I build products through deep problem solving, and ship 10x faster by pairing AI with my own judgement. My expertise is rooted in system design, distributed systems and AI/ML pipelines. Open source is my hobby, and where I sharpen my architectural design skills. I contribute to CNCF projects, which need exactly that kind of depth. Whether the requirement is thinking, shaping, breaking or manifesting the impossible, it's my job to make it happen through architecture driven skills.
Blog · LinkedIn · LeetCode · mailme.taimoor@gmail.com
- Building an eBPF sandbox that detects malicious npm packages by what they do during install, not by reading their source. It catches payloads shipped as compiled binaries, which static scanners cannot read.
- Contributing to Apicurio Registry, a CNCF Sandbox project, in the operator and storage layers.
- Writing about AI and LLM tooling, distributed systems, and backend architecture.
- Competitive programming, and finishing my degree.
- Mentoring engineers one to one at DevWeekends.
| Project | Work |
|---|---|
| Apicurio Registry | #9035, #8740 and #9335 merged. Split the operator CSV RBAC into namespace and cluster tiers, added a single-namespace least-privilege install variant, and derived readable descriptions for JSON compatibility diffs. Also a CloudEvents webhook delivery engine with at-least-once delivery and the retry schedule kept in PostgreSQL, so a delivery survives docker kill mid-backoff (recorded run) |
| Cognee | #24, #35 and #36 merged. Removed two N+1 query loops, wrapped bulk provenance writes in a single transaction, and consolidated redundant queries in the vector and graph paths. Rust |
| Limitador | #501 open. Replaced .unwrap() calls with descriptive .expect() messages so panics say what actually failed. Rust |
| Coral | #1081 merged. Vapi Voice AI source integration |
| hookproof | Author. Fault-injection harness for HTTP webhook producers in Java. Fifteen checks over raw sockets, including faults no server library can produce, such as 200 OK followed by half a body and then a TCP reset |
| Project | What it is |
|---|---|
| topfived.com | Real-time group challenges, voting and leaderboards. React and Supabase, 56 relational tables with Edge Functions and cron jobs handling the background work. Shipped for a US client in 2.5 months |
| GitTix | Ticket marketplace as six services on Kubernetes over a NATS Streaming event bus. Reservations expire after 15 minutes through a delayed Bull job, out-of-order events are handled with per-document version numbers, and each service ships independently through path-filtered GitHub Actions. TypeScript, Docker, MongoDB, Redis, Stripe |
| LMS | Course platform with student enrollment, instructor tools and admin access. Next.js, secure API routes and dynamic course management |
| Multivendor marketplace | Role-based access with separate dashboards for admins, vendors and customers. MERN, JWT, Cloudinary |
Turing — AI Model Engineer and Evaluator. C++ systems for model training, benchmarking model performance across domains, led supervised fine-tuning work and contributed to RLHF.
Freelance — full-stack delivery for clients, working across time zones and mostly async.
DSA Trainer at DevWeekends, running advanced sessions for a community of more than 20,000 developers and mentoring 500+ students, most of them one to one. Live sessions from general engineering to competitive programming.
CP Lead at GDGoC. ICPC onsite participant. 330+ problems solved on LeetCode.
💻 Languages — JavaScript, TypeScript, Java, Rust, C++, Python
🌐 Web — React, Next.js, Node.js, Express, React Native, REST APIs
🧠 AI and LLM — LangChain, LangGraph, RAG, embeddings, vector databases (Chroma, Pinecone)
🗄️ Data — PostgreSQL, MySQL, MongoDB, SQL Server, H2
☁️ Infra — Docker, Kubernetes, AWS (EC2, S3), CI/CD, Linux, Supabase