Muhammad SharjeelSenior Software Engineer

Islamabad · --:--:--

Portfolio ’26

Shipping at wAI Industries

Muhammad Sharjeel, Senior Software Engineer. Platform engineering for AI products that hold more than one customer.

I am Sharjeel, a Senior Software Engineer in Islamabad. I build the identity, tenancy and Kubernetes layer that a suite of AI products stands on, and I run it in production.

Selected work ↗Hire me on Upwork ↗GitHub ↗LinkedIn ↗

System map

Hover a product to send a request through the stack

Alara Codedelivery packsAlara Spaceteam wikiAlara Planproject trackerODINengagement
PolyX SDKfour npm packages · the browser never holds a token
PolyXidentity, tenancy and access for every productidentitynotificationsapi toolingloggingsandbox
Kubernetesdev and production · pipelines, scan gates, quotas, network policies
01

Selected work

All 6 projects ↗

P. 01

Alara Code

Turns a client brief into a complete, human-approved software delivery pack.

Role
Product owner and engineering lead
When
2026
Stack
TypeScript, Node.js, Prisma, PostgreSQL, Redis, Next.js, Python, Playwright
Fig. 01 · every document waits for a human before the next one starts
  • A gated document pipeline: scope, requirements, architecture, API and test specs, plan, proposal and tickets, with an approval at every step.
  • Runs on hosted agents or a native multi-model engine, chosen per project.
  • A prototype generator that proposes design directions per product, renders every screen at desktop and phone width, measures it and repairs what fails.
  • Cut long document steps roughly threefold (one from 24 minutes to 8) by turning off model thinking where it did not pay for itself.
  • About 6,400 automated backend tests. Live on dev and production Kubernetes.

P. 02

PolyX

Identity, tenancy and access platform shared by every product in the company.

Role
Core platform engineer
When
Since 2023
Stack
TypeScript, Node.js, Express, MongoDB, Redis, Elasticsearch, Kubernetes
Fig. 02 · permissions are granted per module, per tenant
  • Designed and built the unified identity provider: one sign-in, single sign-on and cross-app sessions, with organisations, workspaces and per-tenant module and permission access control.
  • Five Node.js services (identity and access, notifications, API tooling, logging, sandboxed API execution) on one shared trust model.
  • Shadow identities, so platform staff can support a customer tenant without taking a seat or showing up in that customer's directory.
  • Found and closed a cross-tenant privilege escalation and an account-takeover path in password reset, then led the hardening that followed a client penetration test.
  • Traced platform-wide logouts to three causes: a token-expiry default, a race in refresh-token rotation, and Redis evicting session keys under an untrimmed log stream. Shipped all three fixes.
PolyX SDK, Alara Space, Alara Plan and ODINSee all work ↗
02

By the numbers

Counted, not described

51

public releases of the PolyX SDK

4

products taken to production on Kubernetes

6,400

automated backend tests on Alara Code

32

tables migrated to multi-tenancy in one move

03

About

Experience and process ↗

I like the unglamorous end of software. Tenant isolation, session bugs that only appear under load, pipelines that refuse to ship a vulnerable image.

For three and a half years I have built and run the platform a suite of AI products stands on. I wrote the identity provider and its SDK, took four products to production on Kubernetes, and I still ship their releases and answer when something breaks.

Most of the typing is done by agents now. We work as architects: people set the problem, the constraints and the acceptance criteria, agents write the tests and the code, and a person signs off.

More about me
04

Writing

All writing ↗

Freelance

Let’s work together on Upwork. For platform, identity and full-stack work with a clear scope.

Open my Upwork profile

Write to me

sharjeelafzaal123@gmail.com
esc
HomeThe hero, the system map and selected workPageWorkAll 6 projects, each with a glimpse of its interfacePageAboutExperience, how I work and the stack I usePageWriting12 posts on engineering, AI and designPageGet in touchContact me by email or hire me on UpworkSection
Alara CodeTurns a client brief into a complete, human-approved software delivery pack.ProjectPolyXIdentity, tenancy and access platform shared by every product in the company.ProjectPolyX SDKTypeScript auth SDK on npm that puts the platform behind one typed client.ProjectAlara SpaceMulti-tenant team wiki that AI agents can read and write through MCP.ProjectAlara PlanProject tracker with AI meeting minutes, support intake and an MCP server.ProjectODINOmni-channel customer engagement platform on a microservices backend.Project
A portfolio that builds itself while you scrollThis site starts as a blank canvas and a swarm of cursors draws it in front of you. Here is why I wanted that, what it is made of, and everything that went wrong on the way.8 min readUnslopping AI output with nothing but a skillYou do not need a better model to get rid of the purple gradients. You need your taste written down as a skill the agent loads before it touches the screen.2 min readAI Assistant Coding vs Vibe CodingAs AI becomes ubiquitous in software development, a dangerous pattern is emerging: developers blindly accepting AI suggestions without understanding the code. This 'vibe coding' approach undermines the fundamentals of being a developer. Here's why understanding code matters more than shipping it, and how to use AI as a proper assistant.8 min readHosting Multiple Domains on One Server with Docker, NGINX & SSL (DevOps for Developers)As a full-stack developer, I recently had to deploy multiple backend services on one server, each with its own domain and SSL certificate. Here's how I combined Docker, NGINX, and Certbot to build a scalable, production-grade setup — without needing a dedicated DevOps engineer.3 min readTaming CORS in a Microservices Monorepo: From Async Validation to a Unified ConfigCORS errors can be frustrating, especially in a microservices monorepo setup. This blog dives into what CORS really is, why it matters, and how I solved the CORS challenge using a shared JSON config file — establishing a single source of truth for all services.4 min readDebugging Tips for Frontend Developers (React + Next.js)Effective debugging is one of the most valuable skills for frontend developers. Here's a practical guide to debugging with logs, using the debugger keyword, troubleshooting APIs, and improving performance — with a special focus on React and Next.js.3 min readIs the ‘AI Developer’ a Threat to Jobs – or a Marketing Stunt?AI dev tools are booming — but are they replacing developers or just reshaping workflows? Here's the balanced view.3 min readUsing Docker & NGINX to Build a Suite of MicroservicesExplore how to use Docker and NGINX to containerize and orchestrate a scalable microservices suite. Includes setup tips, architecture advice, and real-world tradeoffs.3 min readGetting Started with Next.js: Structure, Tips & DeploymentA developer-friendly introduction to Next.js — learn how to scaffold projects, understand folder structure, configure features, and deploy to Vercel seamlessly.3 min readGrid Systems: The Foundation of Great UI DesignWant cleaner, more balanced layouts? A grid system brings structure, rhythm, and clarity to your UI — and Tailwind makes it easier than ever to implement.2 min readUsing Generative AI to Speed Up Creative and Dev WorkflowsFrom ChatGPT to v0.dev — here's how generative AI helps streamline UI design, prototyping, coding, and problem-solving in modern workflows.3 min readWhat Is Accessible Design and Why It MattersAccessibility isn’t a nice-to-have. It’s a necessity. Here's why accessible design matters — and how to get it right in your UI and frontend code.3 min read
GitHubgithub.com/isharjeelddNew tabLinkedInlinkedin.com/in/muhammad-sharjeel-254a48108New tabUpworkHire me for freelance workNew tab