Software Engineer · AI Agent Systems · Full-Stack & Mobile

I build AI agent systems that run in production — and the apps, APIs and infrastructure around them.

Currently the principal contributor to a multi-tenant AI learning assistant at eduArabia — authorization, sandboxing and evaluation. Before that, 8+ years shipping web and mobile systems end to end for recruitment, field maintenance, ERP, e-commerce and e-learning.

See selected workGet in touch
Jeddah, Saudi Arabia
68%
of main-branch commits on the AI learning assistant (Jul–Oct 2026)
103
privileged tool modes secured by one authorization gate
8+
years building web & mobile software
40+
fuel stations run on one maintenance system I built
Built foreduArabiaA national endowments authority (KSA) · with UNDPSudan MineralsHAM Electro MechanicalGlobal Flow ServicesHilia Store
01 — Work

Selected work

Production systems I designed, built and shipped — AI agents first, then the platforms and apps around them.

Featured · 2026

AI Learning Assistant — multi-tenant, Arabic-first

eduArabia · 2026 · Principal contributor (~68% of main-branch commits, Jul–Oct 2026)

A multi-tenant AI learning assistant built on the Claude Agent SDK (Python 3.12, FastAPI, PostgreSQL 16) for eduArabia’s EdTech products. Arabic and English; student, teacher and admin roles. Product details are confidential until launch — the engineering is below.

  • Claude Agent SDK
  • FastAPI
  • PostgreSQL · pgvector
  • Row-level security
  • gVisor
  • LangGraph
  • Designed the authorization model: per-tenant row-level security, consent-based delegated identity against the host platform, and a course-scoped execution gate that closed a privilege-escalation gap across 103 privileged tool modes.
  • Built a network-isolated (gVisor) sandbox that lets the assistant analyse uploaded course content at ~$1.3 per package, with credentials held in a host-side broker.
  • Built the evaluation harnesses that gate merges — tool routing, answer grounding, adversarial prompt injection — and cut the CI critical path by 53%.
02In progress

REBIRTH — re-engineering legacy software with agents

Personal R&D

An agent-based runtime that distils a stack-agnostic product definition from an old codebase, then rebuilds it in verified slices.

  • First real run rebuilt the 2021 maintenance system to a fully green suite — 119 tests + static analysis — fixing 6 real defects.
  • TypeScript
  • Claude Agent SDK
  • MCP
  • Docker
032026

Endowments Excellence Index platform

A national endowments authority (KSA) · with UNDP · Principal engineer

Bilingual (Arabic RTL / English) self-assessment platform: Next.js front end, FastAPI API and a deterministic scoring engine with golden-master tests that reproduce the official sample report.

  • Waqf-type routing with weight redistribution; the printed report is the document of record.
  • Security and data-integrity review: forged-admin-token path, autosave races and a rounding defect in scoring — found and fixed.
  • Next.js
  • FastAPI
  • Golden-master tests
  • CI / staging
042025–2026 · In progress

Multi-tenant Moodle platform for the Saudi market

eduArabia · Main customization developer

Regulatory (NeLC) and commerce features on an Arabic-first Moodle 4.5 distribution, wired end to end and verified live.

  • xAPI reporting to the national learning-record store; OTP/MFA by email and Saudi SMS gateway.
  • Payment-gateway abstraction, Arabic certificates with QR verification, notifications, hardened Docker images.
  • Moodle 4.5
  • PHP
  • xAPI
  • Docker
052021–2022

Maintenance Management System — 40+ fuel stations

HAM Electro Mechanical Engineering Co. · Freelance

Laravel GraphQL backend, Vue admin and a Flutter technician app (BLoC, QR equipment scanning, FCM push, Arabic/English).

  • Breakdown tickets with timelines, priorities and trades; maintenance and HSE procedures; spare parts; teams and two-factor auth.
  • Supported and enhanced after delivery.
  • Flutter
  • Laravel · Lighthouse
  • Vue
  • GraphQL
062022–2023

Evaluation & Recruitment Platform

Sudan Minerals for Recruiting & Training Co. · Freelance

Laravel + Lighthouse GraphQL API, Vue.js HR dashboard and a Flutter applicant app, delivered from one GraphQL contract.

