Amin Mallol

Full-stack Developer (first engineer, sole engineer for most of the period) · Remote (UK / Hong Kong)

• Fully remote for three years as the sole engineer, owning delivery end to end across four products, with four live tenant deployments and no customer-facing incident.
• Built Cynad, a multi-tenant fund administration platform (~206,000 lines across a Rails 8 API, a white-label investor portal and a manager admin console). Owned both Next.js applications end to end; co-built the Rails API.
• Replaced three per-client forked repositories with one multi-tenant codebase serving four fund managers on their own domains, with runtime white-label theming, per-tenant session isolation and a fail-closed host map.
• Implemented NAV-per-share performance reporting and publish-once price invariants, so investor subscriptions and redemptions inside a period cannot be misread as fund performance.
• Introduced the first automated quality gate on the main API after 2,655 commits with none: GitHub Actions running Brakeman, bundler-audit, RuboCop and ~1,100 RSpec examples, plus a five-tier Playwright suite with axe-core accessibility checks.
• Found and fixed a rate-limiting bypass where alternative spellings of a route disabled every throttle in the application, by resolving requests through the router and matching on controller actions.
• Specify before building: versioned work orders naming the API contract and what is out of scope, including cross-repository handoffs with a role-by-action permission matrix. AI-augmented throughout, with controls to catch confidently wrong output.
• Built Weazly, an SEC filings product: a 60-second EDGAR scraper with a self-managed cursor, DOM-independent persistent annotation over arbitrary filing HTML, and an AI research layer with verifiable citations.
• Built FlexiForm, a dynamic form platform with a usage-metered quota engine, Stripe subscriptions and Solid Queue on Postgres, engineered to run inside a 512MB dyno.
• Built the Sesame client portal: a bilingual bullion brokerage with a 50-field regulated KYC profile, bid/ask spread pricing and dual Stripe and PayPal payment rails.
• Supported technical due diligence on software acquisitions: built a versioned code-health framework fusing an LLM judge with static analysis (complexity, duplication, coverage, dependency audit, secret scanning) into a weighted, commit-pinned score.

Rails 8 · Ruby 4 · PostgreSQL · Devise/JWT · Pundit · Solid Queue · Sidekiq · RSpec · Next.js 13-16 · React 18-19 · Redux Toolkit · Tailwind · Sass · MUI · Playwright · Heroku · AWS S3 · Stripe · Resend · GitHub Actions