Headline

Full-Stack Engineer | Building Scalable, Secure & Reliable Products

About

I build full-stack web products where the hard part is not the UI — it’s keeping identity, permissions, and money-adjacent flows correct under real traffic and messy edge cases. I work across the stack in JavaScript / TypeScript, with Next.js + React on the frontend and Node.js / Express on the backend, usually against PostgreSQL (often via Prisma) and cloud infrastructure on AWS. Day to day that means designing APIs and BFF layers, httpOnly session auth, KYC / age-verification flows, wallet and payout-adjacent systems, signed media uploads, background workers, and the kind of webhook / idempotency work that has to survive retries without double-applying side effects. I care a lot about trust boundaries: what the browser is allowed to claim, what the server must re-check, and how privileged admin actions stay separated from normal user paths. I also work on server-side product analytics (PostHog) — event catalogs, allowlisted properties, and instrumentation that never blocks the core transaction path. Operationally I’m comfortable with Docker, CI, and shipping into cloud environments. The habit I bring to every change is simple: understand the current implementation, find every call site, verify behavior (not just that tests went green), and leave the system easier for the next engineer to reason about.

Location

Bengaluru

AI stack

anthropic apis

cursor

grok

langgraph

hermesagent

Work experience

Junior developer at Stealth Startup, Jul 2026 - Present · 3 mo, London, United Kingdom, • Full-stack on a pre-launch creator platform: Next.js 16 / React 19 / TypeScript frontend, Node 24 / Express API, Prisma + PostgreSQL, Graphile Worker, Firebase Auth/Functions, AWS (S3, CloudFront, Rekognition), Terraform-managed deploy to ECS, Sentry, PostHog. • Designed and implemented a same-origin BFF: httpOnly sessions, cookie-bound identity, blocked sensitive path prefixes, no client-trusted bearer tokens. • Worked in money-integrity paths (fulfillment, wallet credits, refunds, chargebacks, payouts) with post-commit side effects, webhook idempotency, and rebase discipline on shared settlement modules — without owning or exposing processor integrations in public. • Built KYC / age-verification and creator-onboarding correctness: server-held verification state, return-path guards, and admin enforcement that does not confuse lock vs suspend vs “please finish KYC.” • Content and media: presigned uploads (Uppy → S3), signed playback URLs, MIME allowlists, and a fail-closed safety pipeline (Rekognition + additional scanners). • Server-side analytics: PostHog Node client, FinSuby-style event catalog, anonymous distinct_id, amount banding, allowlisted properties, fire-and-forget after DB commit; paused and reset the consent/identity layer when leadership asked for a sequenced baseline. • Auth/session hardening: JWT, refresh-token reuse detection, admin IP allowlists / TOTP, logout fail-closed, cross-account consent/session cleanup.

Back End Developer at Sttribe, Dec 2025 - Apr 2026 · 5 mos, Bengaluru, Developing scalable backend infrastructure for an OTT subscription sharing platform using Node.js, TypeScript, and Firebase. Building 50+ REST API endpoints, integrating payment processing (Razorpay), implementing WhatsApp notifications (Twilio), and designing efficient database schemas. Handling complex business logic for tribe management, cost-splitting algorithms, and automated subscription workflows. Also contributing to frontend development using React and TypeScript.

Freelance Developer at Cutting INC, Oct 2024 - Jan 2025 · 4 mos, • Built a full-featured barber shop discovery and booking app from scratch using React Native and TypeScript, with Google Maps-based geolocation search and live slot availability • Developed conflict-free appointment scheduling logic across shop, barber, time slot, and service selection • Integrated Stripe and Razorpay for advance booking payments with automated refund workflows • Designed Node.js/Express/MongoDB backend with JWT auth, refresh token rotation, and role-based access control for users, barbers, and shop admins

Education

Bachelor of Technology, Computational Science, PES University

Public links

github: https://github.com/ax-0m

prakhar-kumar.vercel.app: https://prakhar-kumar.vercel.app/