Hazem Azzam.
OPEN TO NEW WORK · BADR CITY, CAIRO · UTC+2

HAZEM AZZAM — FULL-STACK DEVELOPERWeb apps built secure front to back, by default.

I design and ship production web applications end to end — Next.js and React interfaces, NestJS APIs, PostgreSQL data models, and the authentication, RBAC and deployment that hold them together.

View my workContact meDownload CV (.docx)
3+YEARS IN PRODUCTION
6PROJECTS SHIPPED
EN / ARBILINGUAL, RTL-READY UIS
DAILY STACKNext.js · React · TypeScript · NestJS · PostgreSQL · Docker
01 — SELECTED WORK

Full-stack projects I've shipped

ALL PROJECTS →

Menu QR

2026

A multi-branch restaurant platform (pre-launch): QR table ordering for guests, a staff app for cashiers and the kitchen, and a manager dashboard, all on one NestJS API.

Next.jsNestJSPostgreSQLDrizzle

Trust Dashboard Platform

2026

Operations dashboard for restaurant and retail teams — products, orders, customers and delivery agents, behind role-based access.

RBACTanStack Tablei18n
  1. 03

    The Super Bowl

  2. 04

    Pizza Roma

  3. 05

    SAAL Falcon

  4. 06

    Bedaya Convoy

02 — FRONT TO BACK

One developer, the whole stack

Frontend

Fast, SEO-friendly interfaces with server rendering, accessible components and Arabic RTL support.

Next.js · React · TypeScript · Tailwind CSS · shadcn/ui · React Query · React Hook Form · Zod · Zustand · next-intl

Backend

REST APIs with clear contracts, relational data models, authentication and role-based access control.

NestJS · Node.js · PostgreSQL · Prisma · Drizzle · REST API design · OpenAPI · Auth & RBAC · Paymob · S3

Delivery

Clean architecture, reviewed pull requests and automated pipelines from commit to production.

Docker · GitHub Actions · CI/CD · Vercel · Turborepo · Clean Architecture · Code review

03 — SECURITY

I test what I build

Web application security isn't a separate phase for me. I bring penetration testing and vulnerability assessment into everyday development.

01

Authentication & RBAC

Session and token auth, least-privilege roles and server-side permission checks on every endpoint.

02

Penetration testing

Authorized assessments of web apps and APIs, with findings rated by severity and a clear path to fix each one.

03

Security-minded review

Code review that looks for injection, broken access control and data exposure before they ship.

How I approach security →
04 — WRITING

Notes on shipping software

ALL ARTICLES →
05 — ABOUT

The story behind the code

I'm Hazem Azzam, a full-stack developer based in Cairo, Egypt, with 3+ years of building and shipping production web applications — e-commerce storefronts, multi-tenant systems and internal business tools.

I own the whole lifecycle: architecture, APIs and data models, the interface on top, and the deployment and tuning that keep an app fast, secure and easy to find. I care most about clean, maintainable architecture and about getting authentication and access control right the first time.

More about me

Clean code

Maintainable, scalable, well-documented systems.

Performance

Optimizing for speed, accessibility, and UX.

Ownership

From database schema to deployed UI, one person accountable.

Collaboration

Working closely with designers, devs, and stakeholders.

06 — CONTACT

Let's build something
solid.

EMAILhazemmohamed9194@gmail.comWHATSAPP+20 114 222 1039
BASED INBadr City, Cairo, Egypt
GitHubLinkedIn