Skip to content
View biglill's full-sized avatar

Organizations

@Large-Developers

Block or report biglill

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
biglill/README.md

Hussain Iqbal

Backend & infrastructure engineer. I built and sold a full-stack networking-infrastructure SaaS — the company was acquired at a $1.6M valuation in 2026. I was the sole engineer: the customer platform, the billing, the autoscaling relay tier, and the network behind it. I build the parts that have to stay up.

Most of my strongest engineering is proprietary — the summaries below describe it in neutral terms. Where I could generalize a piece and strip anything product-specific, I open-sourced it. The result is nine focused, independently-tested libraries and services on this account, linked from the sections below.


Selected work

Networking-infrastructure SaaS (the acquired company) A full-stack self-serve platform — Node/Express, Discord OAuth, a public REST API, and a companion Discord bot — routing customer traffic across a ~29-million-IP residential network. Sole engineer, end to end.

Usage-metered billing Dual payment rails — Stripe (cards) and crypto (Solana) — with GB-based entitlement and automated revenue reconciliation.

EC2 fleet autoscalerrelay-autoscaler (open-source, sanitized) A control loop that SSH-health-polls a fleet of gateway nodes, scores load over rolling windows, and scales instances up/down with hysteresis and cooldowns while reconciling Cloudflare DNS — with graceful draining and crash recovery. The generalized, cloud-agnostic cut (pluggable Compute/DNS/HealthProbe, EC2 + Cloudflare adapters) is public and test-covered.

AWS release infrastructureaws-update-channel (open-source, sanitized) A CDK-provisioned update channel — S3 + Lambda + API Gateway — with per-product bearer tokens, presigned URLs, and IAM-isolated stacks. Served 4 products across 10 surfaces. A generalized, product-agnostic cut is public and test-covered.

Self-hosted mail servera suite of open-source libraries extracted from it ~59k lines of production Go across 37 packages (~1,470 tests). IMAPS on :993 (TLS-only, argon2id), Microsoft Graph sync, Postgres full-text search, and a React UI, on AWS under systemd. I generalized and open-sourced a product-agnostic mail toolkit out of it:

Contract search platformcontract-search-platform A FastAPI backend for contract/COI document search: PostgreSQL full-text search, a Celery OCR pipeline, JWT + role-based access, and Docker Compose. Public and self-contained.

Reverse engineering Statically unpacked a deprecated PyArmor-armored binary (AES-GCM) and reconstructed 18 obfuscated modules — Ghidra / Frida / Capstone, with ARM64 lifting.

Homelab Proxmox / TrueNAS / Docker-LXC — where most of the above gets prototyped before it hits the cloud.


Tech

Languages

JavaScript Go Python TypeScript C/C++ SQL Bash

Backend & Payments

Node.js Express PostgreSQL SQLite Stripe Discord.js

Cloud & Infra

AWS AWS CDK Cloudflare nginx Docker PM2

Reverse Engineering

Ghidra Frida Capstone


Currently

  • B.S. Nanoscale Engineering @ University at Albany (expected 2027)
  • Open to backend / infrastructure and security / reverse-engineering roles

Contact

Popular repositories Loading

  1. PiOSPrayerApp PiOSPrayerApp Public

    Raspberry Pi app that plays the adhaan five times daily — prayer-time calculation with three-tier location fallback

    Python 1

  2. contract-search-platform contract-search-platform Public

    FastAPI contract/COI search backend — Postgres full-text search, Celery OCR pipeline, JWT + RBAC, Docker

    Python 1

  3. biglill biglill Public

    Profile

    1

  4. aws-update-channel aws-update-channel Public

    Authenticated multi-product software update channel on AWS — S3 + Lambda + API Gateway feed, per-product bearer tokens, presigned URLs, a CDK construct (two IAM-isolated stacks), publisher CLI + cl…

    JavaScript 1

  5. credvault credvault Public

    Go library for storing credentials at rest — argon2id hashing, AES-256-GCM envelope encryption, and context-bound AAD that blocks ciphertext-relocation attacks.

    Go 1

  6. imap-poller imap-poller Public

    Go library that keeps IMAP mailboxes synced — IDLE push notifications + incremental UID-based fetch, with pluggable dialer, auth (XOAUTH2/password), and storage. Depends only on go-imap.

    Go 1