Full-Stack Developer - Security-Focused Projects

ABDUL MAKAF ABDUL MUNAF HASEEM

Full Stack Developer Software Engineering Graduate

**********@*****.*** +94-72-849-**** linkedin.com/in/mohammedhaseem github.com/Haseem3393 portfolio: muhammedhaseem-portfolio.vercel.app

PROFILE SUMMARY

Full stack developer with hands-on experience building production-grade web applications using React, Node.js/Express, and PostgreSQL/Supabase. Recently completed a Higher National Diploma in Software Engineering and a Full Stack Development internship, with additional independent project work spanning role-based access control, authentication security, and real-time dashboards. Comfortable leading feature architecture end-to-end — from database schema and API design to responsive, component-driven frontends — with a strong focus on security (JWT002C RLS, access control audits) and clean, maintainable code.

EDUCATION

Higher National Diploma in Software Engineering March 2025 ESOFT Metro Campus Pearson Assured

Diploma in English August 2024

ESOFT Metro Campus Pearson Assured

GCE Advanced Level (A/L) January 2022

PL/AL-Hilal Central College

GCE Ordinary Level (O/L) November 2019

PL/AL-Rifai Maha Vidyalaya

EXPERIENCE

Software Development Intern Marazin Private Limited December 2025 – Present

● Contributing to real-world web application development across the frontend and backend

● Building UI features and components using React

● Assisting with backend development in Laravel and PHP

● Collaborating with the team on task planning, code reviews, and debugging

● Gaining exposure to industry-standard development workflows and practices KEY PROJECTS

Construction Project Management System — ConstructPro (Munaf & Sons Construction)

● Built a full-stack construction project management platform using React, Node.js/Express, and Supabase (PostgreSQL)

● Led a structured security and performance audit — resolved a TOCTOU race condition, fixed insecure password-reset token generation, and closed broken access-control gaps across 10+ route files

● Implemented JWT-based authentication with audit logging and migrated legacy frontend pages from raw fetch calls to React Query for consistent data-fetching and caching Point-of-Sale System — HM Supermarket

● Developed a full-stack supermarket POS system with a module-based sidebar architecture and role hierarchy (Developer

Super Admin Admin Manager Cashier)

● Designed a fine-grained permission system (per-module view/add/update/delete access) enforced through a reusable permission wrapper component and triple-layer security: UI-level hiding, form-submit validation, and database-level RLS

● Built a FIFO batch stock management flow allowing cashiers to select specific inventory batches at checkout using compound cart keys

Divisional Secretariat Smart Service Management System — GS Office

● Built a digital queue and token management platform for a government divisional secretariat using React, Tailwind CSS, Express, and Supabase

● Designed the backend security architecture, including service-role key strategy and deferred Row-Level Security (RLS) rollout

● Implemented granular role-based access control with employee-level permission overrides, plus Shift Management, a Tea Break approval system, and Customer Attendance Tracking modules CRM System (Full-Stack Sales & Lead Management Platform)

● Architected a full-stack CRM using React 18 + TypeScript with Vite, Tailwind CSS, and React Router for multi-page navigation across Dashboard, Leads, Tasks, and Reports

● Built an interactive drag-and-drop Kanban pipeline board (Hello Pangea DnD) and sales analytics dashboards using Recharts

● Developed a Node.js/Express REST API with JWT authentication, Bcrypt password hashing, and role-based access

(Admin, Manager, Agent), backed by MongoDB (Mongoose) / PostgreSQL (Prisma) with schema validation via Zod TECHNICAL SKILLS

Languages: JavaScript, TypeScript, PHP

Frontend: React, React Router, React Query, Tailwind CSS, HTML5, CSS3, Bootstrap, Figma Backend: Node.js, Express.js, Laravel, PHP, JWT & Bcrypt Authentication Database: PostgreSQL, Supabase, MongoDB, MySQL, Prisma, Mongoose Tools: Git, GitHub, Visual Studio, VS Code, XAMPP, Laragon SOFT SKILLS

● Problem-Solving & Analytical Thinking

● Time Management

● Effective Communication

● Team Collaboration

● Active Listening

● Quick Learner & Adaptable

LANGUAGES

Tamil (Native) Sinhala (Fluent) English (Intermediate) REFERENCES

Mr. N.M.M. Nuhman

Programme Manager, ESOFT

*******.******@*****.**

+947*-**-**-***

Contact this candidate