I build AI assistants, automation workflows and full-stack applications, and help troubleshoot the systems behind them. My work covers business integrations, WordPress and Shopify development, cloud infrastructure, monitoring and security. Based in Dhaka, Bangladesh, I am available for remote projects and contract work. WHAT I CAN HELP WITH • AI and automation: RAG knowledge assistants, structured AI responses, n8n workflows, lead follow-up, content approval systems and API integrations. • Full-stack development: Client portals, dashboards, backend services and integrations that connect your website, business data and external tools. • WordPress and Shopify: Custom WordPress functionality, WooCommerce integrations, Shopify Liquid themes and improvements to content, customer and cart workflows. • Cloud, monitoring and security: Container and deployment configuration, CI/CD, logs and monitoring, access controls, WordPress incident investigation and backup-first containment. EXAMPLES OF MY WORK I built an agency content workflow that takes approved media through AI copy generation, client feedback, internal approval and packaging for manual publishing. A separate lead follow-up system connects JotForm, n8n, Google Sheets and Twilio, with routing and messaging behavior configured for each client site. My RAG work includes retrieval, reranking, source grounding and conversation-memory controls that separate user-provided facts from generated responses. My commerce projects include a connected WordPress/WooCommerce demonstration with test checkout and a custom Shopify development theme with merchant-editable content and cart interactions. I have also investigated and contained a recurring WordPress compromise, preserving recovery copies and checking for recurrence after real page requests. My earlier physiotherapy background provides additional context for healthcare and wellness projects. TOOLS AND TECHNOLOGIES AI and automation: n8n, OpenAI/Claude APIs, Pinecone, LightRAG, webhooks and structured JSON. Agentic coding tools: Claude Code, Codex and MCP. Applications and commerce: Python, PHP, JavaScript, TypeScript, React, Node.js, WordPress, WooCommerce, Shopify and Liquid. Cloud and operations: AWS, Google Cloud, Azure, Docker, Kubernetes, Terraform, GitHub Actions, Linux, Nginx, Prometheus and Grafana. WORKING TOGETHER I start by clarifying the problem, existing system and acceptance criteria. We agree on scope and milestones; I handle implementation, relevant testing and documented handover. I explain what has been verified and flag remaining limitations so you can make informed decisions. Message me with what you need built or fixed, the tools involved and the result you want. Portfolio: _Website not available. Sign in: https://www.twine.net/signup_ GitHub: _Website not available. Sign in: https://www.twine.net/signup_ I do not accept work involving interest-based finance (Riba), conventional insurance, gambling, adult content or any Haram activity.…

Zahidul Islam

I build AI assistants, automation workflows and full-stack applications, and help troubleshoot the systems behind them. My work covers business integrations, WordPress and Shopify development, cloud infrastructure, monitoring and security. Based in Dhaka, Bangladesh, I am available for remote projects and contract work. WHAT I CAN HELP WITH • AI and automation: RAG knowledge assistants, structured AI responses, n8n workflows, lead follow-up, content approval systems and API integrations. • Full-stack development: Client portals, dashboards, backend services and integrations that connect your website, business data and external tools. • WordPress and Shopify: Custom WordPress functionality, WooCommerce integrations, Shopify Liquid themes and improvements to content, customer and cart workflows. • Cloud, monitoring and security: Container and deployment configuration, CI/CD, logs and monitoring, access controls, WordPress incident investigation and backup-first containment. EXAMPLES OF MY WORK I built an agency content workflow that takes approved media through AI copy generation, client feedback, internal approval and packaging for manual publishing. A separate lead follow-up system connects JotForm, n8n, Google Sheets and Twilio, with routing and messaging behavior configured for each client site. My RAG work includes retrieval, reranking, source grounding and conversation-memory controls that separate user-provided facts from generated responses. My commerce projects include a connected WordPress/WooCommerce demonstration with test checkout and a custom Shopify development theme with merchant-editable content and cart interactions. I have also investigated and contained a recurring WordPress compromise, preserving recovery copies and checking for recurrence after real page requests. My earlier physiotherapy background provides additional context for healthcare and wellness projects. TOOLS AND TECHNOLOGIES AI and automation: n8n, OpenAI/Claude APIs, Pinecone, LightRAG, webhooks and structured JSON. Agentic coding tools: Claude Code, Codex and MCP. Applications and commerce: Python, PHP, JavaScript, TypeScript, React, Node.js, WordPress, WooCommerce, Shopify and Liquid. Cloud and operations: AWS, Google Cloud, Azure, Docker, Kubernetes, Terraform, GitHub Actions, Linux, Nginx, Prometheus and Grafana. WORKING TOGETHER I start by clarifying the problem, existing system and acceptance criteria. We agree on scope and milestones; I handle implementation, relevant testing and documented handover. I explain what has been verified and flag remaining limitations so you can make informed decisions. Message me with what you need built or fixed, the tools involved and the result you want. Portfolio: _Website not available. Sign in: https://www.twine.net/signup_ GitHub: _Website not available. Sign in: https://www.twine.net/signup_ I do not accept work involving interest-based finance (Riba), conventional insurance, gambling, adult content or any Haram activity.…

