10/14/2026 updated
JH
100 % available
Full-Stack / AI Engineer
Prague, Czech Republic
Prague +500 km
Master's degree (Mgr.), Geopolitical Studies, Charles University, PragueArtificial IntelligenceLAMP StackCloud EngineeringApache CloudStackDevOpsPython (Programming Language)Messaging Application Programming InterfaceNeo4jOpenStackSQLAlchemySystems IntegrationGenerative AIMean StackFull Stack DevelopmentCloudflare
AI and LLM Application Engineering
RAG (hybrid BM25 + dense retrieval, rank fusion), LLM reranking, query rewriting, intent routing, deterministic exact-citation paths, hallucination control, JSON-schema outputs, prompts versioned as source code, agentic pipelines with multi-step orchestration.
Full-Stack Web Development
React 18/19, TypeScript, Next.js 14, Vite, Tailwind, Astro 5; Python (FastAPI, async, Pydantic v2, Uvicorn) and Node.js (NestJS, pnpm + turbo monorepo); REST/OpenAPI design, generated API clients with codegen-drift gates.
Cloud DevOps and Platform Engineering
GitHub Actions CI/CD, Docker, Azure (Container Apps, Static Web Apps, Functions, Entra, Key Vault, UAE North), Bicep, Terraform, Kubernetes (Ingress, cert-manager, CloudNativePG, sealed secrets, Prometheus), HPC GPU batch (PBS, Apptainer), Fly.io, Vercel, Cloudflare.
MCP (Model Context Protocol) Server Development
Five MCP servers on the Python MCP SDK 2.x: typed output schemas, stdio and Streamable HTTP, OAuth 2.1 resource servers (JWT/JWKS, RFC 9728 metadata), per-tool scopes, human-confirmed destructive actions, durable jobs with progress notifications, PII redaction, MCP-client benchmark.
Evaluation and Measurement of AI Systems
Expert-verified golden sets, PII red-team sets, recall@k with per-stratum floors, Krippendorff's alpha and Cohen's kappa with bootstrap CIs, LLM-judge vs blind human verdicts, A/B harnesses reporting losses and gains, CI regression gates, LLM cost estimation and token metering.
Security, Authentication and Authorization
OWASP Top 10, Microsoft Entra External ID with MFA, JWT, argon2id/bcrypt, signed session cookies, login throttling, capability-gate authorization, PostgreSQL row-level security multi-tenancy, append-only audit logs, fail-closed egress, HSM-signed verdicts.
Data Layer and Database Engineering
PostgreSQL (raw SQL, SQLAlchemy 2, Alembic, RLS, PostGIS, pgvector), SQLite, Neo4j, Azure Blob/Queue, Cosmos DB, S3-compatible stores, lifecycle state machines, gapless numbering, integer-money handling.
Testing and Quality Assurance
pytest (500+ tests on one platform), Vitest + Testing Library, Playwright E2E and accessibility specs, DB-gated integration tiers, build-time compliance gates (residency, money, codegen drift), parity harnesses against a reference.
AI-Assisted Development
Claude Code (Fable 5.1, Opus) and OpenAI Codex (GPT-6 Astra, Sol) used together, each model checking the other's work; steered by committed project instructions; every change reviewed for edge cases, security and performance, and owned.
Models and AI Platforms
Azure OpenAI / AI Foundry (GPT-5.x, text-embedding-3-large), Google Gemini, OpenAI SDK, OpenAI-compatible APIs (DeepSeek), open-weight models on vLLM (fp8, KV-cache sizing), Azure AI Search, pgvector, Qdrant, Azure Document Intelligence, Azure AI Language (PII).
Experience
Professional experience0 - 5 years
Freelancer since2024
Languages
ArabicNative speakerEnglishFluent
Project history
Product architect and engineer on Arabic-first SaaS products under Kuwaiti and GCC regulatory constraints. Built Ihkam, a legal practice management SaaS for Kuwaiti law firms (live in production, sold to 23 law offices in the first month), and Ithbat, an XBRL regulatory-filing platform for Kuwait. Developed Arabic-first RTL platforms with built-in AI grounded in ingested Kuwaiti legal corpus, RAG with exact-citation paths, and multi-tenant architectures on Azure UAE North.
Sole engineer with full ownership of design, development, deployment, and operations for the Geopolitical Studies programme and Institute of Political Studies. Built GPS Mailer (mass-email and event-invitation platform on Kubernetes), the official Geopolitical Studies programme website, web front ends for research data platforms (SIEM conflict-event platform, GeoADAPTEX explorer), and the Sahel Disinformation Observatory LLM labelling and validation programme.
Sole engineer; systems adopted by the front desk and in daily production use. Built a GDPR guest-registration web application (live in production on Fly.io) digitizing the statutory foreigner-registration process in 7 languages, and a multilingual Next.js guest portal and staff notifier product deployed for Czech Inn and Miss Sophie's Downtown.