I’m Toukir Ahmed Shuva, a senior full-stack engineer based in Dhaka, Bangladesh, with 9+ years of experience building reliable, scalable, and secure web applications end-to-end. I enjoy turning complex product ideas into working systems—designing clean data models, developing REST APIs, and delivering responsive user interfaces with React, Next.js, and TypeScript/JavaScript. My work focuses on performance, correctness, and security: I’ve implemented JWT authentication, role-based access control, input validation/sanitization, rate limiting, and protections against common web vulnerabilities. I’m also experienced with event-driven architectures (including CQRS with event sourcing), background processing with cron/job scheduling, and production-ready deployment workflows using Docker, Kubernetes, CI/CD, and cloud services like AWS, Azure, and Firebase.

Toukir Ahmed Shuva

I’m Toukir Ahmed Shuva, a senior full-stack engineer based in Dhaka, Bangladesh, with 9+ years of experience building reliable, scalable, and secure web applications end-to-end. I enjoy turning complex product ideas into working systems—designing clean data models, developing REST APIs, and delivering responsive user interfaces with React, Next.js, and TypeScript/JavaScript. My work focuses on performance, correctness, and security: I’ve implemented JWT authentication, role-based access control, input validation/sanitization, rate limiting, and protections against common web vulnerabilities. I’m also experienced with event-driven architectures (including CQRS with event sourcing), background processing with cron/job scheduling, and production-ready deployment workflows using Docker, Kubernetes, CI/CD, and cloud services like AWS, Azure, and Firebase.

Available to hire

I’m Toukir Ahmed Shuva, a senior full-stack engineer based in Dhaka, Bangladesh, with 9+ years of experience building reliable, scalable, and secure web applications end-to-end. I enjoy turning complex product ideas into working systems—designing clean data models, developing REST APIs, and delivering responsive user interfaces with React, Next.js, and TypeScript/JavaScript.

My work focuses on performance, correctness, and security: I’ve implemented JWT authentication, role-based access control, input validation/sanitization, rate limiting, and protections against common web vulnerabilities. I’m also experienced with event-driven architectures (including CQRS with event sourcing), background processing with cron/job scheduling, and production-ready deployment workflows using Docker, Kubernetes, CI/CD, and cloud services like AWS, Azure, and Firebase.

See more

Experience Level

Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Expert
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
Intermediate
See more