Available to hire

I build AI assistants, automation workflows and full-stack applications, and help troubleshoot the systems behind them. My work covers business integrations, WordPress and Shopify development, cloud infrastructure, monitoring and security. Based in Dhaka, Bangladesh, I am available for remote projects and contract work.

WHAT I CAN HELP WITH

• AI and automation: RAG knowledge assistants, structured AI responses, n8n workflows, lead follow-up, content approval systems and API integrations.
• Full-stack development: Client portals, dashboards, backend services and integrations that connect your website, business data and external tools.
• WordPress and Shopify: Custom WordPress functionality, WooCommerce integrations, Shopify Liquid themes and improvements to content, customer and cart workflows.
• Cloud, monitoring and security: Container and deployment configuration, CI/CD, logs and monitoring, access controls, WordPress incident investigation and backup-first containment.

EXAMPLES OF MY WORK

I built an agency content workflow that takes approved media through AI copy generation, client feedback, internal approval and packaging for manual publishing. A separate lead follow-up system connects JotForm, n8n, Google Sheets and Twilio, with routing and messaging behavior configured for each client site.

My RAG work includes retrieval, reranking, source grounding and conversation-memory controls that separate user-provided facts from generated responses. My commerce projects include a connected WordPress/WooCommerce demonstration with test checkout and a custom Shopify development theme with merchant-editable content and cart interactions.

I have also investigated and contained a recurring WordPress compromise, preserving recovery copies and checking for recurrence after real page requests. My earlier physiotherapy background provides additional context for healthcare and wellness projects.

TOOLS AND TECHNOLOGIES

AI and automation: n8n, OpenAI/Claude APIs, Pinecone, LightRAG, webhooks and structured JSON.
Agentic coding tools: Claude Code, Codex and MCP.
Applications and commerce: Python, PHP, JavaScript, TypeScript, React, Node.js, WordPress, WooCommerce, Shopify and Liquid.
Cloud and operations: AWS, Google Cloud, Azure, Docker, Kubernetes, Terraform, GitHub Actions, Linux, Nginx, Prometheus and Grafana.

WORKING TOGETHER

I start by clarifying the problem, existing system and acceptance criteria. We agree on scope and milestones; I handle implementation, relevant testing and documented handover. I explain what has been verified and flag remaining limitations so you can make informed decisions.

Message me with what you need built or fixed, the tools involved and the result you want.

Portfolio: Website not available. Sign in: https://www.twine.net/signup
GitHub: Website not available. Sign in: https://www.twine.net/signup

I do not accept work involving interest-based finance (Riba), conventional insurance, gambling, adult content or any Haram activity.

