Huzaifa Awan

MuhammadHuzaifa Awan

Software Engineer

Scalable web apps, AI-powered SaaS products, and enterprise systems.

Your AI. Your questions.

Less scrolling. More answers.

Ask about my work, or find out if I can help with yours. Take my profile into the AI you already use.

What are you looking for?

Includes my website link and profile, so your AI has context even without browsing.

2. Open your AI and paste

Prefer another AI? Paste the same prompt there. The conversation stays in the app you choose.

Preview or manually copy the prompt
Full Stack Developer
Applications & APIs
DevOps Engineer
Cloud & delivery
Database Developer
Data & performance
Cybersecurity Tester
Web & API security
Quick introduction

The person behind the work.

A short introduction to who I am, how I think, and the kind of products I love to build.

About

Software engineer who owns problems end to end.

I'm a software engineer and micro1 Certified Full Stack Developer with several years of hands-on software development. I help businesses, teams, organizations, and individuals bring ideas to life, improve existing applications, and solve technical challenges.

I own complex problems end-to-end, from database design and API architecture to frontend performance and production monitoring. I've built systems serving 100+ concurrent users at sub-50ms response times with 95% Redis cache hit rates, integrated Claude and OpenAI with structured outputs, and rolled out multilingual experiences at scale.

My work spans full stack development, cloud deployment and DevOps, database design and performance optimization, and AI agents and MCP servers. I carry projects from requirements and system design through deployment, troubleshooting, and support, with clear communication and care for the people using the software.

My cybersecurity work focuses on web application and API security testing, vulnerability assessments, and responsible disclosure. I assess authentication, authorization, JWT security, and Supabase row-level security, alongside OWASP Top 10 risks.

Cybersecurity & penetration testing
  • Web application security testing, API security testing, and vulnerability assessment.
  • Authentication and authorization testing, broken access control, and JWT security.
  • Testing for SQL injection, cross-site scripting (XSS), and server-side request forgery (SSRF).
  • Supabase row-level security auditing and security misconfiguration assessment.
  • Responsible disclosure of security findings.

Full Stack Developer

Applications & APIs

DevOps Engineer

Cloud & delivery

Database Developer

Data & performance

Cybersecurity Tester

Web & API security

What I can build for you

  • Websites and web applications
  • SaaS products and platforms
  • AI agents and MCP servers
  • Business automations and workflows
  • REST APIs and microservices
  • Custom software solutions
  • Real-time applications
  • AI-powered tools and integrations
Services

What I can help you solve.

Start with the problem you recognize. I’ll translate it into the right technical solution and explain everything in plain English.

Tap a service to see what's included.

Web & API Security Testing

Are access controls and authentication working as intended?

I assess web applications and APIs for OWASP Top 10 risks, authentication and authorization weaknesses, JWT issues, Supabase RLS misconfiguration, and injection risks, with responsible disclosure of findings.

What you get

  • Web and API security testing
  • Authentication, authorization, and JWT
  • SQL injection, XSS, and SSRF
  • Vulnerability assessment and responsible disclosure

Full Stack & SaaS Development

Need a website, application, or SaaS product built end to end?

I build websites, web applications, SaaS platforms, and custom software with React, Next.js, Angular, TypeScript, and ASP.NET Core, carrying the work from requirements through deployment and support.

What you get

  • Responsive web interfaces
  • SaaS products and platforms
  • Real-time applications
  • Custom software solutions

Backend & API Development

Need reliable APIs and services behind your application?

I build REST APIs, microservices, backend systems, and third-party integrations using C#, ASP.NET Core, Entity Framework Core, Python, FastAPI, and Node.js.

What you get

  • REST APIs and microservices
  • Third-party system integrations
  • Backend architecture
  • Troubleshooting and production support

Cloud Deployment & DevOps

Need a dependable path from development to production?

