Available for product engineering & full-stack roles

$ whoami / product engineer bridging software systems and business operations

Yusuf NaeemAbd El-Hakim

Product Engineer · Software Systems & Business Impact

I build production software end to end, unifying system architecture, resilient data flows, security boundaries, and real business operations into dependable products.

Explore Hakim Studio Download resume

Product ArchitectureSystem DesignApplied SecurityBusiness Outcomes

01 systems-minded / people-first

Live System Radar

Core Engineering Pillars & System Matrix

4 Business EntitiesUnified in auditable pipeline

Backend & APIs

Server-side field permission filtering, atomic REQ identifier sequences, and strict REST API contract boundaries.

Core Stack Icons & Tools

Next.jsTypeScriptPostgreSQLPrismaNextAuth

Inspect in NexFlow

01 / selected engineering work

Systems built for real constraints

Selected product-engineering case studies. Each story focuses on the decision that made the system dependable.

Private beta

Learning completion product

commit_

SaaS · education · behavior design

A curriculum tracker that turns study sessions into commits, progress into a contribution graph, and unfinished learning into a visible completion loop.

Next.jsReactTypeScriptPrismaSQLiteResend

Verified signals

Completion looplog → streak → next action → nudge → celebrate

SQLite → Postgressame product model across local and production environments

Private betastatus is intentionally conservative until public access is verified

First engineering decisionCurriculum as a hierarchy

Read case study Visit product

An illustrative roadmap view showing a study session becoming progress, pacing, and the next action.

01
Curriculum as a hierarchy
A flat task list would make ETA and roadmap behavior brittle as curricula change.
02
ETA without shame
The product treats schedule changes as normal state transitions, not user failure.
03
Operational reminders
The product remains useful without making email delivery a hard dependency for local work.

Open-source alpha

Local-first media workflow

Videx

Python · systems · privacy

An open-source local media and course archive workspace with a guided CLI, browser interface, persistent queue, and no hosted processing backend.

PythonFastAPISQLiteyt-dlpFFmpegReact

Verified signals

Local-firstno Videx download backend or user database

80% gateconfigured Python coverage threshold

Evidence-labelledProvider claims are separated from adapter presence and live media proof

First engineering decisionSQLite as a process boundary

Read case study Visit product Source Documentation

A visual map of the CLI, local browser app, queue daemon, and loopback service.

01
SQLite as a process boundary
A durable local queue gives the browser and CLI one source of truth without adding a hosted service.
02
Loopback-only service
The local network boundary is part of the product’s privacy model, not merely a deployment detail.
03
Shared plans and safe recovery
The queue owns recovery so a terminal closing does not make a user restart the whole workflow.

Rebuilding

Relationship intelligence product

Orbit

SaaS · AI · multi-tenant data

A relationship operating system that turns professional contacts into a queryable, visual, and bilingual workspace.

Next.jsTypeScriptSupabaseGemini AIStripeTanStack Query

Verified signals

Database isolationtenant boundaries enforced with PostgreSQL RLS

Bilingual UXEnglish and Arabic interface with RTL support

Rebuildingpublic landing page currently signals an offline product

First engineering decisionRLS-first tenancy

Read case study

A conceptual network view showing people, roles, and relationship strength without exposing real contacts.

01
RLS-first tenancy
Application-only tenant checks create too many places for a future feature to get wrong.
02
Graph plus semantic search
The graph is for orientation; search is for retrieval. They solve different jobs and should not be collapsed.
03
Billing as a system boundary
Payment events are external facts, so the application treats them as idempotent server-side inputs.

Internal production

Internal production platform

NexFlow

B2B operations · security

A lead pipeline platform that replaced conflicting spreadsheets across four business entities with one auditable, role-aware workflow.

Next.jsTypeScriptPostgreSQLPrismaNextAuthWhisper AI

Verified signals

4 entitiesunified in one pipeline

Zero duplicatesreported after REQ-coded intake replaced Excel

Hours → minuteslead entry and routing workflow

First engineering decisionServer-side field permissions

Read case study Source Documentation

Session, role, business-unit, department, and field filtering converge before PostgreSQL.

