Muhammad Usman

Building the systems that make engineering teams fast, safe, and consistent.

About

I build the platform layer that product engineers build on. Monorepo foundations, CI/CD pipelines, auth stacks, security hardening, observability, developer tooling — the systems that are invisible when they work and catastrophic when they do not. Currently owning the engineering infrastructure at PLYAZ, a Web3 fan-engagement platform. Previously embedded in Microsoft's Power BI accessibility team via Akvelon. Arbitrum Developer Certified.

muhammad-usman — zsh
$whoami
muhammad-usman
$cat role.txt
Infrastructure & Platform Engineer
$uptime
7+ years
$ls ./expertise/
monorepo/ cicd/ auth/ security/ kyc/ observability/ devx/
$git log --oneline -1
promoted to platform engineering
$

Ownership Domains

Build System

Turborepo/pnpm monorepo architecture. Build graph design, workspace linking, dependency normalization.

CI/CD

Reusable GitHub Actions workflows across 20+ packages. Semantic-release, preview environments, quality gates.

Cloud & Deployment

Vercel, Supabase, Docker. Migration-gated startup, PWA cache versioning, multi-environment pipelines.

Auth & Identity

Stateless session architecture. 2FA/TOTP, OAuth, RBAC, GDPR controls. Clerk to better-auth migration.

KYC Platform

Provider-agnostic identity verification. Stripe Identity and Paystack BVN routing by region and tier.

Security

Cloudflare Turnstile, CSPRNG OTP, SQL injection defense, rate limiting, CSP headers, brute-force lockout.

Observability

Isomorphic logging with browser and Node transports. Typed error framework. Tamper-evident audit logging.

Developer Experience

Shared ESLint/TS/Vitest configs, plop code-generation, golden-path templates, translation CLI.

Experience

  • Migrated 15+ repos into a pnpm + Turborepo monorepo (22 packages, 7 apps).
  • Standardized CI/CD across 20+ packages with reusable GitHub Actions workflows.
  • Led the Clerk to better-auth migration with 2FA, OAuth, RBAC, and GDPR controls.
  • Architected a provider-agnostic KYC platform (Stripe Identity + Paystack BVN).
  • Hardened the platform: Cloudflare Turnstile, CSPRNG OTP, SQL injection defense, rate limiting.
  • Resolved WCAG 2.1 failures across Power BI dashboards.
  • Fixed ARIA labelling, tab order, and focus-indicator regressions.
  • Established keyboard-only regression testing protocols with QA.
  • Built the antisocialapeclub NFT marketplace on NEAR Protocol.
  • Delivered 4 React Native apps: sports tracker, disaster-response map, food journal, movement journal.
  • Built the ride-hailing core module.
  • Implemented Google Maps route management.
  • Built a Twilio AI auto-response system.
  • Built real-time D3.js patient-condition charts from IoT feeds.
  • Built Power BI clinical dashboards.

Platform Packages

Internal packages built and maintained at PLYAZ

@plyaz/devtools

Solo

Shared ESLint, TypeScript, Vitest, Vite, and Tailwind configs. One enforced standard across every package.

ESLintTypeScriptVitestVite

@plyaz/logger

Solo

Isomorphic logging API with browser and Node transports, adapters, and field-level redaction.

TypeScriptNodeBrowser

@plyaz/errors

Solo

Typed error classes, NestJS exception filters, and secure non-leaking responses.

TypeScriptNestJS

@plyaz/e2e

Solo

Playwright Page Object Model framework with fixtures, path aliases, and API/token helpers.

PlaywrightPOMTypeScript

@plyaz/translations

Solo

TypeScript-parser-to-JSON CLI. 6 locales, 32 locale files kept in lockstep.

TypeScriptCLIi18n

@plyaz/core (KYC module)

Architecture

Provider-agnostic KYC platform. Stripe Identity + Paystack BVN adapter pattern, HMAC webhook verification, Redis idempotent dedup.

Stripe IdentityPaystackRedisHMAC

Technical Skills

Monorepo & Build

Turborepopnpm workspacesVitetsupsemantic-releaseChangesets

CI/CD

GitHub ActionsLighthouse CIChromaticDockerdocker-compose

Cloud & Infra

VercelSupabaseRailwayAWS

Auth & Security

better-authOAuth2FA/TOTPCloudflare TurnstileRBACGDPR

Languages

TypeScriptNode.jsSQLSolidity

Frameworks

NestJSNext.jsReactReact Native

Databases

PostgreSQLRedisMongoDBFirebase

Testing

PlaywrightVitestStorybookChromatic

Blockchain

ArbitrumSolanaNEAR Protocolethers.js

Arbitrum Developer Certified

Verified profile: hackquest.io/user/437978

Get in Touch