jamal@site:~$

Jamal Nader

Technical Lead Software Architect Backend Developer

I build systems that prove what they claim - from server infrastructure and CI/CD pipelines to cryptographic identity verification and business solution systems.

For seven years I worked inside e-commerce operations - products, orders, customer support, the admin panel at 2 a.m. when an order won't go through. For the last stretch of those years I was also building the systems on the other side of that screen. I never had to imagine the operator. I was the operator.

Today that means owning systems end to end: bare metal, schema, application code, security and CI/CD. Ewasila is a seven-service commerce platform with its customer app in the Play Store. Sway is a Rust point-of-sale backend holding a live retailer's inventory, and Fragrancia Luxo runs on it in Brazil - including the electronic fiscal invoicing Brazilian law requires, built from Beirut, in Portuguese. On most of this I was the one engineer who could answer for the whole stack.

I'd rather state a limit than a promise. The licensing system's own documentation grades every layer for what it actually is - a mathematical guarantee, a server-side guarantee, or merely a deterrent - because nothing running on hardware a customer controls can honestly be called uncrackable. I plan the rollback before the rollout, and I build so the running system never depends on the rewrite finishing.

Which is why the next section exists. The check below isn't a badge - it's a live ECDSA P-256 verification against a key your browser never receives. Everything else on this page is a claim. That one you can test.

8
years in software
3
platforms in production
4
languages spoken

No trust required.
Just math.

Press run. The server fetches the authorized public key, hashes the canonical payload and checks a real ECDSA P-256 signature - live, right now. Nothing here is pre-recorded.

Open the full verifier →
$ fetch public key
$ hash payload (SHA-256)
$ verify ECDSA P-256
$ compare fingerprint
AWAITING RUN

Systems that aren't on public GitHub - private source, client deployments, and one I designed but did not build. Click a project to open it.

PROBLEM
A commerce operation spread across a storefront, a staff admin panel, a customer mobile app and an internal admin app - each with its own idea of authentication, its own data access and no shared contract between them.
APPROACH
Seven services around one core API: the API itself, a public web application, a CMS backend, a customer app and an admin app both in Flutter, an email delivery service secured with mutual TLS, and a notifications service. Schema changes move through versioned SQL migrations shared across all of them, deployed by a purpose-built tool rather than by hand.
OUTCOME
Live, with the customer app shipped to the Play Store. The core API is 278 commits; of the customer app's 181 commits, 145 are mine. The core and search services are currently being rewritten in Rust behind a phased cutover and decommission plan, so the running system never depends on the rewrite being finished.
PROBLEM
Multi-store retail needs one system of record for products, inventory, staff and point-of-sale - and stock that stays correct while several terminals write to it at the same time.
APPROACH
A single Rust service on Actix-Web over MySQL. Sessions are JWT RS512, passwords are PBKDF2-HMAC-SHA512, transport is TLS throughout, and terminals receive live updates over WebSockets. Inventory resolves through a four-level hierarchy - location, warehouse, storage unit, storage bin - so a quantity always maps to a physical place. Uploaded media converts to WebP on ingest.
OUTCOME
Runs in production as the backend for Fragrancia Luxo. Every route is registered in one module, so the entire API surface can be audited by reading a single file.
PROBLEM
Selling on-premise software means shipping a binary onto hardware the customer controls. Licences get copied between machines, and subscriptions get extended by moving the system clock backwards.
APPROACH
Three trust zones. An air-gapped licensor holds the Ed25519 root key and mints licences offline. An internet-facing activation server holds only a delegate key and binds each licence to one device. The point-of-sale embeds the root public key and verifies the root to delegate to licence chain itself. Signatures cover a hand-rolled deterministic wire format, so the bytes signed are byte-exact rather than whatever a serialiser happened to emit. Anti-rollback anchors on several independent time sources, including the point-of-sale's own fiscal timestamps.
OUTCOME
Every layer is graded honestly in its own documentation - what is a mathematical guarantee, what is a server-side guarantee, and what is only a deterrent. Nothing running on customer-controlled hardware is claimed to be uncrackable, because nothing running there can be.
PROBLEM
A Brazilian retailer needed a customer storefront, a staff admin panel and an in-store point of sale that all agree on one inventory - plus Brazilian electronic invoicing, which is a legal requirement rather than a feature.
APPROACH
A monorepo built around Sway as the system of record: the Rust backend, a FastAPI customer storefront, a FastAPI staff CMS, and desktop point-of-sale and CMS clients. On top of that, NFe fiscal reissue, client receivables, supplier relationship management, product sync and receipt printing.
OUTCOME
In production and still shipping. Because the database is live production, inspection runs strictly read-only and no credential ever enters the repository or its documentation.
ROLE
System architecture. Implementation by the OlalgoDigital team.
CONTEXT
A forex brokerage running trade execution on MetaTrader 5 across desktop and mobile, alongside a trading academy, market data and an AI market assistant - separate products that had to behave as one platform to the trader using them.
DESIGN
Defined the architecture blueprints as Technical Lead and Software Architect: which system owns which data, where the boundaries between trading, education and account management sit, and how those pieces integrate. The engineering team built against them.

