I design, build and ship web applications end to end — schema, backend, interface, security and deployment.
In 2026 I built five production-grade platforms solo and completed a full-stack internship at XCL Technologies.

_{About  ·  Selected work  ·  Stack  ·  Certifications  ·  Education  ·  Find me online}

Software engineering undergraduate (BSE at HITMS + ADSE at Aptech, both to 2028) and full-stack developer. I care about the parts users never see — row-locked checkouts, verified payment webhooks, tenant isolation, clean schemas — so the parts they do see stay fast and trustworthy.

const ahmer = {
  name: "Syed Ahmer Shah",
  role: "Software Engineer · Full-Stack Developer",
  basedIn: "Hyderabad, Pakistan · UTC+5 · open to remote",
  builds: ["Laravel + React (Inertia)", "Django REST + React", "PHP + MySQL"],
  strongest: { java: "advanced", dsa: "advanced · 676 LeetCode solved", sql: "row locking, views, constraints" },
  shipped2026: ["HolidayOps", "Zovita+", "BookMyMovie", "GleanGrid", "Commerza"],
  learningNext: ["Deeper Laravel", "TypeScript", "System design"],
  motto: "Design, Sync, Energize.",
};

Every working day, in every country. A REST API, iCal feeds, digests and signed webhooks answering one question for payroll, HR and logistics teams: is this date a working day — here and in our other offices?

• 250 countries, 624 regions, each with its own weekend rules (Friday–Saturday, Saturday–Sunday, Friday only)
• Pure-Python domain layer with 100% branch coverage; 481 automated tests across 43 pull requests
• Security by default — tenant isolation tested on every endpoint, hashed API keys, DNS-rebinding-proof SSRF guard, replay-proof TOTP
• English, Urdu and right-to-left Arabic; the public site is server-rendered with no JavaScript

A 1,186-product pharmacy across 8 departments with prescription upload, a 3D body-map symptom finder and an English/Urdu interface.

• Checkout in one transaction — SELECT … FOR UPDATE in id order and a conditional stock decrement: stock can't be oversold, a double-submit returns the original order
• Card payments confirmed only by HMAC-SHA256-verified, replay-protected Stripe webhooks
• Staff admin with per-role permissions and TOTP 2FA, ClamAV upload scanning, 24 drug-interaction rules before payment, 201 automated tests

Browse films, watch trailers and pick seats on a live map — or from inside a 3D model of the hall — then add snacks and book. 56-table schema with 9 reporting views, 49 screens.

• Zero double-sold seats — deterministic row-lock ordering, a database-enforced unique live-ticket key, idempotent checkout
• Offline QR e-tickets with Apple and Google Wallet passes, split bills, loyalty points and gift cards
• Back office for three roles with TOTP 2FA, ticket scanner, refunds and audit log; full Urdu RTL; Lighthouse 100 accessibility & SEO

Farm fresh, just a click away. Customers reserve this week's harvest and collect it at the stall. Three role workspaces, 62 screens, 8 languages including right-to-left Urdu and Arabic.

• A 50-process stress test exposed a REPEATABLE READ stale-snapshot oversell (20 orders into a 3-place window); a locking read fixed it
• Idempotent payments with HMAC-verified gateway callbacks; live market map and QR pickup passes
• 133 PHPUnit tests (779 assertions), Playwright end-to-end and GitHub Actions on PHP 8.2 and 8.3

A framework-free production platform — 339 files, 136 commits: storefront, admin with sub-admin roles, coupons, reviews, order tracking, Google and Facebook sign-in, Stripe and cash on delivery.

• Transactional stock locking and prepared statements on every write path
• CSRF tokens, reCAPTCHA v2/v3, Argon2id, ClamAV scanning, audit logs and SMTP failover
• CI security gate on every push

The same 13 credentials shown on ahmershah.dev — every one links to the issuer's own verification page.

Purpose	Profiles
Hire me
Career
Code & proof
Writing
Reviews & business
Social · @ahmershahdev
Links

"Designing order within the digital wilderness."
_{— Syed Ahmer Shah}

_{© 2026 Syed Ahmer Shah}