Language

Work Experience

Full Stack Engineer at X-Team
August 1, 2021 - Present
Worked on systems that manage candidates, partners, job positions, resumes, job applications, and job views. Built REST API endpoints for CRUD operations and complex calculations during application processing. Implemented end-to-end security including JWT authentication, RBAC roles, HTTPS/CORS, rate limiting, and input validation/sanitization to mitigate SQL injection, XSS, clickjacking, and DDoS. Designed relational entity schemas for structured storage and developed automation around HTML email templates and variable payloads to reduce email request sizes significantly. Implemented scheduling and cron jobs for sending emails at each recruitment stage, reminders, and recommendations, and built support for removing low-priority candidates from marketing rotation. Developed reusable React components using Storybook with variable inputs and improved type safety with TypeScript. Added Jest unit tests with high coverage and used feature flags for safe rollouts and migrations across multipl
Full Stack Development Instructor at Amarischool
November 1, 2020 - November 30, 2021
Taught full-stack development through video tutorials and live online sessions, mentoring learners across JavaScript/TypeScript, backend and frontend fundamentals, and practical web development workflows using modern tools and frameworks.
Full Stack Engineer at Digital
November 1, 2020 - July 31, 2021
Built a browser-based game development studio that creates map-base games and generates playable games using a Unity engine workflow. Developed RESTful APIs using Firebase Cloud Functions to serve game assets/resources with low latency. Designed data schemas and models for storing structured and real-time data in Firestore and Firebase Realtime Database. Secured endpoints with Firebase Authentication and authorization, and integrated Firebase Cloud Storage for fast asset fetching. Implemented a web-based map editor/player UI with React and Tailwind, built real-time forum/discussion features, and added in-app notifications driven by realtime database updates for hundreds of active users.
Full Stack Development Instructor at Amar i School
November 1, 2020 - November 1, 2021
Instructed full-stack development through video tutorials and live online sessions, supporting learners in understanding practical engineering concepts and workflows.
Full Stack Engineer at Experience Digital
November 1, 2020 - July 1, 2021
Built and maintained a browser-based game development studio where users configure map-based games and generate playable games using Unity. Developed backend REST APIs via Firebase Cloud Functions to serve gaming assets and resources with low latency for a high volume of Unity clients. Designed Firestore/Realtime Database data models to store structured data. Secured endpoints and the web client using Firebase Authentication and authorization. Developed the studio web app using React, Tailwind CSS, and Mapbox, integrating Firebase Cloud Storage for fast asset fetching and retrieval. Implemented a gaming forum feature using React and Firestore, and added in-app notifications using Firebase Realtime Database to support hundreds of active users with minimal delay.
Twisker - Full Stack Engineer at Twisker
February 1, 2020 - November 30, 2020
Worked on a collaborative knowledge-sharing workspace application. Designed database schemas and GraphQL-ready data models supporting both relational (MySQL) and graph querying use cases, targeting low CRUD latency. Optimized API performance by reducing request/response cycle latency through database migration from MongoDB to MySQL to better support relational joins and eliminate GraphQL resolver query issues (e.g., N+1). Built AWS Lambda functions for user validation and synchronization, including Aurora MySQL (via Aurora), Elasticsearch indexing, and parallel image resizing triggered by EventBridge. Implemented real-time workspace post/comment updates using Apollo GraphQL subscriptions, user presence tracking using Redis, and strong type safety with TypeScript. Used Jest for unit testing (70%+ coverage), and set up Jenkins CI/CD to test, build Docker images, and deploy to Google Kubernetes Engine.
Full Stack Engineer at Twisker
February 1, 2020 - November 1, 2020
Developed a collaborative knowledge-sharing workspace application. Designed schemas for SQL and GraphQL, focusing on scalability and low CRUD latency. Optimized API performance by reducing request-response cycle latency and improved efficiency by migrating core data from MongoDB to MySQL for better relational joins and resolving N+1 query issues in GraphQL resolvers. Built AWS Lambda functions to validate new users and synchronize data to Aurora MySQL and Elasticsearch, including image resizing triggered via EventBridge. Implemented real-time synchronization of workspace posts and comments using Apollo GraphQL subscriptions, and enabled online user status tracking using Redis with GraphQL subscriptions for instant broadcasting of online user lists. Added strong TypeScript typing and Jest testing for reliable deployments. Set up Jenkins CI/CD to test, build Docker images, and deploy to Google Kubernetes Engine.
Full Stack Engineer at Selse Rockin' Software
February 1, 2018 - February 29, 2020
On-site development for an IGB2B integration platform that enables multiple insurance applications and partners to collaborate through shared APIs. Designed database schemas and implemented CRUD operations in Azure Cosmos DB for scalability to 10,000+ users. Built end-to-end security with JWT authentication, RBAC with dynamic distinct roles, and CORS plus validation/sanitization to reduce vulnerabilities. Developed the application using CQRS and event sourcing with domain-driven design and microservices patterns to support high throughput (100,000+ API requests/day). Implemented microservices in C#/.NET for B2B integration gateways to connect 1,000+ APIs across organizations. Added reliable testing using NUnit/xUnit-style unit testing with 80%+ coverage to reduce regressions and improve deployment confidence.
