OWASP Top 10
Hands-on labs for SQLi, XSS, SSRF, IDOR, injection, and privilege escalation.
Senior Full-Stack Product Engineer
Building production AI & SaaS systems from architecture to deployment. AI SaaS, ERP platforms, EdTech APIs, Flutter apps, and secure cloud infrastructure — owned end to end.

Tunis · Available for senior product engineering roles
TypeScript · Next.js · Node · PostgreSQL · Flutter · AI
Selected work
Case studies across ERP, EdTech, AI platforms, founding engineering, and hospitality — each with measurable product outcomes.
About
I'm a Senior Full-Stack Product Engineer with 4+ years building production systems from architecture through deployment. My work spans AI-enabled SaaS, ERP/accounting platforms, school management APIs, mobile apps, fintech backends, and containerized cybersecurity training environments.
I think in product outcomes: who uses it, what must never break, what can be async, and how the system grows without becoming a museum of exceptions. That means backend architecture, database design, REST APIs, dashboards, mobile, AI integrations, Docker infrastructure, and security - owned as one story.
At Campusna I led architecture on scalable SaaS platforms, cut deployment time by 70% with Docker CI/CD, and improved API latency by 40% on a corporate platform. As Co-Founder at DarDev I pair product strategy with technical leadership - shipping systems teams can operate.
Every technical choice maps to a user or business constraint.
Schemas, queues, and boundaries designed before the traffic arrives.
Typed APIs, tests, Compose stacks, and docs that make the next change safe.
Technical lead energy: clarity, ownership, and delivery with distributed teams.
OWASP-aware design, RBAC, secrets hygiene, and auditability.
LLMs as product leverage - integrated, tested, and operationally sound.
Engineering ecosystem
Frontend through infrastructure. Pick a layer to see how I build production products.
Frontend
Engineering beyond code
OWASP-aware delivery from auth to containers - informed by hands-on cybersecurity lab work across 22,000+ files of Dockerized training environments.
Hands-on labs for SQLi, XSS, SSRF, IDOR, injection, and privilege escalation.
JWT, session boundaries, token rotation patterns, and secure auth flows.
Role-aware APIs across school, ERP, and SaaS domains.
Rate limiting, signed URLs, input validation, and audit logs.
Multi-stage builds, least privilege, health checks, isolated networks.
Secrets management, environment isolation, and hardened deploy posture.
Crypto-aware services for tokens, sensitive fields, and transport trust.
Threat modeling mindset from architecture through tests and release.
Flutter products with offline-first thinking, push, and adaptive UI - FitNerve and beyond.
Flutter
Cross-platform product apps with Riverpod state and production polish.
Android & iOS
One codebase shipping native-feel experiences on both platforms.
Offline-first
Local caching patterns so core flows survive flaky networks.
Push & realtime
Firebase messaging and WebSocket-ready architectures.
Adaptive UI
Responsive and adaptive layouts from phone to tablet.
LLMs integrated into recruitment, fitness, and business platforms - with vector-ready data and worker pipelines.
LLM Integration
OpenAI, Gemini, Claude - wired into real product workflows.
AI Workflows
Background jobs, plan generation, scoring, and automation pipelines.
Vector-ready data
PostgreSQL + pgvector for candidate scoring and retrieval paths.
RAG & embeddings
Architecture designed for retrieval-augmented product features.
Prompt engineering
Deterministic enough for production - measurable, testable outputs.
Microservices when isolation pays. Modular monoliths when speed does. Queues, caching, and Docker always in the conversation.
Schema and boundaries follow the business - 36-model ERPs and 43-endpoint APIs exist for a reason.
Modular monoliths when speed matters; workers and queues when the request path must stay fast; microservices when isolation earns its cost.
BullMQ/Celery workers for exports, notifications, email, and AI jobs - never block the user on heavy work.
Redis for speed and queues; Postgres as source of truth; object storage for files with signed access.
Docker multi-stage builds, health checks, CI/CD, tests, and observability as part of the product - not afterthoughts.
AuthN/AuthZ, rate limits, audit logs, and threat modeling belong in the first design pass.
Experience
Recent
Campusna · Tunis, Tunisia
Ongoing
DarDev · Tunisia
Earlier
CSFMT · Hammam-Lif, Tunisia
Education
Holberton School
Full-Stack Software Engineering
CSFMT
Advanced Technician Degree, Information Technology
Also shipped
FitNerve (AI fitness Flutter app), RhAI/EscaHire (AI recruitment with pgvector), PropClose (B2B sales automation), App4Drivers marketplace architecture, and a 22k+ file cybersecurity Docker lab portfolio - detailed on request and in the resume.
Contact
Open to Senior Full-Stack Product Engineer and founding-engineering conversations. Tunis-based, remote-friendly.
Coming soon
Engineering articles
Architecture deep-dives
Speaking & open source
Testimonials