$ whoami
For founders and small teams with a live product and no dedicated ops person. Most engineers do one part — write the code, run the cluster, or chase a compliance deadline. I own all three, so you don't hire three times and nobody has to explain your system to the next person.
0+
Businesses running on a platform I architected
0.00%
Uptime on the production platform I operate
// where do you hurt?
Most people arrive with one of these problems. Start where it hurts — it all leads back to the same person who'll own the outcome.
// the offer
For founders and small teams running a live product without a dedicated ops person. I build and run — roughly 20 hours a month, on a monthly retainer. Compliance work (Protect) is scoped as its own engagement, and monitoring can fold into the retainer once it's fixed.
Features, bug fixes, and code review. The roadmap keeps moving while the infrastructure stays boring.
Deployments, CI/CD pipelines, and infrastructure as code. Your environments get reproducible instead of hand-tended.
Monitoring, alerting, and log aggregation — so you find out from a dashboard rather than from a customer.
Incident response during an agreed window, and the runbook change that stops it happening twice.
Dependency updates, database migrations, certificate renewals, and backups you have actually restored from.
Written down here rather than discovered in month three. A retainer fails when the scope was never agreed.
Every system is different, so every retainer is scoped before it is priced. The first conversation costs nothing and you keep whatever comes out of it.
Get a free 30-minute infrastructure review// proof
Not a gallery. The systems I operate document their architecture and pipelines; the products I ship document what got built and shipped. Judge the work rather than take my word for it.
Clusters, pipelines, and monitoring defined in code — the deepest, most documented part of my work.
A multi-tenant booking platform whose engine is configured, not coded — one engine that models any booking, from a gallery ticket to a multi-hall cinema, because every schedule discretises into slots.
Confidential · 2025
Service management system for scheduling, fleet and resource management, request workflows, and financial tracking—delivered as a pnpm monorepo with FastAPI, React, and Expo.
Confidential · 2025
Mobile app and API for discovering and booking sports venues, with integrated payments and promotions.
Full-stack product work — from a spec to something users touch. Strong builds; they carry no infrastructure of their own, so they sit apart from the systems above.
Confidential · 2026
Backend for a mobile dream journal app—AI interpretation, TTS/video, symbols, and paywalled analysis and chat. Supabase (Auth, Edge Functions, Realtime, Storage), Prisma; Express API for local dev only.
Confidential · 2025
Backend API and async story pipeline for an AI-generated personalized story mobile app (Node, Express, Firebase, OpenAI, Runway).
// protect · research & remediation
Standards a company must meet but a tool can't finish — email authentication and web accessibility. I research each to the bottom before touching a system, so what I sell is judgment, not a widget. Here's that research, including the questions I couldn't close.
Your site has to be usable by people who navigate with a screen reader or a keyboard — and in 2025 that stopped being a nice-to-have. US courts took ~3,100 ADA web cases last year, 70% of them e-commerce. The EU's Accessibility Act came into force in June. Most teams bolt on an overlay widget, believe they're covered, and aren't.
The opposite of the DMARC verdict. This one is the right shape: it's a compliance standard nobody can fix once and forget, the automated tools cover only a quarter to half of it, and the regulator has said out loud that AI can't close the gap. The work regenerates every time the site ships, which is what makes it a retainer instead of a project. I'm actively exploring it — the open questions below are about the channel, not the demand.
Read the teardown →Anyone can send email pretending to be your domain, and since 2024 the mailbox providers reject you if you haven't stopped them. The fix is a spec, a feed of unreadable XML, and a migration that can black out your own invoices if you get it wrong. Nobody wants to learn it.
Real global market, reachable by nobody I am — and the wrong shape even if it were. It's a project, not a retainer: the work finishes, and the market priced the leftover tail at $15/month. My local market is already sold to foreign vendors, the bottom of it doesn't send email at all, and 70+ competitors sit between me and a buyer who has never heard of me.
Read the teardown →11 questions I couldn't answer. If you know one, I want to trade.
// process
The same pipeline every time, from requirement to monitored production. Predictability is most of what you are buying: you should always know what is deployed, how it got there, and how to put it back.