See more

Experience Level

Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
See more

Language

Bengali
Fluent
English
Advanced

Work Experience

Security / WordPress Engineer (Incident Response) at Confidential hosting client
August 1, 2026 - August 31, 2026
Confidential client engagement. Investigated a recurring, multi-layer compromise across a WordPress hosting estate using process inspection, request-triggered reproduction and persistence tracing. Contained confirmed artifacts with recoverable quarantine copies, repaired affected content and checked recurrence after real page requests and delayed rescans. A second structural sweep removed 310 implant artifacts across 63 of 78 hosting accounts and 21 attacker administrator accounts. An alert-only monitor preserves visibility into recurrence.
AI / Backend Engineer at JWALKER Marketing
July 1, 2026 - July 31, 2026
Client engagement: WordPress membership knowledge assistant. Built a FastAPI and SQLite knowledge assistant combining vector similarity with FTS5 search and Reciprocal Rank Fusion. A relevance gate refuses unsupported answers before generation. Implemented signed member tokens, source citations and atomic content synchronization. The local package is verified; the final live WordPress integration remains dependent on client access.
Backend / AI Engineer at Yuktha Wellness
June 1, 2026 - Present
Client engagement: multilingual RAG assistant. Developed multilingual retrieval across six health-education domains using Pinecone, BGE-M3 embeddings, BM25 and cross-encoder reranking, with Node.js, Express and Redis. Separated query rewriting from answer generation; added structured responses, source-grounding checks, emergency routing and controlled fallbacks. Prevented generated answers from becoming personal-memory facts by restricting memory evidence to user-authored content. The assistant supports education and navigation, not clinical diagnosis.
Automation Engineer at Fine Touch Marketing
May 1, 2026 - Present
Client engagement covering three systems. Content and approval platform: an n8n, Python and PHP workflow that moves approved client media through AI copy generation, client feedback, internal approval and packaging for manual publishing, with an account-scoped campaign dashboard, protected media previews, background copy jobs and calendar review. Multi-site lead follow-up: connected JotForm, n8n, Google Sheets and Twilio to capture leads, route each submission to the correct client site and coordinate welcome messages and scheduled follow-ups, with sent-state tracking and per-site failure handling. WordPress SEO automation: a protected PHP interface and Python Flask job service for authorized metadata updates through REST and AIOSEO, with exact page/post matching, structured AI generation, deterministic output repair and per-item reporting.
WordPress / Accessibility Engineer at Groza Learning Center
April 1, 2026 - April 30, 2026
Client engagement. Remediated WordPress/Elementor accessibility issues in alternative text, form labels, navigation, ARIA relationships and contrast using reversible PHP snippets. Implemented consent-controlled tracking and privacy-enhanced video embeds; checked that advertising requests stayed blocked before consent. Delivered scoped remediation, not a blanket legal certification.
WordPress Developer at Abcker Technologies
April 1, 2026 - April 30, 2026
Client engagement. Replaced template content with healthcare-IT service copy, repaired navigation and page metadata, and reduced installed plugins from 24 to 11. Configured SMTP and verified delivery tests. Removed irrelevant template pages and corrected contact information and broken calls-to-action.
Physiotherapy Technologist at SPKS Medical Institute, Dhaka
January 1, 2017 - December 31, 2021
Clinical role before software. Patient assessment, treatment planning and musculoskeletal rehabilitation. This background informs my healthcare and wellness software work.

Education

Diploma in Physiotherapy Technology at SPKS Medical Institute
January 1, 2017 - January 1, 2017

Qualifications

Add your qualifications or awards here.

Industry Experience

Healthcare, Software & Internet, Professional Services, Education
    Chronos — Headless WordPress & WooCommerce Storefront

    Type: Connected commerce demonstration · Role: Full-Stack Commerce Developer: React, WordPress and PHP

    Connected a cinematic React/TypeScript luxury-watch storefront to WordPress and WooCommerce.

    • WordPress owns editorial content and WooCommerce owns catalog, price and order authority, through GraphQL/REST adapters and custom PHP extensions
    • Customer login, order history and persistent contact intake
    • Checkout in Stripe test mode: the server calculates the order from product IDs and quantities and creates a hosted test session; a hosted test payment was completed and WooCommerce recorded the paid order
    • Verified CMS editing without a frontend rebuild; fixed cart restoration and false contact-success behavior

    This demonstration accepts no live payments. Real commerce or larger audiences need additional work, documented in the technical overview.

    Live demo: https://www.twine.net/signin
    Source code: https://www.twine.net/signin

