MUHAMMAD
CHAERUL
HAFIZ.
Building scalable, secure, and production-ready web systems. 4+ years in full-stack development & DevSecOps culture.
Building reliable
software that scales.
Detail-oriented Software Engineer with hands-on experience in both backend and frontend development, operating within a DevSecOps culture. Proficient in Linux environments and experienced in containerization using Docker.
Skilled in building scalable systems utilizing technologies such as Kafka, Redis, and other security tools — with a strong understanding of system architecture, performance optimization, and secure development practices.
Full Stack
React, Next.js, NestJS — pixel-perfect UIs to robust APIs.
DevSecOps
Security-first: DAST, SAST, SCA baked into every pipeline.
Linux & Docker
Proficient in Linux environments and containerized systems.
Distributed Systems
Kafka, Redis, and microservices at production scale.
Oli3
Software Engineer · Sep 2023 - Present
- ->Led frontend development for Oli3, an internal operations system delivered within 3 months, covering a wide range of workflows across approvals, company and contact management, sales pipeline, rebate, targets, claims, leave, employee data, timesheets, project issues, job requests, training, KPI, performance assessment, reporting, and administrative tools, while delivering a smoother, more polished, and more modern UI compared with the previous application.
I3gis
VisitSoftware Engineer · Sep 2021 - Present
- ->Led frontend development for 5 core I3gis DevSecOps modules: Application Security, DAST Security, Mobile Security, Infra Security, and Container Security, plus reporting features and RBAC-based authentication flows, each with different workflows, dashboards, and feature sets.
- ->Improved account security by building the frontend flow for 2FA setup and verification, enabling i3gis users to integrate their accounts with authenticator apps for stronger access protection.
- ->Developed a license and certificate management dashboard that simplified certificate issuance for i3gis subscribers, helping admins work faster, reduce manual effort, and manage subscriptions more efficiently.
- ->Built a scheduled Playwright automation pipeline with PM2 that runs every morning at 7 AM across multi-environment security flows and sends detailed Discord alerts, helping developers, QA, and related teams detect failures earlier, prioritize fixes faster, and reduce manual regression effort.
- ->Built Kafka-based data pipelines with JavaScript agents that discover scattered DevSecOps JSON files, publish them through producer-consumer flows, and centralize the data into ClickHouse for structured processing, aggregation, and analysis.
- ->Built a version monitoring system that collects service version data from Docker process information, schedules PM2 cron jobs to send the results into Google Sheets, and triggers Google Apps Script notifications to Discord, helping i3gis DevOps teams track new versions across many services more efficiently.
- ->Currently researching and implementing the migration of i3gis DevSecOps services from Docker Compose to K3s across modules, with the goal of improving orchestration, scalability, and deployment consistency.
- ->Re-architected security report generation from a frontend-heavy HTML-to-PDF flow into a NestJS backend service using Puppeteer and PDF merging, reducing generation time by around 60-80% from 5-8 minutes to 1-2 minutes depending on data size while eliminating UI lag and website crashes during report export.
- ->Designed and developed a NestJS-based AI service that generates DevSecOps result summaries and AI-powered report suggestions by connecting i3gis data with LLM providers such as Claude, ChatGPT, and DeepSeek.
- ->Built the frontend for an AI chat feature integrated with the AI service, consuming responses over WebSocket with support for real-time messaging, new chat creation, and room-based conversations.
- ->Developed a NestJS-based ticketing service that enabled i3gis DevSecOps to integrate with ServiceNow and Jira, allowing security issues from i3gis to be sent into external ticketing systems for better tracking, assignment, and follow-up.
Fusion
Mobile & Full Stack Developer - Research & Development · Apr 2021 - Oct 2021
- ->Designed an intuitive and engaging UI/UX for the Fusion Training mobile app, helping improve user experience and accessibility.
- ->Developed the mobile application using Dart and Flutter with responsive layouts, smooth navigation, and seamless interaction with training materials.
- ->Defined the application flow and business logic to support efficient integration with the Laravel backend as part of a cohesive end-to-end system.
- ->Built an administrator dashboard using PHP Laravel, enabling easier content management, material updates, and user tracking.
- ->Conducted testing and debugging across multiple devices to improve functionality, performance, and reliability in different usage scenarios.
Other Projects
- ->Collaborated with the infrastructure team to integrate Ansible into internal workflows for monitoring, reporting, and deployment processes, completing the implementation in 2 days against a 1-week expectation while improving operational visibility and deployment management.