I support cloud deployment and delivery with Azure, Azure DevOps, Docker, CI/CD, GitHub Actions, Fly.io, and Vercel, including production troubleshooting and synchronization workflows.

What you get

  • Cloud deployment
  • Docker and CI/CD workflows
  • Azure DevOps and GitHub Actions
  • Production troubleshooting

Database Design & Optimization

Is your database slowing down the application?

I design databases and improve query performance using SQL Server, PostgreSQL, MySQL, MongoDB, Redis, and SQLite, with indexing and caching shaped around the application's needs.

What you get

  • Database design
  • Query optimization and indexing
  • Redis caching
  • Data and backend performance

Free Website & SEO Audit

Not sure what is costing your website traffic or customers?

I will review your website's speed, mobile experience, usability, and basic SEO, then send you a short, practical list of what to fix first. No technical report you have to decode and no obligation to hire me afterward.

What you get

  • Speed and mobile review
  • SEO and visibility checks
  • Conversion and usability issues
  • Prioritized fix list

Website Fixes & Improvements

Is your website slow, broken, outdated, or hard to use?

I fix the parts that are losing visitors or wasting your team's time—from broken pages and mobile layout problems to slow loading, confusing forms, and aging systems. You can improve what you already have without starting over.

What you get

  • Bug and layout fixes
  • Faster page loads
  • Mobile improvements
  • Modernization without downtime

CRM & Client Portals

Still managing customers in spreadsheets and scattered messages?

I build one secure place for your team to manage leads, customers, documents, tasks, and follow-ups—and a simple portal where clients can log in, see progress, and get what they need.

What you get

  • Leads and customer records
  • Team dashboards
  • Secure client logins
  • Reports and reminders

Booking & Payment Systems

Need customers to book and pay without calling you?

I create smooth booking, checkout, subscription, and onboarding flows that work on any device. Customers get a clear experience while your team gets confirmations, schedules, and payment records automatically.

What you get

  • Online appointments
  • Stripe payments
  • Subscriptions and invoices
  • Confirmations and reminders

AI & MCP Integrations

Want AI to work with your real business tools—not just chat?

I connect Claude and other AI assistants to the systems you already use, so they can safely read emails, manage calendars, create tasks, search business data, and carry out approved actions.

What you get

  • Custom MCP servers
  • Claude and Microsoft 365
  • APIs and databases
  • Secure access and approvals

Business Automation

Repeating the same admin work every day or every week?

I connect the tools your business already uses so information moves by itself. New bookings can update calendars, enquiries can enter your CRM, and weekly numbers can arrive as a ready-to-read report.

What you get

  • Connect your existing tools
  • Automatic follow-ups
  • Reports without spreadsheets
  • Fewer manual mistakes

Technical Consultation

Have an idea or software problem but need a clear plan first?

Book a focused conversation about software architecture, system design, or a technical problem. I help clarify requirements, plan an implementation, and troubleshoot existing applications and integrations.

What you get

  • Idea and scope review
  • Architecture guidance
  • Cost and risk trade-offs
  • Clear next-step plan
Selected Work

Software built for practical problems.

SaaS platforms, AI integrations, security tools, and payment systems, spanning professional contributions and independent personal projects.

Project category

MCP Projects

Production MCP servers that connect AI assistants to email, calendars, tasks, health data, and business systems.

Watch my MCP experience walkthrough

Project category

LEO Projects

Core products delivered across the LEO salon platform, from onboarding and analytics to storefronts and self-service check-in.

Project category

Other Projects

Security tools, AI analytics, real estate, networking, and payment platforms built for real operational use.

Website redesigns

A fresh perspective on the web.

Two frontend redesigns. Explore the original, then see how I reworked the interface.

awernica-murex.vercel.appRedesign
Awernica redesigned website: homepage preview

Homepage preview. Open either site to explore the full interface.

01Security technology / Frontend redesign

Awernica

A technical catalog with a stronger visual identity.

