The field service platform Associated Environmental Systems runs on
— work orders, field service reports, and ISO/IEC 17025
calibration certificates for environmental test chambers. A single
Next.js 15 codebase over a 127-model PostgreSQL schema.
127Prisma models
92RBAC-gated server actions
240+calibration test files
Own the calibration system end to end: a multi-step wizard that
plans set points, captures as-found and as-left readings per
sensor position, and renders an accreditation-grade PDF
certificate carrying measurement-uncertainty budgets,
reference-standard traceability, and full revision history.
Built the conformity layer — collapsed six divergent pass/fail
implementations into one canonical verdict, froze every value a
released certificate must not drift, and refuse issuance when the
attested site address, calibration due date, or reference-standard
snapshot no longer matches the record.
Closed the authorization gap: moved 34 unprotected calibration and
FSR write paths behind Zod-validated defineAction
wrappers, blocked technician self-approval on certificate release,
and added region scoping, confidential-company grants, and a user
access audit trail on top of a generated role × permission
matrix.
Retired a manual GoFormz workflow with native field service report
capture — server actions with jsPDF export, AI draft and rewrite
assists, a symptom→parts recommender, and a coordinator
review queue.
Private repo · Built at Associated Environmental Systems
Experience
Where I've shipped.
Software Engineer at Associated Environmental Systems
Sept 2026 – Present
Converted to full-time after the summer internship, continuing
on the same compliance platform for calibrating and servicing
environmental test chambers.
Software Engineer Intern at Associated Environmental Systems
June 2026 – Sept 2026
34write paths gated
6 → 1pass/fail rollup
ISO 17025certificate compliance
Built the field service report platform on Next.js server
actions with jsPDF export, retiring a manual GoFormz workflow;
closed price-tampering and double-submit gaps found in security
review with race-reproducing tests.
Designed the calibration wizard and certificate generator —
set-point planning, per-position as-found/as-left capture,
measurement-uncertainty budgets linked to real reference
instruments, and revision/amendment semantics where approval and
release are distinct events.
Gated 34 unprotected calibration and FSR write paths behind
Zod-validated RBAC server actions and blocked self-approval on
certificate release; consolidated six divergent pass/fail
implementations into one canonical rollup, eliminating
certificates that printed FAIL for readings the UI showed as
passing.
Software Engineer Intern at Soaper
June 2025 – June 2026
< 20msp95 API response
120k+rows indexed
20+NCPDP SCRIPT scenarios
15+features shipped
Shipped full-stack features across a React/TypeScript and
FastAPI stack; optimized API layer to reduce p95 response times
from 140ms to under 20ms and cut frontend latency by 25%.
Led end-to-end Surescripts e-prescribing certification across
20+ NCPDP SCRIPT test scenarios; identified and resolved
critical bugs in prescription routing, renewal response
handling, and async message processing to achieve full
certification for a live EMR.
Designed and implemented a multi-parameter radiology search
feature using indexed PostgreSQL queries over 120K+ rows,
accelerating data entry workflows by 40%.
Built and maintained backend services — EC2 deployments via
systemd, Celery task queues for async prescription workflows —
shipping 15+ production features alongside physicians and
clinical staff.
Infrastructure QA Engineer Intern at NYC Department of Education
May 2025 – Aug 2025
Deployed and validated server and network infrastructure across
10+ NYC public schools; developed standardized walkthrough
checklists that reduced post-deployment support tickets by 25%.
Built Python automation scripts for server rollouts and on-site
diagnostics across 5 boroughs, cutting per-school setup
verification from 90min to 25min.
Projects
What I've built.
Live
Scorva
Started as a way to combine two things I care about, sports and
building, and ended up being the most complex thing I've shipped.
31REST + SSE endpoints
4M+total rows
~75%faster cache responses
1800+tests via Jest + Vitest
17AI tools
Designed a normalized PostgreSQL schema across 13 related tables
serving 4M+ rows; built a REST API layer handling
multi-sport queries with under 30ms average response times.
Built an agentic AI chat assistant using GPT-4.1-mini with a
multi-turn tool-calling loop across 17 tools; uses pgvector
semantic search (RAG) over text-embedding-3-small embeddings of
game summaries for natural-language game retrieval, live stats,
player comparisons, and web search; streams responses via SSE
with automatic page-context injection and rolling conversation
summarization.
Architected a two-tier live sync system: a 15-second polling
cycle for scoreboards and a 2-minute cycle for full box scores,
pushed to the browser via PostgreSQL LISTEN/NOTIFY over SSE with
automatic REST fallback on connection failure.
Designed tiered Redis caching (30s–30d TTLs) across 17 endpoints,
reducing average response time by ~75% (up to 95%); implemented
auth with Google OAuth popup flow, JWT middleware, Supabase
signup webhook, and two-step cascading account deletion.
A recovery-first fitness tracker that monitors muscle fatigue in
real time and uses AI to recommend what to train next.
~64%faster cached responses
96-hourrolling fatigue window
237Vitest + Playwright tests
Built a real-time recovery engine computing per-muscle fatigue
from a 96-hour rolling window — volume-adjusted decay curves,
cumulative fatigue stacking, and HSL-interpolated SVG body maps.
Cached in Redis (5-min TTL), cutting ~80% of redundant DB reads.
Designed a cache-aside architecture across 6 Redis namespaces
with 3 TTL tiers (5 min → 1 hr → 24 hr), reducing API response
times ~64% on cached paths. Graceful degradation — 100%
availability when Redis is unavailable.
Streamed AI suggestions via NDJSON with chunk-boundary-safe
parsing, integrated Groq Whisper for voice logging, and enforced
Redis-backed cooldowns and rate limiting (10 req/hr), cutting
redundant AI calls ~90%.
Dual-path auth — sub-ms JWT extraction for reads, full server
validation for mutations — reducing read-path overhead ~95%
while keeping writes secure.
Everything you need to stay connected to your faith, fast, free,
and in one place.
12API endpoints
6external integrations
380+tests passing
Architected and shipped a full-stack Islamic companion iOS app
(React Native/Expo 54, Express/TypeScript) as a solo developer —
34K+ lines of TypeScript across 170+ files, published to the App
Store with automated OTA deployments via GitHub Actions and EAS
CLI
Engineered a multi-tier API caching proxy layer handling 3
external API integrations (Aladhan, Google Maps, OpenAI) with
TTL-based in-memory caching (5min–24hr), in-flight request
deduplication, coordinate bucketing, stale-on-error fallback,
and retry with exponential backoff — reducing upstream API calls
by an estimated 80%+
Shipped 7 user-facing screens with 60fps Reanimated animations,
FlashList virtualization, 123+ accessibility annotations across
25 files, dark/light/system theming with flash-free hydration,
and a marketing landing page at sirat.dev with automated GitHub
Pages deployment