  • Laravel
  • GraphQL
  • Flutter
  • Vue
072019–2020

ERP & field tracking for petroleum-well operations

Global Flow Services (FZE) · Freelance

Odoo ERP customization (Python/PostgreSQL) exposed through a GraphQL API to a Flutter app that tracked technicians and malfunction reports.

  • Also in this period: Hilia Store (Oman) Flutter jewellery e-commerce app and point-of-sale systems for local retail in Sudan.
  • Odoo
  • Python
  • GraphQL
  • Flutter
02 — How I think

I obsess about boundaries.

Where a responsibility lives decides whether a system survives change. Five rules I keep coming back to:

  1. 01

    Architecture is decisions, not diagrams.

    A diagram without its trade-offs written down is decoration.

  2. 02

    Boring tech beats clever tech

    — until boring tech breaks under your specific load. Then you migrate, deliberately.

  3. 03

    Tenant isolation is not a database concern.

    It is a property of every layer.

  4. 04

    The fastest way to ship is to delete code.

    Every line is a liability someone will maintain.

  5. 05

    AI agents are systems, not magic.

    Treat them like a service that calls a third-party API: measure, isolate, verify.

03 — Experience

Eight years, three chapters.

Freelance delivery for clients in Sudan and Oman, then full-time product engineering at eduArabia — with a short stint teaching along the way.

  1. Mar 2023 — PresentAmman, Jordan · Remote

    eduArabia

    Software Engineer

    Two years of continuous full-stack delivery (Laravel APIs + React SPAs) on e-training and course-commerce platforms in large teams — surveys, question banks, certificates, checkout, AI video transcription — then principal work on the AI learning assistant, the Saudi Moodle platform and the Endowments Excellence Index.

  2. Feb 2018 — Mar 2023Sudan & Oman

    Freelance Software Developer

    Full-stack & mobile

    Recruitment, field-maintenance, ERP and e-commerce systems for companies in Sudan and Oman — mobile app, admin dashboard, API, database and deployment delivered as one piece, with support after launch.

  3. Jul — Oct 2020Khartoum

    Alofoug College of Science & Technology

    Web Development Instructor

    Practical HTML/CSS, JavaScript and PHP course for IT diploma students.

04 — Skills

What I work with

AI systems
Claude Agent SDK, LangGraph, LiteLLM, RAG & embeddings, evaluation harnesses, prompt-injection defence, MCP servers
Backend
Python (FastAPI, SQLAlchemy, Pydantic) · PHP (Laravel, Lighthouse GraphQL, Moodle plugins) · Node/TypeScript (NestJS) · Odoo
Frontend
React, Next.js, Vue 3, TypeScript, Tailwind — Arabic-first / RTL interfaces
Mobile
Flutter / Dart — BLoC, GraphQL, Firebase & FCM, local notifications, QR scanning, offline-tolerant sync
Data
PostgreSQL (row-level security, pgvector, full-text search) · MySQL/MariaDB · Redis · SQLite · Supabase
DevOps
Docker & Compose, GitHub Actions CI, Linux, Nginx / Traefik / Caddy, Ansible, Borg, Cloudflare, Tailscale
Standards & APIs
GraphQL, REST, OAuth2 / OIDC, LTI 1.3, SCORM / xAPI / cmi5
Practices
Test-driven development, architecture decision records, code review, performance measurement, security review
Education
B.Sc. (Honours) in Information Technology
Nile Valley University, Atbara, Sudan · 2017–2024. Graduation project: AI-based student behaviour analysis using facial-expression and pose recognition.
Personal infrastructure
Self-hosted, Ansible-provisioned
Linux server with Traefik reverse proxy, Borg 3-2-1 encrypted backups with weekly restore drills, and a read-only Telegram monitoring bot.
Certificates & languages
Azure Fundamentals (AZ-900) preparation · Cybersecurity course series — Edraak · Agile Methodology — Edraak (2024)
Arabic (native) · English (professional working proficiency)
05 — Contact

Let’s build something that ships.

Interested in AI-systems and software engineering work, collaborations, or just talking shop. The fastest way to reach me is email.

Email me
contact@engmahdi.com+966 54 060 0375engmahdi.comlinkedin.com/in/eng-mahdi-mohamedgithub.com/eng-mahdi-mohamed