Full-stack developer — trading platforms, payments and WooCommerce checkout engineering. Karachi, Pakistan · available for remote contract work with EU/US overlap.
Six years building the parts of a product that handle money: checkout flows, payment gateway integrations, order and account provisioning, and the backend services that keep them running on infrastructure without a DevOps team.
Most of my production work is under contract and stays private. The repositories below are generalised extracts and standalone tools — client names, credentials and business logic removed, engineering intact.
wc-headless-checkout — A standalone PHP checkout that runs outside WordPress and drives WooCommerce entirely over the REST API. Built so an external dashboard could sell without redirecting users to the store. Server-authoritative add-on pricing, coupon validation, IP-based multi-currency, real WooCommerce orders out the other end.
wc-affiliate-commission-tiers — An AffiliateWP extension adding a tiered commission ladder with separate first-purchase and repeat-purchase rates, effective-dated per-affiliate overrides so changing a rate never rewrites history, and referral-only buyer benefits authorised server-side. Includes an analytics dashboard with a dependency-free SVG trend chart.
woocommerce-pricing-toolkit — Five independent plugins for the pricing and coupon problems WooCommerce leaves open: geo-based currency switching, auto-applied coupons (classic and Blocks), per-variation discounts, URL-driven variation preselection with coupon removal memory, and email-restricted coupon links.
wc-order-webhook-scheduler — Replays WooCommerce orders through an existing webhook on a schedule. WooCommerce webhooks fire once; this is what you need when the receiving system was down for six hours.
metaapi-balance-tracker — Node.js cluster workers streaming balance and equity from hundreds of MetaTrader accounts via MetaApi. Layered rate limiting, retry with backoff, circuit breaking, per-worker account sharding, and high-frequency-update detection. Built because naive implementations crash on rate limits and drown you in SDK log noise.
php-encrypted-backup-service — Verified encrypted database and file snapshots for PHP apps on shared hosting. libsodium/OpenSSL authenticated encryption, verification by streaming decryption into a hash context (no 2× disk spike), OS file locks against overlapping runs, and reconciliation of snapshots the host killed mid-process.
php-status-page — A self-hosted status page in plain PHP: component health, incident timeline, double opt-in email subscriptions with per-purpose HMAC tokens, a hand-rolled SMTP client, queued rate-limited delivery, and a replay-protected sync API. Deploys away from the platform it reports on, which is the whole point.
php-release-toolkit — Deployment tooling for shared hosting, where there is no pipeline: preflight, release verification, post-deploy checks, hotfix self-checks and dry-run cleanup, with a release manifest recording every file linted before packaging.
bulk-email-campaign-manager — Self-hosted bulk email platform (Node/Express/SQLite/Nodemailer/Socket.IO) built to replace a paid SaaS sender. Multi-account SMTP rotation, daily send caps, CSV import, live per-recipient progress over WebSocket, and pause/resume/retry that survives a process restart.
airtable-webhook-scheduler — Scheduled Airtable-to-webhook sync with filter formulas, manual triggers and per-day logs. Thirty lines instead of a Zapier subscription.
flutter-meeting-scheduler — Cross-platform Flutter booking app on Firebase (Android, iOS, web) with a live-updating web admin dashboard and a serverless API that emails RFC 5545 calendar invites. Includes hand-computed AEST/AEDT boundaries rather than a timezone dependency in a cold-start-sensitive function.
gsc-bulk-url-remover — Manifest V3 Chrome extension automating bulk URL removal in Google Search Console. CSV upload, live progress, runs entirely in the browser.
leadforge-prospecting-suite · apollo-lead-extractor — Python desktop app and CLI over the Apollo.io API: company-scoped search, batch enrichment with up-front credit cost confirmation, rule-based classification and formatted Excel export, plus scrapers for trade-show exhibitor directories.
Languages PHP 8 · JavaScript (ES6+) · Python · SQL · Dart Backend Laravel · CodeIgniter · Node.js · Express · REST API design · webhooks · OAuth · cron & queues Frontend React · jQuery · HTML5/CSS3 · Chrome extensions (MV3) E-commerce WordPress · WooCommerce (custom plugins, checkout, Blocks) · AffiliateWP · Dokan Data MySQL · SQLite · Firebase/Firestore · schema design · migrations Payments Stripe · PayPal · Apple/Google Pay · regional gateways · idempotent webhook handling Trading MetaApi · MT5 account provisioning · multi-broker integration Infrastructure VPS/cPanel · deployment & release tooling · backups · staging→production Mobile Flutter · Firebase
Open to remote contract and full-time roles, particularly where payments, checkout or trading infrastructure is the hard part.
📍 Karachi, Pakistan (UTC+5) — 4–6h daily overlap with US Eastern and Central European hours ✉️ sohaibishtiaq2000@gmail.com