Feb 2026 - Aug 2026
Software Engineer - Stealth Startup - Multi-Tenant Hotel Operations SaaS
- Building a multi-tenant SaaS platform (Next.js 16, TypeScript, PostgreSQL, Drizzle ORM) with 22 REST API endpoints, 7 database tables, and tenant isolation via hotelId scoping on every query
- Designed a secure guest check-in flow with hashed ID verification (SHA-256 + salt), Zod schema validation, input sanitization, and rate limiting to prevent brute-force and XSS attacks
- Built an admin panel with JWT + email 2FA, 3-tier RBAC (Owner/Manager/Receptionist), CSRF protection, and DB-backed rate limiting across all state-changing endpoints
- Deployed to production on Azure Container Apps + Azure PostgreSQL + Container Registry with Docker; added 7 security headers (CSP, HSTS, X-Frame-Options) and fail-fast env validation
- Leading 3 developers in a 5-person team; authored 23 docs including 5 architecture decision records, operational runbooks, a debugging playbook, and 20 system invariant rules