SYSTEMS OPERATIONAL
TAWFIQ SIRAJUDEEN/BACKEND & SYSTEMS ARCHITECT/AZURE-SOUTH-ASIA
P99:14ms
↑ ↓ or scroll to travel between worlds
01 / 09
ACTIVE SPEC // CHENNAI, INDIA

Architecting systems
that stand under load.

Specializing in distributed backend architectures, zero-trust authorization systems, and high-throughput ingestion pipelines. I design clean, predictable infrastructure engineered for multi-tenant isolation, minimal latency, and zero-downtime operations.

TypeScriptNode.js / GoPostgreSQLDocker & KubernetesAzure Cloud
Client
Web/Mobile Ingress
API Gateway
Reverse Proxy / Rate Limit
Authentication
JWT Claims Validation
RBAC
Security Policy Guard
Services
Application Domain Logic
Queue
Redis Broker Stream
Workers
Async Task Orchestrators
PostgreSQL
Primary Transactional DB
Analytics
Columnar OLAP Reports
World 00
Memory Vault

Two and a half years, in the order they happened.

Jul 2025 — now
Software Engineer, ThetaZeroCurrent

Enterprise applications, multi-tenant SaaS and the Sen7 data platform. Where most of what I know now came from.

2025 · 1 month
Intern, CyberMindWorks

First real codebase — review, professional Git workflow, and what a client requirement looks like by the time it reaches a developer.

Jan 2024
Started at Brocamp

Learned to program from the ground up — JavaScript through to MVC, auth and deployment — building full-stack projects the whole way.

B.Tech, Information Technology · Aalim Muhammed Salegh College of Engineering, 2020—2024 · distinction, 6th semester · published research on autism spectrum disorder
World 01
Mission Control

I work on systems that have to keep their promises.

Multi-tenant SaaS backends, internal platforms, and the data plumbing underneath. Mostly the unglamorous kind of work: authorization that holds, queries that stay honest, deployments that stay boring.

01 — Services
Backend engineering

Node, Express and TypeScript services in a layered service/repository structure, with validation at the edge and real error handling.

02 — Data
Schemas & queries

MongoDB and PostgreSQL: schema design, indexing, transactions and aggregations that answer real business questions.

03 — Delivery
Cloud & containers

Docker, Azure Container Apps and Blob Storage — shipping, debugging production and untangling environments.

World 02
Engineering Brain
PRODUCTION SYSTEMS ENGINE

Four production architectures owned end-to-end.

THETAZERO PLATFORM // PRODUCTION
SYSTEM AAUTH-SPEC-v2.1

Identity & Zero-Trust Auth Architecture

Session security, OTP registration, and JWT token signing anchored by a central dynamic RBAC permission evaluation layer.

P99 < 8ms · 0 Silent Bypasses
Node.jsTypeScript
SYSTEM BWF-ENGINE-v1.4

Multi-Tenant Document Workflow Engine

State machine handling draft, review, approval, rejection, and audit trails with versioned document snapshots and evidence validation.

100% State Consistency
MongoDBExpress
SYSTEM CSCHED-SYS-v3.0

Event Scheduling & Attendance Subsystem

Registration, volunteer mapping, attendance verification, and automated edge-case resolution for sudden schedule alterations.

High-Concurrency Handling
PostgreSQLREST API
SYSTEM DSEC-PERF-v4.2

Security Hardening & Query Optimization

Strict request payload sanitization, SQL index tuning, MongoDB aggregate pipeline rewrites, and environment secret verification.

Latency Reduced by 68%
Postgres IndexingAggregations
bash — tsz-control-room ~ 80x24
INTERACTIVE CLI
tsz@infrastructure:~$sys.info
Tawfiq Sirajudeen // Backend Systems & Infrastructure Engineer
Host: theta-prod-node-01.southasia.cloud
Uptime: 99.98% SLA // Type 'help' for commands.
tsz@infrastructure:~$
World 03
Architecture Observatory
SYSTEM ARCHITECTURE SPECIFICATION

Multi-Tenant Data Ingestion & Transformation

Ingesting raw data per tenant, storing immutable raw zone datasets in object storage, and executing isolated dbt transforms on DuckDB into golden analytical marts.

