Hi, I’m Karim ShaabanFull-Stack Software Engineer

Building full-stack web applications with Next.js, React, Node.js and TypeScript, from first idea to production.|

View Projects

Download Resume

Skills & Education

zsh — ~/karim

karim@portfolio:~$ tree ./skills

- │ ├──Arab Academy for Science, Technology and Maritime Transport (AAST)
- │ ├──BSc in Computer Engineering
- │ ├──2020–2025 (one preparatory year)
- │ └──GPA: 3.7 – Excellent with Grade of Honor
- │ ├──Top 3% of students in the Egyptian General Secondary Certificate (2019).
- │ └──Honorable Mention in the AAST Competitive Programming Contest.
- │ ├──JavaScript, TypeScript, Java, C#, Python, C++ and PHP.
- │ └──Object-oriented programming (OOP), data structures and algorithms, system design and cloud computing.
- │ ├──Solved problems covering arrays, intervals, strings, binary search trees, trees, graphs, hashing and more.
- │ └──Comfortable with common problem-solving patterns: sliding window, two pointers, backtracking, recursion and greedy algorithms.
- │ ├──React.js and Next.js for fast, interactive, server-rendered user interfaces; also Angular and Vue.js.
- │ ├──Tailwind CSS, shadcn/ui and DaisyUI for consistent, maintainable styling.
- │ └──Accessible (WAI-ARIA), responsive, mobile-first design.
- │ ├──Node.js, Express.js and NestJS for REST APIs and back-end services; also Spring Boot, Laravel and ASP.NET.
- │ ├──PostgreSQL, MongoDB, Redis and Elasticsearch, including indexing and caching.
- │ ├──Authentication and authorization with JWT and OAuth, role-based access control, OTP flows and rate limiting.
- │ ├──Real-time IoT communication over MQTT/MQTTS.
- │ ├──Cloud and third-party integrations such as AWS S3 and SNS.
- │ └──Microservices with event-driven messaging (NATS Streaming) and optimistic concurrency control.
- │ ├──Deploying applications on AWS, GCP and Vercel, including serverless back-ends.
- │ ├──CI/CD pipelines with GitHub Actions.
- │ └──Containerization and orchestration with Docker, Kubernetes (K8s), Skaffold and NGINX.
- │ ├──Protecting applications against OWASP Top 10 threats, including XSS, SQL/NoSQL injection and CSRF.
- │ ├──Mitigating DoS/DDoS attacks with rate limiting.
- │ ├──Optimizing application and database performance with indexing, query optimization and Redis caching.
- │ └──Designing applications for scalability, maintainability and high availability.
- │ ├──Improved Core Web Vitals (LCP, INP, CLS) and cut a client homepage from 8 MB to 1 MB.
- │ └──Reached first place on Google search results for a client website.
- │ ├──English: C1 (TOEFL iBT 5/6)
- │ └──Arabic: native
- │ ├──Meta Front-End Developer ↗
- │ ├──Meta Back-End Developer ↗
- │ ├──Algorithmic Toolbox ↗
- │ ├──Data Structures ↗
- │ └──Psychology ↗
- ├──Build Responsive Real-World Websites with HTML and CSS ↗
- ├──Advanced CSS and Sass ↗
- ├──Node.js, Express, MongoDB ↗
- ├──SQL and PostgreSQL ↗
- ├──The Ultimate React Course ↗
- ├──The Complete JavaScript Course ↗
- ├──Microservices with Node.js and React ↗
- ├──TypeScript: The Complete Developer's Guide ↗
- ├──Agile Fundamentals: Scrum, Kanban, Scrumban ↗
- ├──Git and GitHub Bootcamp ↗
- └──The Nuts and Bolts of OAuth 2.0 ↗

12 directories

React.js
Next.js
TypeScript
JavaScript
Tailwind CSS
Node.js
Express.js
REST API
PostgreSQL
Elasticsearch
MongoDB
AWS
GCP
Docker
Kubernetes
Microservices
CI/CD
Security
Version Control (Git)
Linux
Testing (Jest, Postman)
Spring Boot
Angular
Vue.js
NestJS
Laravel
ASP.NET
Java
C#
Python
C++
PHP
Redis
System Design