Translate business goals into technical specs, scope, and trade-off decisions.
Model the data first — schemas, indexing, and access patterns that scale.
Choose the stack and design services, APIs, and integration boundaries.
Automate build, test, and release so every merge is deployable.
Ship to production on cloud-native infrastructure with zero downtime.
Close the loop with observability, alerting, and security hardening.
// who you're hiring
Head of Engineering at a New York based IT company, three years into the profession, and unusually comfortable on both sides of the deploy.
Most of my work is the unglamorous half of software: the Terraform that makes an environment reproducible, the GitOps controller that reconciles what is running against what was committed, the service account that means no static cloud credential is ever baked into an image. It is the half that nobody notices until it is missing.
The other half is product. I have shipped booking engines, field-service platforms, geospatial mobile backends, and LLM-powered pipelines behind real paywalls. Knowing how a feature will be deployed changes how you build it, and knowing what the feature is for changes how you run it. Splitting those two jobs across two people is where most of the cost hides.
I do fractional work alongside a full-time engineering role, which caps me at roughly twenty hours a month. That constraint is on the table from the first conversation — it is why the retainer is scoped the way it is, and why I would rather turn down work than quietly under-serve it.
Before the infrastructure work I did research — two peer-reviewed papers, on deep-learning tumour classification and on blockchain-backed transaction security. They are listed below. They have almost nothing to do with keeping your Postgres alive, but they are where I learned to be suspicious of a result I wanted to be true.
40%
Faster API responses after profiling and caching a backend that had grown slow under load
½
The onboarding time for new engineers, after replacing a wiki page with one-command dev environments
// stack
Listed last, on purpose. Nobody buys Kubernetes — they buy a system that stays up. This is just the evidence that I can do the work above.
// before you ask
Answered here, so neither of us has to be polite about them on a call.
About 20 hours a month, worked evenings and weekends, Bangladesh time (UTC+6). Be clear-eyed about what that means: I already hold more than one engineering commitment, and a retainer is not a fourth job I quietly squeeze in. It is a capped, scheduled block. You would rather know that now than infer it in month three from how long I take to answer. If your system needs more than twenty hours a month of attention, I am the wrong person and I will tell you so on the first call.
Very few, and the arithmetic is the reason rather than the marketing. Twenty hours a month is one client's worth of real work. Anyone offering you a part-time retainer while carrying a full roster is either not doing the work or not sleeping, and both of those eventually become your problem.
Honestly: not much, until my working window. There is no pager and no 24/7 rotation — anyone promising you that for a part-time retainer is either lying or about to burn out. What I do instead is make 2am breakage less likely: real monitoring, tested backups, reproducible deploys, and a rollback that works. Production-down gets a response within four hours during my window, best-effort outside it.
If you have enough infrastructure work to fill forty hours a week, you should. Most teams with one live product do not — they have a few hours of real ops work and a lot of anxiety. A retainer covers the work without paying a salary for the anxiety. When you outgrow that, I will tell you, and I will help you write the job description.
You do, from the first commit. Everything I build for you — code, Terraform, pipelines, documentation — is yours on creation. If we stop working together I hand over credentials, docs, and a written summary of anything in flight. No hostage-taking, no lock-in, no consultant who is the only one who understands the deploy.
Month to month, 30 days notice on either side, no reason required and no penalty. A retainer that needs a lock-in clause to survive was not worth having.
We agree the extra time in writing before it happens, at an hourly rate set upfront. If it becomes a pattern, that is not a problem to paper over — it means the retainer is the wrong size and we should re-scope it.
Thirty minutes. Before we talk I look at what your system exposes publicly — deploy setup, TLS, headers, whatever CI you have in the open — and I bring you the specific things I would fix, in priority order. You keep that list whether or not you hire me. Nothing is scanned, probed, or touched that you have not published.
// start here
Thirty minutes, no charge, no obligation. I look at what your system exposes publicly, and I bring you the specific things I would fix — in priority order. You keep the list whether or not you ever hire me.
Send me a link to your product and one sentence about what worries you most. That is enough to start.
Reach out at nahidreza99@gmail.com
Or connect on LinkedIn.