    More case studies: https://www.twine.net/signin · https://www.twine.net/signin

    AI Developer Workflow — Claude Code, Codex & Custom MCP
    Type: Personal engineering project · Role: AI Workflow Engineer: Python, MCP and developer tooling Built a personal AI development workflow so coding can continue when subscription limits interrupt work. Integrated Claude Code and Codex with an explicit OpenRouter switcher, project-local checkpoints and automatic handoff prompts A custom Python MCP server indexes Google Drive knowledge with SQLite FTS5; service-account access supports shared Docs workflows Reusable skills, credential isolation and checkpoint secret checks Verified 37 switcher tests, 8 knowledge tests and real two-stage file tasks across provider switches. The scope is deliberate provider selection and recovery from a saved checkpoint, not automatic failover or full conversation replay. Claude Code, Codex and OpenRouter are existing products; the custom work is the integration, routing, knowledge service and workflow. More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    VitalProbe — Healthcare AI Safety Testing with Synthetic Patients
    Type: Own product (local release) · Role: Creator / Python Engineer: healthcare AI safety testing Built a local-first safety and evidence-testing tool for healthcare AI assistants. Runs chatbots, RAG applications and agents through fictional patient scenarios using deterministic checks and optional semantic judges REST and MCP target adapters, baseline regression comparison, local history and multi-turn simulation Produces JSON and self-contained HTML evidence for human review, with a FastAPI dashboard and Docker operation No-PHI architecture: fictional patients only The documented local release passed 149 tests with Ruff and strict mypy clean. Reports support human review; VitalProbe does not certify systems or replace clinical or legal review. Source code: https://www.twine.net/signin More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    Fine Touch Marketing — Multi-Site SMS Lead Follow-Up Automation
    Client: Fine Touch Marketing · Role: Automation Engineer: n8n, Twilio and multi-site workflows Built an operational multi-site SMS platform connecting JotForm, a validated webhook boundary, n8n, Google Sheets and Twilio. Separate lanes handle immediate welcome messages, scheduled follow-ups, broadcasts and inbound reply guidance Registered routes stop hidden form fields from redirecting leads to the wrong client One broken site cannot stop the others; sent state is written only after the provider accepts the message Configurable templates, sent-state tracking and per-site failure handling Evidence includes a 29-case end-to-end suite, incident reproductions, repair tests and a live missing-site fault-injection check. Status is provider-aware; final handset delivery is not guaranteed. Stack: n8n, JotForm, webhooks, Google Sheets, Twilio, scheduled workflows More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    Fine Touch Marketing — AI WordPress SEO Automation
    Client: Fine Touch Marketing (agency running many WordPress client sites) · Role: AI Automation Engineer: WordPress, Python and SEO workflows Built a live WordPress SEO automation tool with a protected PHP interface, a supervised Python/Flask job API, Claude and AIOSEO. Operators select pages or posts; the system matches titles exactly and generates industry-locked, location-aware metadata Deterministic length and format repairs fix what the model gets wrong instead of trusting raw output Writes AIOSEO fields and optional tags, returning per-item results through background jobs and status polling, without holding one browser request open Metadata success is reported separately from optional tag failures; health, source-parity and deployment checks added Valid metadata is not presented as a ranking guarantee. Stack: PHP, Python, Flask, WordPress REST API, AIOSEO, Claude, async jobs, CSV reporting More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    Fine Touch Marketing — AI Social Campaign & Client Approval Platform
    Client: Fine Touch Marketing (marketing agency) · Role: AI Automation Engineer: n8n, media workflows and client portals Built a live AI-assisted social campaign platform for a marketing agency using n8n, protected web interfaces, Python/PHP services, Google Sheets and Drive. Staff ingest private client media and create dated campaigns Clients select assets and dates, generate media-aware captions and hashtags, review watermarked previews, request changes and approve posts Internal approval unlocks clean downloads; publishing stays a manual final step Account-scoped campaign dashboard, protected media previews, background copy jobs and calendar review Verification included two fresh 50-post paid HTTPS runs with all 100 caption sets read back, protected-thumbnail checks and revoked proof links. Stack: n8n, Python, PHP, HTML/CSS/JavaScript, Google Sheets API, Google Drive, AI copy generation, Twilio notifications More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    EquipCert AI — Mobile Equipment Inspection App
    Type: Portfolio project · Role: Full-Stack AI & Mobile Web Developer Built a Next.js and TypeScript inspection application for equipment safety checks in the field. Configurable Gemini, OpenAI or Claude assistance; AI stays optional and technician-confirmed Dynamic Contentful checklists, GPS and photo evidence, digital signatures and PDF reports Supabase authentication with tenant-aware data controls, organization and role workflows IndexedDB offline queue with digest checks, and Capacitor packaging for Android Authorization, storage, offline replay, billing, migration and physical-device boundaries are documented explicitly. Inspection evidence is not regulatory certification. Live app: https://www.twine.net/signin Source code: https://www.twine.net/signin More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    MediConnect — Multi-Cloud Telehealth Platform with FHIR
