Full-stack developer in Dhaka, Bangladesh, looking for my next role. Remote is fine. I tend to work nights, which my GitHub bio admits to.
From 2020 I was the only developer on a WooCommerce store with 236,000+ orders and 134,000+ customers. It gave me 502 storms, a bloated database, a badly configured Redis and a card skimmer, and I fixed each one the hard way. Two of the repos below came straight out of that: PulseDeploy, because I got tired of setting up servers by hand, and SentinelGuard, because generic WordPress security plugins don't watch the checkout.
These days I work across the stack: Laravel and Node backends, React and Next.js frontends, and the Linux servers they run on.
mustafizur.info | mustafizur.dev101@gmail.com | LinkedIn
Backend: PHP (Laravel, WordPress/WooCommerce), Node.js, Python (FastAPI), MySQL/MariaDB, PostgreSQL, Redis.
Frontend: React, Next.js, TypeScript, Tailwind. Some Flutter.
Servers: Ubuntu, Debian, Amazon Linux, Nginx or Apache, Docker, GitHub Actions, Cloudflare, Let's Encrypt, UFW and fail2ban. I size configs from the machine's RAM, load test before I trust them, and keep backups and rollbacks ready.
| Project | What it is |
|---|---|
| PulseDeploy | Bash toolkit that turns a fresh VPS or EC2 instance into a production server: LEMP, LAMP, Node or Laravel + Next.js, plus Redis, SSL, firewall and backups. pulse deploy switches releases atomically and rolls back if the health check fails; pulse-lt load tests and exits PASS/FAIL for CI. Tested on Ubuntu 24.04 and Amazon Linux 2023. |
| SentinelGuard | WooCommerce checkout security plugin, live on WordPress.org. Stops card testing before the gateway is called, scans for skimmers and hidden admin accounts, and has an observe mode that logs before it blocks. CI runs on PHP 7.4 to 8.3. |
| srp-hpos-purchase-history-fix | Fixes a WooCommerce HPOS bug in SUMO Reward Points that stopped loyalty tiers from applying. Found it on a live store. |
| GeoProspector-AI | Self-hosted LangGraph agent with a FastAPI dashboard: finds local businesses, scores their web presence, and drafts outreach that waits for human approval. PostgreSQL checkpoints, Docker. |
| BFF-Flutter + K-Luxe | Flutter shopping app and the Next.js backend-for-frontend it talks to: cart, checkout, orders, Authorize.Net hosted payments, Redis caching. |
| repo-brain | Zero-dependency Python tool that maps a repo's import graph, ranks files, and packs the most relevant code into a token budget for AI coding agents. |
| KhojBangla | OCR pipeline for old Bangla newspapers: deskew, column and line segmentation, Tesseract/Surya, and a review queue for low-confidence lines. |
| PerfKit | Self-hosted website performance analyzer with Lighthouse scores, Web Vitals, a network waterfall and a filmstrip. |
I prefer plain code I can read in one sitting. I don't trust an exit code on its own, so my deploy steps check that the thing actually works. And I write the runbook while the incident is still fresh.
Backend, full-stack or Linux/DevOps roles where I own a system from code to server. The quickest way to reach me is the email or site above.