Full Stack Engineer at Selise Rockin' Software
February 1, 2018 - February 1, 2020
Worked on an insurance partner integration platform (IGB2B) enabling multiple insurance applications and partners to collaborate via APIs. Designed database schemas and implemented CRUD operations in microservices interacting with Azure Cosmos DB to support large user volumes. Implemented end-to-end security using JWT-based authentication and RBAC with dynamic roles, plus CORS, validation, and sanitization to reduce security risks. Built the application using CQRS, event sourcing, domain-driven design, and microservices patterns to ensure scalability and availability for high API request volumes. Developed .NET/C# microservices as B2B integration gateways connecting to large sets of organization APIs. Added xUnit unit tests for high coverage to reduce regressions and improve deployment reliability.
Full Stack Engineer at Swiss Life Select Network (Filip)
August 1, 2017 - February 1, 2018
Developed an insurance sales platform for brokers to sell insurance products and services. Implemented MongoDB data models and CRUD operations, adding input validation and sanitization for runtime stability. Built analytics dashboards and visualization components using aggregation queries computed from large datasets. Created workflow forms for business requirements enabling many users to store and resume data safely. Developed reusable private npm packages in a custom Angular framework (ECA P3) to streamline development across multiple projects and reduce feature development time. Managed and deployed multiple production releases on AWS cloud services.
Full Stack Engineer / Software Engineering Intern at Max Group BD
February 1, 2017 - August 1, 2017
Developed a Vehicle Management System for the transportation department at Max Group BD. Designed REST APIs for CRUD operations serving 100+ daily users. Implemented end-to-end security using JWT authentication and role-based authorization, plus CORS and request validation. Built complex MongoDB aggregation queries to calculate expenses and enable efficient data searching, supporting 10,000+ calculation requests daily. Contributed to core features for flexible data management and expense tracking.
Software Engineer / Full Stack Engineer (Web hooks & bots) at Adshacker & Adshacker Bot
February 1, 2017 - August 1, 2017
Built an application to configure bots for Facebook pages and provide visual analysis of page performance. Implemented RESTful API endpoints for storing bot configurations and results. Developed webhooks to receive and respond to 1,000+ Facebook page messages per minute based on bot conversation configurations via Facebook Graph API. Created a visual graph interface for bot conversation flows with 1,000+ replies and stored decision flows in the core database. Added JWT-based authentication/authorization, CORS, validations, and sanitization to mitigate security risks.
Full Stack Engineer (Freelancer) at Maatschapp-SogD
February 1, 2017 - August 1, 2017
Freelanced for a doctor freelancing platform in the Netherlands. Built Node.js/Express RESTful APIs supporting CRUD operations at high request volume (100,000+ requests/day). Secured full-stack flows using JWT authentication and RBAC with 5 distinct roles, plus CORS, validation, and sanitization. Implemented automated cron jobs to synchronize availability status for 1,000+ doctors every hour.
Software Engineering Intern at Max Group BD
February 1, 2017 - June 1, 2017
Internship contributing to the early development work for the vehicle management system.
Software Engineering Intern / Full Stack Engineer (early tenure) at Max Group BD
February 1, 2017 - August 1, 2017
Developed a vehicle management system for the transportation department. Built RESTful CRUD APIs to support a daily user base, implementing end-to-end security with JWT authentication and role-based authorization, CORS, and request validation. Developed complex MongoDB aggregation queries to calculate expenses and enable efficient data searching with high daily computation request volumes. Implemented core features for flexible data management and expense tracking.
Software Engineer at Adshacker & Adshacker Bot
February 1, 2017 - August 1, 2017
Built a system to configure bots for Facebook pages and provide visual analysis of Facebook page content. Implemented REST API endpoints for CRUD operations to store bot configurations and visualization data. Developed webhooks to receive and respond to large volumes of Facebook page messages every minute using Facebook Graph API and implemented a visual interface to configure bot conversations, storing decision flows in the core database. Secured the system with JWT authentication/authorization and applied validation and sanitization to reduce security risks.
Freelance / Software Engineer at Maatschap-SogD
February 1, 2017 - August 1, 2017
Freelanced on a doctor-focused platform in the Netherlands. Built RESTful CRUD APIs using Node.js and Express with capability to handle very high daily request volumes. Secured end-to-end workflows using JWT authentication, RBAC with multiple roles, and CORS along with validation and sanitization to mitigate security risks. Implemented automated cron jobs to synchronize availability status for a large number of doctors on an hourly schedule.

Education

Bachelors of Science in Computer Science and Engineering at North South University, Dhaka, Bangladesh
January 1, 2013 - December 1, 2016
Bachelor of Science in Computer Science and Engineering at North South University
January 1, 2013 - December 31, 2016

Qualifications

Add your qualifications or awards here.

Industry Experience

Software & Internet, Gaming, Education, Financial Services, Professional Services, Media & Entertainment