← All work
SaaSClient work
Cluster Profile Card Platform
Cognito-secured profile and journal app on AWS Fargate, with admin ETL and a keyed API
- Role
- Lead backend and cloud engineer
- Client / product
- Cluster
- Years
- 2026–present
- Status
- Production
Overview
A profile-card and journal web app for Cluster, built in a shared repository with the client's developer. The client started with an Amplify-based static front end; Hamza fixed the build and moved the backend to Next.js on ECS Fargate behind an ALB and CloudFront, with Cognito auth, S3 photo storage and MongoDB. From there Hamza added an admin workspace with a staged ETL pipeline, a rate-limited API-key data API, and an Ionic/Capacitor mobile app.
Open live site ↗Private client code
Highlights
- Production on AWS: Docker on ECS Fargate behind an ALB, a CloudFront TLS front door on a custom domain, and CloudFormation templates with scoped IAM.
- Every push to main deploys to Fargate through GitHub OIDC, with no long-lived keys.
- Profiles keyed to the Cognito token subject, S3 photos via presigned URLs, and browser-side image resizing to fix oversized uploads.
- Admin workspace with a staged ETL pipeline, editable terms and policies, and API keys with per-key rate limits and expiry behind documented /api/v1 endpoints.
- Nearby card exchange: the sender picks which fields to share and the rest is only sent after the receiver accepts, found through GPS (within 100 m) plus a small Capacitor plugin Hamza wrote for iOS and Android that broadcasts a random per-visit Bluetooth LE beacon, so nobody's position is sent to other users.
- Ionic Vue + Capacitor iOS/Android app on the same API; 41 of the project's 90 commits are Hamza's (Aug–Sep 2026).
Technology
Platforms
WebiOSAndroid
Next.js 16React 19Node.jsAmazon Cognitoaws-jwt-verifyAWS ECS FargateApplication Load BalancerCloudFrontAWS LambdaAPI GatewayAmazon S3MongoDBDockerCloudFormationGitHub Actions (OIDC)Ionic VueCapacitorCustom Capacitor plugin (Bluetooth LE)