Tech Stack

// cloud · devops// databases// frontend// backend

React.js

Next.js

Angular

Vue.js

Tailwind CSS

Node.js

Express.js

NestJS

Spring Boot

Laravel

ASP.NET

AWS

Amazon EC2

Amazon S3

Cloudflare R2

GCP

Docker

Kubernetes

Vercel

Git

PostgreSQL

MongoDB

Redis

Elastic Search

How I Work

From discovery to ongoing support

Discover

I learn how your business actually operates before proposing how to change it.

Design

Interfaces and system architecture designed around your real workflows.

Test

Validated against the workflows it needs to survive, not just a demo script.

Support

I stay reachable after go-live to keep things running smoothly.

Plan

A scoped roadmap sequenced around what matters most first.

Develop

Built in phases you can see and test, not delivered as one black box.

Launch

A rollout plan for your team, not just a deployment to a server.

01
Discover
I learn how your business actually operates before proposing how to change it.
02
Plan
A scoped roadmap sequenced around what matters most first.
03
Design
Interfaces and system architecture designed around your real workflows.
04
Develop
Built in phases you can see and test, not delivered as one black box.
05
Test
Validated against the workflows it needs to survive, not just a demo script.
06
Launch
A rollout plan for your team, not just a deployment to a server.
07
Support
I stay reachable after go-live to keep things running smoothly.

Experience

Freelance Software Engineer

Freelance·Remote

FreelanceAug 2025 – Present

AMSY ERP (AMSY Group): Architected and built an ERP for a group of four companies, gathering requirements directly from the client and from employees across different departments. case study →
- Project Management: tender and project management with bills of quantities, milestones, phases, cost and material tracking, and risk management. Project progress is measured with earned value management (EVM).
- AI Imports: the Claude API turns messy legacy PDF and Excel files into structured BOQs, tenders and complete projects and fills in missing required data, with users reviewing everything before it’s imported.
- HR & Approvals: employees, departments, documents, geofenced attendance, and configurable multi-step approval cycles for leave, loans, trips, financial and custom requests.
- Real-Time: one-to-one and group chats with typing indicators, presence awareness (online and last active) and file attachments, plus live notifications, all over WebSockets.
- Object Storage: private Cloudflare R2 bucket with short-lived presigned uploads and downloads, batched so many files need a single request. File types and sizes are enforced in the signed URL and verified after upload, with per-record access checks and scheduled cleanup of abandoned, orphaned and discarded files.
- Security: granular permission-based access control, where roles bundle permissions and administrators assign roles or individual permissions to each user, plus endpoint-specific rate limiting.
- Deployment: Google Compute Engine behind Cloudflare and NGINX, SSH only via IAP tunnels, secrets in Google Secret Manager, and observability with Google Cloud Ops Agent (metrics and logs). Deploys back up the database first and roll back automatically if the health check fails. Nightly public-key-encrypted pg_dump backups go to Cloudflare R2 with a 30-day immutability lock.
Epco Group Company Website: Rebuilt EPCO’s website using a modern tech stack, reducing the homepage size from 8 MB to 1 MB (8x faster on mobile) and improving technical SEO to achieve a first-place Google ranking. Added a full marketplace with individual product pages, automatic bilingual support, and automatic light/dark theme detection based on user preference.

JavaSpring BootSpring SecurityPostgreSQLpg_dumpNext.jsTypeScriptWebSocketsClaude APIGCPGoogle Secret ManagerCloudflare R2NGINXNode.jsMongoDBTailwind CSSVercel

Back-End Engineering Intern (Node.js / NestJS)

IT Land Middle East·Alexandria, Egypt

InternshipJan 2026 – Mar 2026

Developed and maintained backend services for Past Papers Academy, an educational platform serving students with online access to academic past papers and learning resources.
Added database indexes for efficient query execution and improved backend performance.
Implemented rate limiting and secure OTP generation to strengthen API security.

Node.jsNestJS

~/projects/amsy-erp★ featured