Wali yar Khan

About Me

I like working where software meets infrastructure — building systems that are fast, reliable, and secure. Most of my work revolves around backend development, cloud automation, and securing applications from the ground up.

I’ve been diving into network security, cloud architecture, and application hardening — exploring how real-world attacks unfold and how to design systems that can withstand them. I enjoy understanding how things actually work under the hood and then using that knowledge to design cleaner, more efficient solutions.

I’m currently focusing on cloud security — building tools, testing environments, and learning how to make systems resilient against modern threats. I care about writing code that performs well, scales easily, and stays secure in production.

Skills

Java Python Go Springboot Django Flask MongoDB Neo4j PostgreSQL MySQL Git CI/CD Docker Terraform Zap Burpsuite Metasploit Pacu Splunk Nessus Maltego Selenium Wireshark

const developer = {
name: 'Wali Yar Khan',
role: 'Backend Engineer',
passion: 'Expanding skills and discovering new ways to innovate'
};

Projects

Raven

AWS Security Assessment Tool

View Project

Car Workshop Website

Full-stack web development with React and Django

View Project

Terra Town

Built a modular AWS infrastructure automation setup using Terraform and a custom Go provider for secure, end-to-end static website provisioning

View Project

My Handler

Built a desktop productivity app using a state-machine model for tasks, enabling reliable tracking, focus insights, and seamless calendar sync

View Project

Honeypot

Machine deployed on AWS EC2 instance acts as high interaction honeypot

View Project

AWS Meta Crawler

A fast, asynchronous Python tool that recursively crawls AWS EC2 instance metadata via SSRF using aiohttp

View Project

Resume

Experience

SalesApe.ai

Backend Software Engineer

Python, FastAPI, React, PostgreSQL, LLM, BeautifulSoap

Built an AI-powered onboarding system accepting website URLs, Instagram pages, and voice/text input to auto-generate business landing pages, reducing manual setup from hours to under 2 minutes.

Engineered a multi-source scraping pipeline (web + Instagram) that automatically extracts and normalizes business content, eliminating manual data entry for onboarding.

Designed a schema parsing layer that standardizes heterogeneous inputs (scraped HTML, voice transcripts, raw text) into a unified structure consumed by the LLM generation pipeline.

Integrated an LLM generation pipeline that reasons over extracted business data to produce structured template schemas, enabling fully automated landing page rendering across 5+ predefined layouts.

Implemented custom domain deployment flow allowing users to go live on their own domains directly from the platform, cutting deployment steps from manual DNS setup to a single action.

Arittek Solutions Pvt Limited (Befiler)

Backend Developer Intern

Java, Spring boot, Postman, MySQL

Developed and secured RESTful APIs using Spring Boot and JWT based authentication, enabling role-based access control and OTP verification.

Integrated third-party APIs with WebClient, reducing average response latency by ~30% through non-blocking I/O and connection pool tuning.

Optimized database query patterns using DTOs and projections, cutting over-fetching by ~60% and reducing API response time on high-traffic endpoints.

Implemented Spring AOP (Aspect-Oriented Programming) for cross-cutting concerns such as logging, exception handling, and performance metrics across microservices.

Configured Spring Scheduler and Async processing to handle background jobs and concurrent tasks.

Car Workshop (Detailing Hub)

Freelancer

Django, React, PostgreSQL, Docker, AWS

Delivered a full-stack workshop management platform on AWS (EC2 + RDS) with CloudWatch alerting, reducing unplanned downtime by ~70% through proactive monitoring and auto-recovery triggers.

Architected two decoupled APIs — a customer-facing service (appointments, status tracking) and an admin service (inventory, staff management) — with role-scoped access policies enforced at the API gateway level.

Secured auth using AWS Cognito with Lambda post-confirmation triggers, eliminating token exposure via HTTPOnly cookies and rotating refresh token strategy.

Configured end-to-end HTTPS via ACM, serving static assets through S3 + CloudFront + Route53 — achieving sub-200ms asset load times globally.

Automated CI/CD with GitHub Actions for automated deployment.

Optimized backend queries using serializers to fetch only required fields, reducing overhead and improving response time.