My frontend redesign of Awernica's security-product catalog pairs a clear search and comparison journey with a camera-focused visual narrative. The interface brings product detail, specifications, and security information into a more deliberate hierarchy.

  • Reworked the landing page around product discovery and camera comparison.
  • Built the camera disassembly sequence and specification-focused presentation shown in the redesign.
  • Refined navigation, typography, spacing, and responsive layouts.
Frontend developmentInteraction designResponsive UI
snus-ten.vercel.appRedesign
Snus O'Clock redesigned website: public entry-screen preview

Public entry-screen preview. Open either site to explore the full interface.

02Storefront / Frontend redesign

Snus O'Clock

A storefront rethought around visual hierarchy.

My frontend redesign of Snus O'Clock explores a different storefront direction, with a stronger brand presentation and a more considered balance between navigation, product imagery, and browsing. This showcase focuses on the design and interface work.

  • Reworked the storefront's visual direction and page composition.
  • Refined the hierarchy between navigation, categories, and product content.
  • Built responsive frontend layouts for desktop and smaller screens.
Frontend developmentVisual designResponsive UI
Tech Stack

The tools I ship with.

Depth across the full stack: backend architecture, modern frontend, data, cloud, and AI.

ASP.NET CoreC#ReactNext.jsAngularTypeScriptSQL ServerPostgreSQLMySQLAzureDockerRedisWebSocketsMCPOpenAIClaude APIREST APIsMicrosoft GraphASP.NET CoreC#ReactNext.jsAngularTypeScriptSQL ServerPostgreSQLMySQLAzureDockerRedisWebSocketsMCPOpenAIClaude APIREST APIsMicrosoft Graph
ASP.NET CoreC#ReactNext.jsAngularTypeScriptSQL ServerPostgreSQLMySQLAzureDockerRedisWebSocketsMCPOpenAIClaude APIREST APIsMicrosoft GraphASP.NET CoreC#ReactNext.jsAngularTypeScriptSQL ServerPostgreSQLMySQLAzureDockerRedisWebSocketsMCPOpenAIClaude APIREST APIsMicrosoft Graph

Backend & Architecture

  • C#
  • .NET 5-8
  • ASP.NET Core
  • Entity Framework Core
  • REST APIs
  • Microservices
  • API Gateways
  • Consul
  • WebSockets
  • Python
  • FastAPI
  • Node.js
  • WPF

Frontend

  • React
  • Next.js
  • Angular
  • TypeScript
  • JavaScript
  • Tailwind CSS
  • Responsive UI
  • Internationalization

Data & Performance

  • SQL Server
  • PostgreSQL
  • MySQL
  • MongoDB
  • Redis
  • SQLite
  • Query Optimization
  • Indexing
  • Caching

Cloud & DevOps

  • Azure
  • Azure DevOps
  • Docker
  • CI/CD
  • GitHub Actions
  • Fly.io
  • Vercel
  • Production Troubleshooting

AI & Integrations

  • MCP
  • OpenAI API
  • Claude API
  • Structured Outputs
  • Microsoft Graph
  • OAuth 2.0
  • JWT
  • Stripe
  • Webhooks

Cybersecurity & Penetration Testing

  • OWASP Top 10
  • Web Application Security Testing
  • API Security Testing
  • Vulnerability Assessment
  • Authentication & Authorization Testing
  • SQL Injection
  • XSS
  • SSRF
  • Broken Access Control
  • JWT Security
  • Supabase RLS Auditing
  • Security Misconfiguration
  • Responsible Disclosure
Experience

Software engineering for US product teams.

