Faruoq Muhammed

Software engineer · Cybersecurity · Nairobi

I build software with security in mind — full-stack apps, clean architecture, and defensive engineering.

I'm Faruoq Muhammed — a software engineer working across React/Next.js, Java/Spring Boot, and Python, while completing my CompTIA Security+ certification at Gomycode. I care about code that ships well and systems that resist the mistakes attackers look for.

That means validation at every layer, sensible access control, audit trails where they matter, and thinking about risk before features go live — not as an afterthought, but as part of how the software is built.

See projects Get in touch

Skills & focus areas

What I work with day-to-day, and where I go deepest.

Frontend

  • React
  • Next.js
  • TypeScript
  • HTML & CSS

Responsive UIs, state management (Zustand), real-time updates with Socket.io.

Backend

  • Node.js
  • Java
  • Spring Boot
  • Python
  • FastAPI
  • PHP

REST APIs, auth flows, MySQL/SQLite, serverless and traditional deployments.

Mobile

  • React Native
  • Expo
  • SQLite
  • Drizzle ORM

Offline-first apps, local persistence, biometric lock, on-device privacy.

Payments & infra

  • M-Pesa
  • Daraja API
  • Netlify
  • Git / CI

Safaricom Daraja checkout, Safaricom web hosting, SMTP notifications, Docker.

Security

  • CompTIA Security+
  • Access control
  • Validation
  • Audit logs

Defensive coding, secret scanning, SHA-256 hashing, risk-aware design.

Work experience

Contract and in-house roles so far.

Full-stack contract developer

Brand-X E-commerce

End-to-end e-commerce build — product catalogue, checkout, M-Pesa payments, and back-office restock alerts.

  • Integrated Safaricom Daraja API for M-Pesa transaction flows at checkout.
  • Designed the relational MySQL schema and server-side order logic in PHP.
  • Built automated restock email notifications via Nodemailer SMTP.

PHP · JavaScript · MySQL · Daraja API · Nodemailer

Web developer & maintainer

Emesa

Owned the company website — development, maintenance, and production deployment.

  • Shipped responsive layouts with cross-browser compatibility and performance tuning.
  • Deployed the production site to Safaricom's web hosting service.
  • Handled ongoing content updates and bug fixes post-launch.

HTML · CSS · JavaScript · Safaricom Web Service

Projects

Six builds across web, mobile, data, and developer tooling. Live demos where noted.

Full-stack · live

SafariShare

Carpooling platform with secure auth, ride scheduling, and real-time booking notifications.

  • React/TypeScript frontend with Zustand and Socket.io live updates.
  • Node.js backend with session management and booking workflows.
  • React
  • TypeScript
  • Node.js
  • Socket.io
Live demo Frontend API
Fintech · live

InsureRide

Micro-insurance for boda boda riders — daily premiums, automated suspensions, hospital claims.

  • Daily KES 20 premium collection with midnight auto-suspension for non-payment.
  • Hospital claim verification workflow for injury coverage.
  • Node.js
  • M-Pesa
  • JavaScript
  • Netlify
Live demo Code
Mobile

TRACE

Privacy-first wellness app — mood tracking, journaling, nine exercises. All data stays on-device.

  • SQLite + Drizzle ORM with trend visualisation and export/import backup.
  • Biometric lock, 4-digit PIN, auto-lock after inactivity.
  • React Native
  • Expo
  • SQLite
  • TypeScript
Code
Mobile · offline-first

StudyHub Offline

KCSE study app — quizzes, notes, and progress tracking with zero internet required.

  • Subject quizzes across Math, English, Physics, and ML with local persistence.
  • Study timer, bookmarks, and per-subject performance analytics.
  • React Native
  • Expo
  • Zustand
  • TypeScript
Code
Data / policy

EquityGrid Kenya

Decision-support engine scoring household consumption to target electricity subsidies fairly.

  • Six-variable weighted model with GREEN/YELLOW/RED tariff band classification.
  • React dashboard with deck.gl map visualiser; SHA-256 hashed IDs and audit trail.
  • FastAPI
  • React
  • Python
  • deck.gl
Code
Developer tooling

Checkride

MCP sidecar — tests, lint, type checks, and secret scans before AI agents commit.

  • 10 MCP tools for staged checks and full pre-flight pipelines.
  • Published as npx checkride-mcp with Docker sandboxing.
  • TypeScript
  • MCP
  • Node.js
  • Git hooks
Code

Education

Formal training and ongoing certification.

Diploma in Computer Science

Completed

Zetech University

Foundation in software development, databases, networking, and systems design.

Certificate in Cybersecurity

In progress

Gomycode · CompTIA Security+ track

Security operations, access control, risk assessment, and defensive engineering practices.