I3gis DevSecOps Platform
ViewEnd-to-end DevSecOps platform with 5 core security modules (App, DAST, Mobile, Infra, Container Security), RBAC auth, AI-powered summaries, and automated reporting.
- — Led frontend for 5 security modules with distinct dashboards & workflows
- — Report generation re-architected to NestJS + Puppeteer — 60–80% faster
- — AI chat & summary service connecting to Claude, ChatGPT & DeepSeek via WebSocket
- — Playwright automation running daily at 7AM with Discord alerts
- — Kafka pipeline centralising DevSecOps JSON into ClickHouse
- — Migrating services from Docker Compose to K3s
- — ServiceNow & Jira ticketing integration for security issues
Oli3 Internal Operations System
ViewComprehensive internal system delivered in 3 months — covering approvals, sales pipeline, rebate, targets, claims, leave, timesheets, KPI, performance assessment, training, and more.
- — Full system delivered from scratch in 3 months
- — Modern polished UI — major upgrade over the previous app
- — Sales pipeline, rebate & targets management
- — Timesheet, KPI & performance assessment modules
- — Leave, claims & HR automation
Fusion Training App
ViewMobile training application built with Flutter, backed by a Laravel admin dashboard for content management, user tracking, and material updates.
- — Designed full UI/UX for the mobile training app
- — Built with Dart & Flutter — responsive & smooth navigation
- — Laravel admin dashboard for content & user management
- — Defined app flow & business logic integrated with backend
Reporting Ansible Infrastructure
ViewBuilt the frontend layer to consume and visualise data from Ansible pre-hardening and hardening processes, automating the interaction between Ansible workflows and the web application.
- — Built Next.js frontend to consume Ansible pre-harden & hardening data
- — Automated interaction between Ansible workflows and the web app
- — Visualised infrastructure hardening results in a structured dashboard
- — Completed full implementation in 2 days vs 1-week expectation
ERP System & Mobile App
Developed and enhanced ERP systems to improve business operations and data management, alongside Flutter mobile apps and Google Cloud infrastructure management.
- — Developed and enhanced ERP systems — streamlined workflows & improved data reliability
- — Built and maintained Flutter-based mobile apps for smoother business processes
- — Managed and monitored Google Cloud infrastructure for performance, reliability & security
- — Troubleshot and resolved Adempiere ERP issues to reduce operational disruptions
- — Designed custom JasperReports for clearer operational insights & decision-making
COVID Remote Lab Migration
ViewMigrated mini computer devices integrated with the lab server from an offline-only setup to a fully online access model during COVID-19, enabling all students to join practical sessions remotely.
- — Migrated 6000-client lab infrastructure from offline to online during COVID
- — Deployed Apache Guacamole 0.9.8 as Remote Desktop Gateway for remote access
- — Configured NGINX, MariaDB Galera Cluster & Moodle for 6000 concurrent clients
- — Set up Prometheus, Node Exporter & Grafana for real-time monitoring
- — Managed HPE DL120/DL360/DL380 Gen10 servers with RAID 5
- — Enabled students to access lab resources remotely without physical presence
Frontend
Backend
Database & Cache
Infrastructure
Security & QA
Mobile Development
Integrations
Gunadarma University
Information Technology
2016 — 2020
Actively involved in LEPKOM as Laboratory Assistant and Computer Technician. Led COVID-era transition from offline to online learning, enabling remote lab access for all students.
- — Laboratory Assistant & Computer Technician
- — Managed multiple servers and IT infrastructure
- — Led online learning transition during COVID-19
SMK 3 Perguruan Cikini
TKJ — Computer & Network Engineering
2013 — 2015
Outstanding academic performance with top placements and a Certificate of Honor.
- — 2nd Place — Outstanding Academic Student 2014/2015
- — 3rd Place — Final School Examination 2015/2016
- — Certificate of Honor recipient

— Recognition
Best Consultant
Awarded by
PT. Inovasi Informatika Indonesia
Kubernetes For Beginners
KodeKloud
2026
Learn Prompt Engineering
Codecademy
2025
Navigating AI Ethical Challenges and Risk
Codecademy
2025
Introduction to Cybersecurity
Cisco Networking Academy
2026
SQL Intermediate
HackerRank
2025
Frontend Developer (React)
HackerRank
2024
Javascript Intermediate
Sololearn
2024
DevSecOps Foundation
DevOps Institute
2023
Let's work
together.
I'm open to new opportunities. Whether you have a project, want to collaborate, or just want to talk tech — reach out.