01
Server-side field permissions
A UI-only permission check would leave sensitive data in network payloads.
02
Atomic REQ identifiers
MAX + 1 was rejected because concurrent writers could observe the same value.
03
Migration with operational continuity
The import flow was designed as a controlled workflow, not a one-off script.

02 / experience

Where the systems met reality

The work spans internal platforms, security assessments, commerce, and API teams. The common thread is ownership from problem definition through production.

Apr 2024 - PresentCairo, Egypt · Hybrid

Egyptian Packaging & Plastic Systems (EPPS)

Software Engineer

Full-time since Jun 2024. Builds and operates internal platforms for lead pipeline, asset management, and logistics tooling, while owning reliability, security, and IT governance across the group.

Built and now operate an internal B2B lead pipeline platform replacing spreadsheet tracking across four business entities, holding roughly 2,000 records for the 8 to 10 staff running marketing capture through to closed sale
Designed a full audit trail and an atomic identifier generator that keeps records conflict-free under concurrent writes
Resolved a Marketing and Sales data-ownership conflict with field-level, server-side access control that strips restricted fields from API payloads before they reach the client
Built SC 3D Optimizer, applying a 3D bin-packing heuristic to container load planning under door-clearance constraints, cutting planning time fourfold and improving space utilisation (React, Three.js)
Modelled the data and lifecycle workflows for the IT asset management platform, tracking roughly 3,000 assets with full check-out and check-in history
Extended the company's public web presence with new pages and features, taking each from business requirement to production deployment
Integrated analytics and tracking tools across the sites, instrumenting performance measurement to guide optimisation
Own reliability and security across 25+ domains and 7 production sites through caching, automated backups, database cleanup, and web server hardening
De-risked capital allocation by delivering cost-benefit and ROI analyses to executive stakeholders, translating business requirements into Power BI dashboards and written executive summaries
Co-architected IT governance, standard operating procedures, and Active Directory infrastructure for 90+ users
Automated repetitive IT and reporting workflows with Python scripts, reducing manual overhead and improving consistency across operations

Node.jsExpress.jsPostgreSQLREST APIsReactThree.jsPythonTypeScriptLLMs / WhisperActive DirectoryPower BIWordPressGit

Sep 2024 - Dec 2024Cairo, Egypt · Hybrid

WE INNOVATE

Offensive Security Engineer (Intern)

Executed white-box and black-box penetration testing across enterprise web, mobile, and infrastructure systems.

Exploited web, mobile, and infrastructure vulnerabilities against the OWASP Top 10, documenting every finding with a reproducible proof-of-concept and a remediation path (Burp Suite, Metasploit, Wireshark)
Ran Active Directory and network penetration tests, mapping privilege-escalation and lateral-movement paths across the target environment
Wrote Python tooling to automate recurring reconnaissance and vulnerability-assessment workflows, beyond the defined scope of the internship

PythonBurp Suite ProMetasploitWiresharkOWASP Top 10Kali LinuxActive Directory

Nov 2023 - Oct 2024Ontario, Canada · Remote

HomeBay Furniture

Software Engineer

Built and optimised the e-commerce platform for a Canadian furniture brand, improving site performance and eliminating manual catalogue overhead.

Automated product catalogue and asset synchronisation through the Google Sheets API, removing a recurring manual cataloguing task from the team's weekly cycle (Python)
Extended WooCommerce product-management and checkout functionality, and applied caching, database indexing, and image optimisation across the storefront
Grew organic search visibility through structured keyword analysis, meta-tag optimisation, and on-page SEO improvements

JavaScriptPythonWordPressWooCommerceREST APIsGoogle Sheets APIHTMLCSS

Aug 2023 - Nov 2023Cairo, Egypt · Hybrid

Kites Software

Software Engineer (Intern)

Built test-driven RESTful APIs for Egypt's first SaaS ERP in an Agile/Scrum engineering team.

Built and shipped RESTful API endpoints test-first for Egypt's first SaaS ERP for import and distribution, writing integration tests in BDD style with Cucumber (Java, Spring Boot, PostgreSQL)
Diagnosed and fixed QA-reported defects inside a full Agile and Scrum cycle
Authored onboarding documentation that the team adopted for subsequent intern cohorts

JavaSpring BootPostgreSQLREST APIsBDDCucumberLiquibaseGitScrumJira

Jun 2023 - Aug 2023Cairo, Egypt · Remote · Part-time

Tact Decoration

Business Analyst

Led the company's first digital transformation, replacing informal, untracked coordination with a centralised system.

