user isolation at the SQL query layer — before vector similarity searches — closes the gap completely. Deep dive into pgvector + PostgreSQL RLS with code samples from a production FastAPI backend.

12 min readRead

05 — Social Proof

Voices that shape the work.

“Ahmad built our salon platform end to end — booking, stylist portfolios, the whole thing. It loads fast, looks premium, and we've never had a double-booking since launch.”

Khatera·Owner · Beauty Lounge Khatera

05 — The Execution Loop

How I actually operate.

High-ticket clients care about transparency. Here's the exact delivery mechanism — no black boxes, no vague timelines.

01

Core Telemetry Audit

I clone your stack, map database boundaries, and hunt for immediate low-hanging infrastructure leaks before any contract is signed.

  • Stack + database boundary map
  • Infrastructure leak report
  • Quick-win cost cut list
02

Bi-Weekly Sprints

Direct Slack channel, PR updates every 48 hours, sandbox deployments. You see code moving twice a week — no black-box engagment.

  • Dedicated Slack channel
  • PRs every 48 hours
  • Friday sandbox demos
03

Clean Handover

Documented Terraform state, automated CI pipelines, and an onboarding session for your engineering team. You own everything I touch.

  • Terraform state files documented
  • CI pipelines automated
  • Team onboarding session

06 — Engagement Models

Three ways to work together.

Transparent pricing, senior-only execution. No retainers, no middlemen.

Technical Advisory

$300/hour

Senior second opinion on AI/RAG architecture, cloud economics, and scalability. Or a flat-rate $1,500 Strategic Architecture Audit.

  • AI/RAG Architecture Review
  • Cloud Cost (FinOps) Audit
  • Scalability Roadmapping
Book Consultation
Most Popular

Fractional Engineering

$4,500+/sprint

A dedicated senior engineer embedded in your team, shipping in two-week sprints. ~$9K/mo.

  • Dedicated Sprint Commitments
  • RAG Pipeline Integration
  • Microservices Refactoring
Discuss Your Project

Platform Scale

$10K+/month

Full ownership of an MVP, platform, or enterprise AI deployment — architecture to handover.

  • Full MVP/Platform Build
  • Enterprise AI Deployments
  • Complex DevOps & Multi-Tenant SaaS
Request Proposal

The future of SaaS is AI-native

Let's build it together.

Whether you need a RAG pipeline that respects tenant boundaries, a cloud bill that doesn't grow with traffic, or a full SaaS shipped on a deadline — I'm taking on one new engagement in Q3 2026.

Schedule a Strategic ConsultationSend a message

07 — Contact

Tell me what you're building.

Whether you need a RAG pipeline that respects tenant boundaries, a cloud bill that doesn't grow with traffic, or a full SaaS shipped on a deadline — let's scope it in a 30-minute call.

contact@ahmadstx.com

Typical reply: under one business day.