Lead Software Engineer

Technofies·Contract

Oct 2023 - Oct 2026 New York, United States (Remote)
  • Developed and maintained enterprise applications using C#, .NET, ASP.NET Core, SQL Server, and REST APIs.
  • Delivered application enhancements and resolved defects in response to evolving business requirements.
  • Reduced technical and performance debt through code refactoring, backend improvements, SQL query optimization, and database tuning.
  • Built and maintained APIs, investigated production issues, and improved application reliability and maintainability.
C#.NETASP.NET CoreSQL ServerREST APIs

Senior Full Stack Developer

LEO Innovate·Multi-tenant Salon SaaS Platform

Feb 2025 - Aug 2026 United States (Remote)
  • Built multi-tenant SaaS features with ASP.NET Core, React, SQL Server, Redis, Stripe, and WebSockets, including live-preview editing, analytics, queues, and OTP kiosks.
  • Optimized SQL queries and Redis caching to achieve a 95% cache hit rate and sub-50 ms API responses under 100+ concurrent users.
  • Refactored 5,000+ lines of C# code, with reported reductions of 30% in technical debt and 40% in production incidents.
  • Delivered English/Spanish localization and collaborated with US stakeholders on delivery and production support.
ASP.NET CoreReactSQL ServerRedisStripeWebSockets

Full Stack Developer

FABCO / Divisional Public School·School Management Systems

May 2023 - Sep 2024 Lahore
  • Modernized school-management workflows using .NET, JavaScript, MySQL, and REST APIs across admissions, academics, payroll, and inventory.
  • Improved page-load times from approximately 3 seconds to under 500 ms through database restructuring and indexing; resolved 50+ legacy defects.
.NETJavaScriptMySQLREST APIs
Credentials

Education & certifications.

Verified academic honors and certifications. Click any card to view the full document.

Testimonials

What clients say about working with me.

Verified 5-star reviews from real Upwork clients.

“Awan jumped in fast, understood the issue without needing any handholding, and had it fixed within a day. Clean code, no cutting corners. Will definitely hire again for our next sprint.”

ReliableSolution OrientedClear CommunicatorAccountable for OutcomesDetail Oriented
Verified Upwork ClientBug fix & sprint work Upwork

The CEO at LEO Innovate offered to write a personal letter of recommendation after the salon SaaS platform work. Reference available on request.

Portfolio reactions

Kind words from people who explored my work.

A few notes shared after developers and professionals visited this portfolio.

0110
LinkedIn impact

Posts that reached beyond my network.

Two analytics snapshots showing how technical content translated into reach, engagement, profile discovery and real portfolio visits.

LinkedIn post showing security analytics for 854 denied requests to the portfolioTop post 01

My personal portfolio site huzaifaawan.com got hit with 854 denied requests in under 24 hours.

Impressions
60,000+
Reached
38,011
Link visits
780
LinkedIn post showing a redesigned GitHub profile as a developer portfolioTop post 02

Your GitHub profile is the first thing many recruiters check. Make it memorable. 🚀

Impressions
35,000+
Reached
22,447
Followers
36
GitHub

Always building.

Consistent, everyday commits. Most client work is private and under NDA, but here's a look at the public side.

@M-Huzaifa-Awan

Contribution activity

Follow
LessMore

0

Total repositories

Mostly private

Visibility

C# · TS

Primary stack

Most client work lives in private repos under NDA, so only a slice is public.

FAQ

Questions, answered.

The short version of who I am, what I build, and how to work with me.

My cybersecurity work focuses on web application and API security testing, vulnerability assessments, and responsible disclosure. I assess authentication, authorization, JWT security, and Supabase row-level security, alongside OWASP Top 10 risks. His expertise covers SQL injection, XSS, SSRF, broken access control, security misconfiguration, and responsible disclosure.

Contact

Let's build something worth shipping.

Have a product in mind, a system to modernize, or AI to integrate? Reach me by email or LinkedIn, I reply within a day.

Email

huzaifa@huzaifaawan.com

Location

Remote · Working across US timezones

Prefer LinkedIn? Message me there →

Leave your thoughts

Fully anonymous. No name or email, ever.

We only see your approximate country. Never your name, email, or exact location.