ALSO BUILT

  • Ewasila CI/CD Custom deployment tool with paired client and server halves, replacing manual release steps across the platform's services. Python
  • Ewasila Rust migration In-progress rewrite of the core and search services from Python to Rust, with QA runs, a security audit and a staged decommission. RustPython
  • Ewasila Invoicing Invoicing backend and its front end, built as a separate pair of services from the main commerce platform. PythonMySQL
  • Server Monitor Endpoint monitor in two parts - a Python poller that checks services and emails on failure, and an Android app built with Capacitor that raises local notifications. PythonTypeScriptCapacitor
  • MySQL Backup System Scheduled full and incremental backups with rotation, compression, restore verification and email alerting. Credentials moved out of source and into the environment. PythonMySQL
  • File Watchdog Recursive filesystem monitor that reports creates, modifies and deletes over SMTP, desktop notifications and JSONL logs. Python
  • WhatsApp Multi-Account Runs three WhatsApp Web sessions at once, each in a fully isolated browser profile, driven from a local control panel. PythonSelenium
  • Personal Ledger Rust ledger service with certificate-based transport and JWT sessions, behind a small web front end. RustJWT
  • Cafe Afif Website, headless CMS and a Flutter admin app with a built-in point of sale, for a cafe in Downtown Beirut. FastAPI over MySQL with a JSON fallback that keeps the site serving when the database is unreachable, and an admin app that caches to SQLite so it keeps working offline. PythonFastAPIMySQLFlutterJWT
  • NATrading Single-binary Rust landing site for an AI-assisted trading service. Markup, scripts and images are compiled into the executable, so a deployment is the binary and its config and nothing else. Bilingual English/Arabic with full RTL, and an SMTP-backed contact form. RustActix-WebOpenSSLSMTP
Python Rust Java C / C++ JavaScript SQL HTML / CSS MySQL MongoDB Linux (Ubuntu/Debian) Nginx Networking (CCNA) Cryptography API Security CI/CD Git Docker System Architecture Disaster Recovery Agile / Kanban Technical Leadership

Click a role to expand

Private coding lessons to university students in Computer Science, Software Engineering and IT. Teaching Python, Rust, SQL and software development fundamentals - adapting methods to each student, from data structures and algorithms to exam preparation and applied concepts.

Independently designed and managed the full technical stack - server infrastructure, database administration, application development, security enforcement, CI/CD pipelines and team enablement. Defined architecture blueprints, hired and mentored engineers, managed budgets, enforced security policies and oversaw disaster recovery planning.

Product management, customer support and order management for a Brazilian e-commerce operation. Remote, multilingual environment.

Product management, customer support and order management. Remote - Brazil.

Product, support and order management for a long-term remote engagement based in Brazil.

Web management, email systems, social media, financial operations and database administration for a startup venture.

Hardware and software troubleshooting, computer assembly and disassembly, and networking issue resolution across Beirut.

2018 - 2022
BA, Management Information Systems
Lebanese International University (LIU) - Beirut, Lebanon
2016 - 2018
Information Technology
CIS College - Beirut · Excellence Certificate Award 2017/2018

CERTIFICATIONS

SECURITY

API Security Fundamentals APIsec University
MCP Security Fundamentals APIsec University
Intro to Cybersecurity Cisco
Ethical Hacking Prog. Hub

ARCHITECTURE & SYSTEMS

Software Architecture Univ. of Alberta
Software Architect Udemy
Foundations of Linux Packt
CCNA: Intro to Networks Cisco / LIU

PROGRAMMING

Python 3 Prog. Hub
Python Advanced Prog. Hub
Java Prog. Hub
Java Advanced Prog. Hub
C Prog. Hub
C++ Prog. Hub
IT Basics Prog. Hub

COGNITIVE SCIENCE

Cognitive Psychology & Neuropsychology (Specialization) Cambridge
Intro to Cognitive Psychology and Neuropsychology Cambridge
Learning and Memory in the Brain Cambridge
The Neuropsychology of Decision Making Cambridge
The Psychology of Emotions: Embodied Cognition Cambridge

BUSINESS & LEADERSHIP

Pre-MBA in Value Investing AGF / Faculdade HUB
Youth Leadership UNDP / LIU

Get in touch

Open to technical leadership, backend and infrastructure work - remote or Beirut-based.

jamalnader@jamalnader.com ↗

Languages: English (Advanced) · Portuguese (Advanced) · Arabic (Intermediate) · Spanish (Basic)