syed shoaib

I’m a backend-focused Full Stack Engineer with 3.5+ years building secure, scalable production systems across authentication, APIs, infrastructure, and multi-tenant architecture. I take ownership end-to-end—from schema design to deployment—especially in startup environments where reliability and speed matter.

In my recent contract work, I built an OAuth2 + JWT + OTP authentication system handling 800K+ monthly requests, including refresh token rotation and a secure session lifecycle. I designed production-grade session management with HttpOnly cookies, CSRF protection, and JWT dual-secret rotation for zero-downtime secret rotation without forced logouts. I also architected multi-tenant user management with tenant-scoped RBAC and per-tenant email uniqueness constraints to enforce strict data isolation.

I improve performance proactively: I refactored a hotel booking GraphQL API N+1 pattern using DataLoader to reduce latency to 300–500ms (~10x). I diagnosed full-table scan bottlenecks with optimized indexing, introduced Redis TTL caching to cut DB load by 25%, and optimized MongoDB aggregation pipelines for a 17% P95 latency improvement under concurrency.