حول
مهندس كامل المكدس من بولندا
هندسة API-first
كل نظام مصمم حول حدود REST محددة بوضوح. الواجهة الأمامية تستهلك API — غير مقترنة أبدًا بداخلية الخلفية.
CMS ونواة حجز قابلة لإعادة الاستخدام
Headless CMS + محرك حجز يشغل عقارات متعددة. نفس النواة، مستأجرون مختلفون.
لوحات إدارة آمنة
RBAC، صلاحيات محددة النطاق، جلسات httpOnly، حماية CSRF. أسطح الإدارة معزولة عن ناقل الهجوم العام.
نمذجة بيانات PostgreSQL / Prisma
سلامة العلائقية أولاً. Prisma لاستعلامات آمنة النوع، ترحيلات وتطور المخطط.
نشر Docker / nginx / Linux
أكوام VPS بجودة إنتاجية. Docker Compose، وكيل عكسي nginx، SSL آلي، fail2ban.
سير عمل أتمتة AI / LLM
توليد المستندات، أتمتة النماذج، تحليل المستودعات. خطوط أنابيب مدفوعة بالمطالبات لمخرجات متسقة على نطاق واسع.
المشاريع
أنظمة صممتها وقدمتها
Headless CMS Platform
Headless CMS + booking engine ecosystem. Multi-property scheduling, real-time availability, and content management delivered via REST API.
Booking & Payments Platform
Stripe and BLIK integration with invoice generation, availability calendar, and multi-currency support. End-to-end payment lifecycle.
Admin Panel / RBAC CMS
Role-based access control with granular permissions. Media management, content editing, pricing rules, and real-time analytics dashboard.
AI/LLM Automation Layer
Document generation, form automation, repository analysis, and prompt-driven workflows. Designed for consistent output at scale.
WordPress / Gravity Forms Automation
Custom plugins for event registration, exhibitor management, and conditional form logic with automated PDF delivery.
VPS Production Stack
Docker Compose orchestration with nginx reverse proxy, PostgreSQL persistence, automated SSL via Certbot, and hardening from first principles.
المهارات
التقنيات والأدوات التي أعمل بها
Frontend
- TypeScript
- React
- Next.js
- Tailwind CSS
- Framer Motion
- HTML/CSS
Backend
- PHP
- Node.js
- REST APIs
- Express
- Prisma ORM
Databases
- PostgreSQL
- MySQL
- Prisma
- SQLite
DevOps / Infra
- Docker
- nginx
- Linux/VPS
- SSL/Certbot
- CI/CD
- fail2ban
Security
- RBAC
- Input Validation
- XSS/CSRF Prevention
- API Key Management
- Server Hardening
CMS / Integrations
- WordPress
- Gravity Forms
- Stripe
- BLIK
- PDF Generation
AI / Automation
- OpenAI API
- Prompt Engineering
- LLM Pipelines
- Document Generation
Testing / QA
- Automated Testing
- QA Scripts
- Data Validation
- Integration Testing
الأمان
كيف أفكر في بناء أنظمة آمنة
Admin / Public Separation
Strict boundary between authenticated admin surface and public-facing endpoints. Admin routes isolated behind auth middleware.
RBAC & Permissions
Role-based access control with granular permissions per resource. No god-mode accounts — every action is scoped.
API Key Management
Keys stored as environment secrets, never committed. Rotation strategy in place. Third-party keys isolated per service.
Session & Auth
HttpOnly secure cookies, CSRF tokens, session invalidation on role change. No local storage tokens.
Input Validation
Zod schemas on every API boundary. No raw SQL. Parameterized queries via Prisma. Content Security Policy headers.
Service Isolation
Docker Compose networks isolate services. Admin panel not reachable from public network. Database no external ports.
Firewall & nginx
UFW + fail2ban for brute-force protection. nginx rate limiting, request size caps, and security headers.
Attack Surface Reduction
Minimal exposed ports. Unused services removed from production images. Health-check endpoints behind auth.
Monitoring Readiness
Structured logging, health-check endpoints, and alert-ready architecture. Ready for Prometheus/Grafana or Datadog integration.
الشهادات
التعلم المستمر والتحقق
Exploitation and Penetration Testing with Metasploit
IBM
Vulnerability assessment, exploitation techniques, and post-exploitation strategies using the Metasploit framework.
Network Traffic Analysis with Wireshark
SkillUp Online
Deep packet inspection, traffic filtering, and network protocol analysis using Wireshark for security auditing and incident response.
Transformer Models and BERT Model
Transformer architecture, attention mechanisms, and BERT fine-tuning for NLP tasks and semantic understanding.
Ethical Hacking with Kali Linux
IBM
Offensive security methodology, reconnaissance, enumeration, and privilege escalation with Kali Linux tooling.
Python for Data Science, AI & Development
IBM
Python programming fundamentals applied to data analysis, visualization, and AI/ML development workflows.
Introduction to Ethical Hacking Principles
SkillUp Online
Foundations of ethical hacking, security assessment methodologies, and responsible disclosure practices.
Artificial Intelligence Essentials V2
IBM
Core AI concepts, machine learning workflows, and practical applications across industries.
Generative AI: Prompt Engineering
IBM
LLM orchestration, prompt design patterns, and generative AI integration for production automation pipelines.
Generative AI Essentials
IBM
Fundamentals of generative AI, model capabilities, and ethical considerations for enterprise adoption.
اتصل
دعنا نتحدث عن مشروعك القادم