Led the company's first digital-transformation initiative, replacing informal, untracked coordination with a centralised system
Built a CRM and operations hub in Notion from scratch, giving site engineers, architects, and supervisors a single platform for task assignment and progress tracking
Redesigned cross-functional workflows between field and office teams, and documented the new process as a standard other staff could follow

NotionSystems ThinkingProcess DesignDigital Transformation

Jan 2022 - Jun 2022Remote

Self-employed

Freelance Full-Stack Developer

Built and shipped websites and online storefronts for small businesses end to end, working directly with each owner without a team or supervision.

Built and shipped websites and online storefronts for small businesses end to end, from static frontend (HTML, CSS, vanilla JavaScript) through backend logic and data (Django, Django REST Framework)
Worked directly with each business owner to scope requirements and turn them into a working site without a team or supervision
Implemented storefront features, including product catalogues and inquiry forms, backed by Django REST Framework APIs

PythonDjangoDjango REST FrameworkJavaScriptHTMLCSSSQLite

03 / capabilities

How I think about engineering

Tools change. These are the problem spaces I can take responsibility for.

APIs and backend systems

REST design, Spring Boot, Node.js, server-side validation, background work, and integration boundaries.

Data and persistence

PostgreSQL, SQLite, Prisma, RLS, transactions, migrations, audit history, and query-aware models.

Security and authorization

OWASP-informed thinking, field-level access control, tenant isolation, secure local services, and least privilege.

Applied AI

Whisper pipelines, semantic search, streaming generation, prompt context, and product boundaries that keep AI useful.

Product delivery

Turning ambiguous workflows into shipped interfaces, usable defaults, documentation, and measurable operational change.

Infrastructure ownership

Vercel, Nginx, Docker, caching, backups, domain hygiene, deployment checks, and cost-aware operations.

05 / writing

Technical notes with a point of view

All articles

Sep 25, 20254 min read

Correlation vs. Causation: Why Our Brains Keep Falling for the Wrong Story

There’s an old story from Russian folklore about a governor who noticed something alarming: in the areas where more people were sick, the number of doctors was also higher.

Read on Medium

Sep 16, 20253 min read

Logical Thinking in Analytics: The Skill Nobody Talks About (But Everyone Needs)

Whenever people talk about data analytics, the conversation usually turns to tools. Which dashboard should we use? Which programming language is better? How do we visualize the data?

Read on Medium

Sep 15, 20253 min read

The Hidden Power of Questions in Data Analytics

In today’s world, data feels infinite. Organizations invest heavily in dashboards, KPIs, and analytics platforms, believing that more data equals better decisions. Yet, despite these investments, many leaders remain frus

Read on Medium

06 / background

The context behind the work

A compact record of the foundations that inform how I build, communicate, and keep learning.

Education & Foundation

B.Sc. Computer Science & IT

Software Engineering Major · Ahram Canadian University (ACU)

Sep 2019 - Jul 2023 · Cairo, Egypt

Overall GPA3.36 / 4.00

Final Term4.00 / 4.00

Grad ProjectGrade A+

Communities & Peer Tutoring

ACU Competitive Programming CommunityCyberTalents

Peer tutoring for classmates in Algorithms, Software Engineering, Design Patterns, and Information Security.

Verified Certifications & Training

CS50: Introduction to Computer ScienceFoundations

HarvardX

Offensive Security EngineeringApplied Security

WE INNOVATE2024

Web & .NET Development Summer TrainingWeb Systems

Information Technology Institute (ITI)2022

Forward ProgramLeadership & Strategy

McKinsey.org

Signals & Spoken Languages

🏆

Honourable MentionEgyptian Collegiate Programming Contest (ECPC) (2021)

Languages & Mobility

ARArabic

Native / Bilingual

ENEnglish

Professional C1

DEGerman

Limited Working

07 / contact

Let’s build something dependable.

I’m open to product engineering and full-stack roles, system architecture work, and high-impact software initiatives connecting technology with real business outcomes.

Email me LinkedIn GitHub

Cairo, Egypt · open to remote collaboration