Featured, 8 Oct 2026
AWS Security Checklist for Small Teams
An AWS security checklist for small teams, built on the AWS Startup Security Baseline: 19 controls in three tiers, each with a command, a verify step and its cost.
Shahid Yousuf Senior Software Engineer
Building software end to end for 10+ years across Frontend, Backend, Distributed Systems, Databases, Observability, AWS Cloud and AI-Enabled Applications.
Recently shipped
The right engineer, with modern AI tools, workflows, processes and capabilities, delivering with you and your team.
Saves time
No handoff delays
Saves money
No resource waste
Better product
No outdated processes
Live on GitHub
4,315
contributions, last year
I help businesses design, build and run the software they depend on, from the first version of a product to the systems that keep it fast, secure and reliable as it grows.
Bring me in as a freelance engineer to build it, or as a consultant to review your architecture, plan a migration or guide your team. Either way, you work directly with me across the full lifecycle: understanding your goals and product requirements, planning and estimation, development workflows and CI/CD, secure deployments, observability, and ongoing maintenance and support.
See past workMost software delays come from handoffs: a brief rewritten for the next person, context lost between roles, a decision waiting on the next meeting. With AI and modern tooling now covering much of the work that used to need extra hands, one experienced engineer can take a well-scoped project from the first conversation to production without those gaps.
I work with AI-enabled software engineering workflows: AI-assisted development and code review alongside automated tests, infrastructure as code and CI/CD, which take care of the repetitive work. My time goes on the decisions. When a project genuinely needs more people, I will say so at the start and help you plan for it.
Featured, 8 Oct 2026
An AWS security checklist for small teams, built on the AWS Startup Security Baseline: 19 controls in three tiers, each with a command, a verify step and its cost.
Plan a GCP to AWS migration around a short, rehearsed cutover: the service map, the data sync, re-encrypting Vault data, old URL redirects and a clean GCP teardown.
AWS21 min read
A tested, step-by-step Go tutorial: reproduce a retried payment charging the card twice, then make idempotency keys in PostgreSQL hold up under races, crashes and load.
Distributed Systems31 min read
A tested, step-by-step Go tutorial: reproduce two requests spending the same balance, fix it with a Redis lock, then make the fix hold up when things go wrong.
Distributed Systems29 min read
GitHub now issues two OIDC subject formats. Here is a trust policy that accepts both, a way to prove it against every repository, and a safe order for retiring keys.
AWS14 min read
My own product, 2026
A paid daily practice platform for UPSC, State PSC, SSC, banking, railways and defence aspirants. I designed, built, launched and operate the whole product myself.
Product DesignFull-Stack Web ApplicationAI-Assisted ContentOnline PaymentsSEOCore Web VitalsMobile-First Design
Cybersecurity managed services provider, 2026
For a cybersecurity managed services provider, I set up AWS Control Tower over a live multi-account estate, rolled out preventive guardrails and CIS security monitoring, cleaned up identity and access, and built a safe method for moving accounts between AWS organizations.
AWS Control TowerAWS OrganizationsService Control PoliciesResource Control PoliciesDeclarative PoliciesIAM Identity CenterAWS Security HubCIS BenchmarkAWS ConfigIAM Access AnalyzerCloudTrailCloudFormation StackSetsTerraformGitHub OIDCPython
Clinical trial recruitment software company, 2022
At a clinical trial recruitment software company, I worked across the full stack of one Django platform serving several leading US clinical research institutions, each with its own database, features and branding.
PythonDjangoDjango templatesJavaScriptjQueryReactPostgreSQLApache SolrApache HTTP ServerClinicalTrials.govGmail
Share your goals, timeline and any constraints, whether you need it built or want expert advice. I read every message myself, as the engineer who would build it, and reply with a clear view on approach, scope and next steps.
Cookie preferences
This site uses Google Analytics cookies to understand how visitors use it. Analytics loads only if you accept, and the data is never used for advertising or sold. Privacy notice