Projects in production.

Project highlights

• Engineered a JWT-based RBAC system across 6 user roles (Student, Teacher, School, Supervisor, Admin, Super Admin) with role-assignment, fine-grained permission management, and parental consent workflow for minor students.
• Designed a public-cache + post-cache user hydration strategy for marketplace browse APIs — cached shared catalog payloads (filter hash–keyed, versioned) in Redis and injected per-user state (isWishlisted, isPurchased, isOwner, live enrollment counts) in-memory per request, eliminating cross-user data leakage with zero per-user cache-key bloat.
• Built a non-blocking Redis cache invalidation utility using SCAN + UNLINK (wildcard pattern matching) triggered on every Prisma mutation — ensuring cache consistency across dynamic tax rates, pricing updates, and class status changes without blocking Redis like KEYS would.
• Integrated BullMQ + Redis with a separate worker process (start:worker) for email delivery and newsletter campaigns — implemented checkpoint-based resumable batching (persisting progress in Redis on each batch), exponential backoff retries, and SHA-256 deduplication job IDs to prevent duplicate sends.
• Implemented full payment lifecycle (CMI gateway, PreAuth capture, callback handling) with $transaction-wrapped order fulfillment — atomic seat-decrement, enrollment creation, private slot confirmation, and order status update in a single ACID transaction to prevent race conditions and double enrollments.
• Designed a recurring weekly class scheduling engine using Luxon — normalized teacher-defined weekly time blocks (day + minutes-from-midnight + timezone) to viewer-local time on the fly, with clash detection against booked private sessions across international timezones.
• Architected a NestJS monolith with 80+ domain modules (tuition classes, courses, marketplace, hire-teacher, assignments, attendance, quizzes, notifications, invoices, payouts, SEO, i18n) — clean separation of controller/service/DTO layers with Swagger auto-documentation and class-validator DTOs.
• Integrated Socket.io (WebSockets) for real-time notifications and connected to both LessonSpace and PencilSpace meeting providers for live 1:1 private sessions and 1:N Group sessions, with provider selection baked into order metadata at checkout.

Tech stack

Project highlights

• JWT-based auth using @nestjs/passport + passport-jwt. Access tokens (1-day expiry) embed user ID, roles, permissions array, and a tokenVersion for instant session invalidation. Granular RBAC + ABAC: roles hold sets of permissions; users can also hold direct permissions. The PermissionsGuard evaluates both and enforces on every route via the @Permissions('resource:action') decorator — e.g. @Permissions('uploads:create').
• Built a complete headless CMS backend covering 15+ content domains — blogs, news, events, services, case studies, team members, testimonials, career pages, partners, and static pages — each with full CRUD, pagination, slug routing, and SEO metadata support
• Implemented a daily scheduled cron job that detects orphan uploaded files (status: PENDING, older than 24 hours), deletes them from disk, and removes records from the database — preventing unbounded storage growth from abandoned uploads
• Built a generic drag-and-drop reorder API shared across all master entities (services, partners, team members, timeline, etc.) — accepts an ordered [{ id, order }] array and performs a bulk update, reusable across any module without duplication

Tech stack

Project highlights

• Built a slot-based listing monetisation engine integrated with Waafi mobile wallet (Somalia's primary mobile money platform) — the entire purchase, slot crediting, and listing activation flow runs inside a single atomic Prisma transaction, preventing any inconsistent state on payment failure or network drop.
• Designed a dual notification delivery system where in-app alerts are pushed instantly via a Socket.IO WebSocket gateway (users join personal rooms by user ID), and push notifications are dispatched asynchronously via a BullMQ / Redis job queue with a Firebase FCM worker — decoupling notification dispatch from the request lifecycle entirely, with idempotency checks preventing duplicate deliveries on retries.
• Built a searchable SearchLog system that silently records every listing browse request (filters applied, result count, city, category, user context) — creating a queryable dataset of real user intent that informs listing prioritisation and feature decisions.
• Integrated the Google Analytics Data API to power an admin analytics dashboard — surfacing active user rates, top pages, and funnel drop-off (home → listings → detail page) across selectable date ranges, giving the product team actionable visibility into user behaviour directly inside the platform.

Tech stack

Project highlights

• Independently designed and developed the complete StudyNest platform, covering frontend architecture, REST APIs, database modeling, authentication, and deployment configuration. Delivered 3 specialized role-based experiences with secure JWT authentication, refresh-token sessions, authorization guards, responsive dashboards, and modular NestJS services.
• Developed a fault-tolerant payment and enrollment pipeline using Razorpay, HMAC signature validation, idempotent webhook handling, and Prisma transactions. Automated seat confirmation, coupon redemption, student enrollment, tax and platform commission calculations, tutor ledger updates, wallet management, and background PDF invoice generation.
• Implemented an event-driven communication architecture using authenticated Socket.IO connections for direct messaging, group conversations, notifications, and unread counters. Integrated Redis and BullMQ workers with job deduplication, configurable priority, 3 retry attempts, concurrency control, and exponential backoff to process emails and invoices reliably outside the request lifecycle.
• Developed a fault-tolerant payment and enrollment pipeline using Razorpay, HMAC signature validation, idempotent webhook handling, and Prisma transactions. Automated seat confirmation, coupon redemption, student enrollment, tax and platform commission calculations, tutor ledger updates, wallet management, and asynchronous PDF invoice generation.
• Engineered an optimized tutor scheduling engine that calculates real-time free slots by converting availability, booked sessions, time-off periods, and leave ranges into sortable time intervals. Applied interval-overlap detection, cursor-based interval subtraction, date-scoped queries, selective projections, and MongoDB indexes to prevent scheduling conflicts and return valid booking windows efficiently.
• Designed a security-first tutor onboarding workflow that separates signup intent from account authorization, ensuring applicants cannot access tutor capabilities before admin approval. Built transactional application handling, profile validation, unique tutor slugs, subject and academic-level mapping, rejection and reapplication states, and atomic role promotion after verification.
• Modeled group and private tuition classes with distinct domain rules and a controlled lifecycle from draft and publication through activation, completion, or archival. Automated recurring group sessions within a rolling 7-day window while supporting one-to-one private bookings with tutor approval, availability validation, double-booking prevention, Jitsi meeting creation, and rescheduling policies.

Tech stack

Project highlights

• Implemented a hybrid Role-Based and Permission-Based Access Control (RBAC/PBAC) system, allowing granular overrides at both user and role levels for Super Admin, Editors, and Authors.
• Built a state-machine driven publishing workflow supporting DRAFT, PUBLISHED, REJECTED, and ARCHIVED article lifecycles with rejection audit logs, editor review notes, and atomic single-item breaking news toggling via Prisma transactions.
• Developed an automated dynamic SEO metadata generator and atomic sitemap pipeline that deduplicates routing, assigns dynamic priorities, and builds search-engine-ready XML feeds for up to 5,000 entries.
• Constructed a multi-format digital advertising engine (IMAGE, VIDEO, GIF) supporting schedule-based display windows (startDate/endDate), URL redirection, and slot placements across multiple site sections.
• Developed a centralized Media Management Library supporting batch image uploads (up to 10 concurrent files) and video uploads using NestJS FileInterceptors and custom Multer storage engines with strict MIME-type and size validations.

Tech stack

Project highlights

• Implemented Razorpay subscription-based payments with webhook handling to process recurring payments, subscription events, and payment status updates.
• Designed and implemented a role-based task management system with structured workflows for task creation, assignment, development, submission, review, and final approval.

Tech stack