JWTCLAIMSSCOPEHTTPSSQLS3APPENDDEPLOYAgency PanelAuth / 2FARBACCore APIPostgresObject StorageAudit LogCI
Amir Tabatabaeiİzmir — open to work

Backend & Full-Stack Engineer

The hard parts,
built right.

Authentication and two-factor flows, role-based access control, multi-tenant data isolation, and the API contracts everything else depends on — the parts teams most often get wrong.

What I own

JWT
OAuth2 & JWT
2FA
Two-Factor Auth
RBAC
Role-Based Access
MT
Multi-Tenant Isolation
LOG
Audit Logging
API
Contract-First APIs

Selected work

Completed, cancelled before launchEVOField Merchandising Route Planner.NET 10ReactTypeScriptSQL ServerOpen the planner demo
DeliveredDubai Visa PlatformB2B Visa Capacity PlatformFastAPIJinja2PostgreSQLJWTOpen the panel demo
The planner workspace: routes on the left, two routes drawn across a city map, week navigation, and the effective-versus-baseline toggle
A route selected: the week's visits with durations and drive times between stops, revenue against target, active patch count, assignment history, and a status bar counting errors, warnings and workload fairness across merchandisers
The same plan as a table
The agency dashboard: a module launcher where Visa, Accounting and identity management are available and other modules are greyed out, which is the subscription tier deciding what this agency can open
The new visa application form: every name field paired English and Arabic with a translate action, passport photo requirements, and a group membership field marking a traveller as the main person or a dependent
User management, with the roles, departments and audit log sections that sit behind it
The chart of accounts

Experience — Freelance Backend Engineer, İzmir

Jul 2026 — present

EVO — Field Merchandising Route Planner

Contract-first architecture: the backend generates an OpenAPI spec, which generates the typed React client. Full test pyramid. 170+ commits.

.NET 10ReactTypeScriptPlaywright
Oct 2024 — Dec 2025

KohaApp — Tournament Management Platform

Paid engagement. Bulk ID-card generation replaced the manual card-making step for organisers. Maintained through December 2025.

FastAPIDockerGitHub ActionsSentry
Aug 2025

Dubai Visa Platform — Multi-Tenant Agency Dashboard

White-label multi-tenancy so each agency sees only its own data, and RBAC across five roles with permission-driven menus.

FastAPIJinja2JWTPostgreSQL
Sep 2024 — Mar 2025

RashApp — Product Warranty & Customer Platform

Owned the backend: account, auth and user CRUD, two-factor for both sign-up and login, SMS verification. Reached completion but was cancelled by the client before launch.

FastAPISQLAlchemyPydantic

Stack

Backend

  • Python
  • FastAPI
  • Django
  • PostgreSQL
  • SQLAlchemy
  • Pydantic
  • JWT / OAuth2

Frontend

  • TypeScript
  • React
  • Next.js
  • Jinja2
  • Tailwind CSS

Also

  • C# / .NET 10
  • SQL Server
  • OpenAPI contract-first

AI / ML

  • PyTorch
  • OpenCV
  • CNN / ResNet
  • RAG
  • Diffusion Models
  • ControlNet

DevOps

  • Docker
  • GitHub Actions
  • Linux
  • AWS (S3, EC2)
  • MinIO
  • Sentry

Testing

  • pytest
  • xUnit
  • Vitest
  • Playwright

Work with me

I solve your problems and build your ideas.

I'm researching how people actually work day-to-day, and where friction, waste and repetitive pain show up. Tell me where your work sucks — no pitch, nothing to buy.

Start hereEnglish · Türkçe · فارسی