FLOW: RAW DATA → GOLDEN ANALYTICAL MARTS● PIPELINE OPERATIONAL
01
Extract
Airflow Ingestion
Scheduled & triggered jobs per tenant source.
02
Raw Zone
MinIO · Iceberg
Immutable raw storage with schema evolution.
03
Transform
dbt · DuckDB
In-memory SQL modeling & assertions.
04
Golden Marts
Parquet / Warehouse
Tenant-scoped analytical query targets.
05
Serve
API Gateway
Generated JSON endpoints & dashboards.
ROW-LEVEL TENANT ISOLATION SPEC
Every query passed to the analytical warehouse includes tenant context assertion. No cross-tenant row leakage is mathematically possible at the driver level.
AUTOMATED ELT ORCHESTRATION
DAGs managed via Apache Airflow automatically trigger incremental transformations in DuckDB, pushing partitioned outputs to Azure Blob storage.
World 04
Debug Room
POST-MORTEM & INCIDENT ANALYSIS

Two production bugs I uncovered and eliminated.

ZERO SILENT FAILURES PRINCIPLE
INC-2025-01 — HIGHRESOLVED & AUDITED

Router-Prefix Middleware Bypass in Nested Sub-Routers

PROBLEM OBSERVED:Nested sub-routes answered requests without triggering mounted authorization middleware.
ROOT CAUSE:Prefix guard app.use(prefix, guard) failed to match nested router re-declared internal routes due to path resolution mismatch.
ARCHITECTURAL RESOLUTION:Attached authorization assertion at individual router scopes with mandatory permission check decorators.
INC-2025-02 — CRITICALRESOLVED & AUDITED

Silent Hardcoded JWT Secret Fallback in Staging Environment

PROBLEM OBSERVED:JWT signature validation passed even when process.env.JWT_SECRET was omitted in environment config.
ROOT CAUSE:Convenience fallback process.env.JWT_SECRET ?? 'dev_secret' allowed unconfigured runtime execution with static signing keys.
ARCHITECTURAL RESOLUTION:Implemented strict config schema validation on application boot that terminates process immediately if required variables are missing.
World 05
Innovation Garage

Built while learning

2024 — 2025 · shipped & still live
code-sphere-bice.vercel.app
Code Sphere
Code Sphere
Next.js · Socket.io · Mongo · Razorpay

E-learning platform with three roles, paid courses, progress tracking, live chat and certificate approval.

LiveCode
hossom.onrender.com
Hossom Commerce
Hossom Commerce
Node · Express · Mongo · Razorpay

A backend-first store: auth, catalog, cart, order tracking and payments, rendered server-side.

LiveCode
brandspark.org.in
Brandspark
Brandspark
React · Tailwind · Axios

Marketing site for a branding studio — my first client-facing front end, still in use.

LiveCode
World 06
Wall of Impact
PRODUCTION METRICS & TELEMETRY

Measured production output.

TELEMETRY BENCHMARKS // PHASE 1
METRIC_01
0
REST & GraphQL Endpoints
Production Endpoints Deployed
METRIC_02
0
Supported UI Dashboards
Multi-Role Client Views
METRIC_03
0
Sprint Tasks Shipped
Verified Architecture Tasks
METRIC_04
0
Core Systems Owned
Auth, Workflow, Sched, Perf
World 07
Reach Me
ENGINEERING CONTACT ENDPOINT

Let's build systems that scale cleanly.

DIRECT EMAIL ENDPOINT
tawfiqsirajudeen.official@gmail.com
GITHUBgithub.com/tawfiq2725 →LINKEDINTawfiq Sirajudeen →PHONE+91 87545 15276 →
TAWFIQ SIRAJUDEEN // SYSTEM CONTROL ROOM v2.4