Bolt.SH
An OpenStack-powered IaaS data center I designed and built, with VM orchestration, virtual networking, and load balancing that let teams self-serve infra.
Watch the walkthrough series →Principal Backend Engineer · Bangalore, India
Faiz Ahmed Farooqui
I build compliance-heavy backend infrastructure for regulated industries: secure, multi-tenant systems for fintech, healthcare, and SaaS. Think PCI-DSS payments, HIPAA data platforms, and audit-ready architecture on AWS and OpenStack. I write about the engineering behind it.
Featured work
GeekyAnts/express-typescript Production-ready Express + TypeScript boilerplate. My most widely adopted open-source project, used across 20+ production apps. ★ 1,261 ⑂ 325 GitHub → faizahmedfarooqui/nodejs A low-level Node.js web, API, and CLI app built entirely on Node's core APIs, with zero npm packages. ★ 21 ⑂ 1 GitHub → Project · GeekyAnts
Latest articles
compliance-engineering
Nested JWTs in Node.js: Decrypting a Token Is Not Verifying It
--- I have been building a compliance-ready backend kit: a NestJS and TypeScript monorepo where every capability maps to a named control in HIPAA, PCI-DSS v4.0.1, or the SOC 2 Trust Services Criteria. This post is the first in a series pull…
ai-engineering
The Prompt Is Not the Product: A Realistic Mental Model for AI Agents
Recently I fed an AI agent a prompt that, stripped to its essence, said this: Build me an app people will pay for, and an AI agent…
ai-engineering
Securing LLM API Keys with AWS KMS
A prompt-injection researcher points your app's own debug endpoint at itself, triggers an unhandled exception, and your error hand…
ai-engineering
LLM Observability with OpenTelemetry
Your LLM feature works in the demo. Then it ships. A week later finance forwards a cloud bill with a line item that tripled, a cus…