Meet Rakholiya
Professional Summary
Full-Stack Software Engineer with 3+ years owning products end to end — frontend, backend, database design, and production deployment — plus hands-on experience building AI-powered features (RAG retrieval, NL-to-SQL) with LangChain on top of production PostgreSQL systems. Led OWASP security hardening to a 9.8/10 score, architected multi-tenant CRM systems, and integrated a full payment pipeline (Razorpay). Comfortable owning a feature from schema design through the AI layer sitting on top of it.
Engineering Experience
Software Engineer (AI & Full Stack)
- Led OWASP security hardening for a multi-tenant Insurance CRM (EazAgent), achieving a 9.8/10 score by fixing XSS, CSRF, and SQL injection vulnerabilities, and designed its PostgreSQL row-level tenant isolation.
- Built RAG-based retrieval and a Natural Language to SQL feature using LangChain, letting business users query CRM data in plain English, with validation to block unsafe or cross-tenant queries.
- Diagnosed and resolved a cascading production failure on AWS ECS Fargate during a live client demo — port mismatches, ALB misrouting, failing health checks, OAuth redirect loops — and documented the fixes as a team runbook.
- Led frontend architecture for Magma CRM, mentoring a 2-person team and building a server-driven data-fetching layer (Next.js Server Actions) that removed client-exposed API endpoints.
- Built a real-time notification system using Supabase Realtime, optimizing subscription handling to avoid unnecessary re-renders.
- Implemented role-based access control to support multiple user roles per tenant while structurally preventing cross-tenant data access.
Full Stack Developer
- Owned the entire frontend and ~70% of backend for a multi-role Chartered Accountant CRM (NestJS, TypeORM, React), designing relational schemas for clients, filings, and workflow states.
- Integrated Razorpay end to end: order creation, payment verification, webhook handling, and reconciliation records.
- Led a property brokerage CRM (Shelter4U) covering the full lead-to-closure lifecycle; deployed backend on AWS EC2 with PM2 and NGINX reverse proxy + SSL.
- Built core investment workflows (SIP creation, portfolio dashboards, transaction tracking) for a live fintech platform, integrating REST APIs via Axios.
Selected Systems
- Moncton CRM — Settlement Agency Case Management Platform
A bilingual case management platform for Canadian settlement agencies, replacing spreadsheets and paper files with one system covering the full newcomer client journey from inquiry to IRCC reporting.
- Chartered Accountant CRM — Multi-Role Practice Management
Independently architected the entire frontend and ~70% of the backend for a multi-role CRM serving a Chartered Accountant practice, with role-based access control and an end-to-end Razorpay payment pipeline.
- EazAgent — Multi-Tenant Insurance CRM
A multi-tenant CRM for an insurance brokerage, hardened for OWASP compliance and extended with a natural-language query layer over tenant-isolated data.
- Magma CRM — Frontend Architecture & Real-Time Systems
Led frontend architecture for a multi-role CRM, replacing a client-facing REST layer with server-driven data access and building a real-time notification system on Supabase Realtime, while mentoring a two-person frontend team.
- Mutual Fund Investment Platform — Core Investor Workflows
Built and maintained the core investment workflows of a live fintech platform — portfolio dashboards, SIP creation, transaction tracking, and investor profiles — behind a centralized API integration layer and Redux-managed state.
- Shelter4U — Property Brokerage & Channel Partners CRM
Led development of a property brokerage CRM covering the full lead-to-closure lifecycle, self-deployed on AWS EC2 behind NGINX, and directly diagnosed the production issues that came with owning that infrastructure.
Technical Skills
Languages
TypeScript, JavaScript, SQL, Python (LangChain ecosystem)
Frontend
React.js, Next.js, Redux, Server Actions
Backend & Database
NestJS, TypeORM, REST API design, NestJS Guards (RBAC), PostgreSQL (row-level security), Supabase
Cloud & DevOps
AWS EC2, AWS ECS (Fargate), NGINX, PM2, Application Load Balancer
Security
OWASP hardening (9.8/10 achieved), JWT auth, Razorpay payment security
AI / LLM
LangChain (RAG pipelines, NL-to-SQL generation), embeddings and vector retrieval, query validation for AI-generated SQL