    Type: Portfolio project · Role: Full-Stack HealthTech & Cloud Engineer Engineered a healthcare platform connecting patients, practitioners, staff and administrators across a React client and seven backend services. Node.js/TypeScript and Python/FastAPI services for patient, practitioner, appointment, communication and clinical-data workflows FHIR R4 interoperability, role-based access, US/EU regional data handling, consent, encryption, audit and privacy controls Real-time communication and AI-provider failover Infrastructure and delivery configuration across AWS, Google Cloud and Azure with Terraform and Kubernetes The connected-care presentation is deployed; development is paused, with clinical acceptance and complete service readiness still outstanding. Controls demonstrate engineering readiness, not legal certification. Source code: Frontend: https://github.com/Zahidulislam2222/mediconnect-hub Infrastructure: https://github.com/Zahidulislam2222/mediconnect-infrastructure-production RAG and monitoring: https://github.com/Zahidulislam2222/mediconnect-rag Video series: https://www.youtube.com/playlist?list=PLMcNHEox3lJWlpHKrZwpWaA3ZMHrB2al1 More case studies: https://zahidul-islam.com/ · https://github.com/Zahidulislam2222…
    WordPress Incident Response — Malware Containment & Recovery
    Client: Confidential hosting client · Role: Incident Response Engineer: WordPress, Linux and malware recovery Led a backup-first response to a self-healing WordPress compromise across a shared hosting estate. Traced memory-resident PHP runners, hidden loaders, auto-prepend chains, database persistence and request-triggered regeneration Quarantined confirmed artifacts with hashes and before/after HTTP checks, keeping recoverable copies A second structural sweep exposed 310 implant artifacts across 63 of 78 hosting accounts and 21 attacker administrator accounts that signature scans had missed; all were removed Repaired affected content from clean revisions after validated backups, and deployed an alert-only recurrence monitor The remaining need for clean rebuilds and secret rotation was documented for the client. A clean scan alone is not treated as proof of safety. Stack: Linux, WordPress, PHP-FPM, MySQL, shell tooling, backup-first quarantine, HTTP verification, monitoring More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    Enterprise RAG Platform — Zero-Trust Access & Observability
    Type: Open-source infrastructure reference · Role: RAG Infrastructure Engineer: Docker, security and observability Designed a production-oriented RAG platform that moves beyond a demo into controlled infrastructure. Docker Compose architecture defining 23 services (nine core, 14 optional) across frontend, backend and monitoring networks, with LightRAG, RAG-Anything, Nginx and Authelia 2FA-ready access controls, rate limiting, security headers, health checks and bounded resources Prometheus, Grafana, Loki, Jaeger and Alertmanager for metrics, logs, traces and alerts Profile-based security scanners and encrypted Restic backup and restore-verification workflows Source-verified configuration; live deployment is not claimed, and network connectivity, telemetry and provider integration still need runtime validation. Source code: https://www.twine.net/signin More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    JWALKER — Members-Only AI Knowledge Assistant for WordPress
    Client: JWALKER Marketing · Role: AI & Backend Engineer: RAG, WordPress and access control Built a members-only AI knowledge assistant for a WordPress membership site, giving members grounded answers with citations across the creator's content. FastAPI backend combining dense NumPy retrieval with SQLite FTS5 keyword search through Reciprocal Rank Fusion, with no hosted vector database or paid plugin A relevance gate refuses unsupported questions before generation Short-lived signed tokens protect member access YouTube, Google Drive, Patreon and Kajabi connectors with atomic synchronization that keeps the last working index when an update fails Verified corpus: 228 chunks from 10 videos The package is implemented and locally verified; the final live WordPress integration depends on client access. Stack: Python, FastAPI, SQLite + FTS5, NumPy, Reciprocal Rank Fusion, Google Gemini, HMAC-signed WordPress tokens, nginx, systemd More case studies: https://www.twine.net/signin · https://www.twine.net/signin…
    Yuktha Wellness — Multilingual Healthcare RAG Assistant
    Client: Yuktha Wellness (verified Upwork client) · Role: RAG Engineer: retrieval, reranking, safety and performance Rebuilt and optimized a multilingual healthcare RAG assistant, improving accuracy, performance and overall functionality. BGE-M3 embeddings over six Pinecone namespaces, hybrid dense + BM25 retrieval and self-hosted cross-encoder reranking Query rewriting, relevance and grounding gates, Redis caching and emergency/safety routing Fixed a silent reranker failure, an embedding-dimension fallback risk, citation rejection, and crisis routing across web and WhatsApp channels Memory handling now separates user-authored facts from generated answers The assistant supports health education and navigation, not clinical diagnosis. Stack: Node.js, Express, Pinecone, BGE-M3, BM25, cross-encoder reranking, Redis, MongoDB, structured LLM output More case studies: https://www.twine.net/signin · https://www.twine.net/signin…