1Pass
Chief Technology Officer · Health and wellness platform
I owned technology for the whole company. The work that mattered most was not a feature launch, it was making the platform something a regulated partner could safely do business with.
- Led a full security and privacy compliance overhaul after a partner's due diligence review flagged gaps. Built breach notification and incident response procedures, ROPA and DSAR processes, privileged access hardening, and an in-region backup strategy against PDPL, Saudi NCA, and GDPR requirements.
- Designed a four layer defence in depth architecture across perimeter, authentication and RBAC, application validation, and tenant-scoped data access, closing unauthenticated public API endpoints.
- Scaled infrastructure on GCP me-central2 (Dammam) to support ten times the user load without dropping the uptime SLA.
- Rebuilt the native Android and iOS apps from scratch, and the company website in Vue.js.
- Ran a formal technology evaluation process, assessing more than twenty tools a year and approving only what cleared a 150 percent ROI bar.
GCP · Kubernetes · Docker · Vue.js · Kotlin · Swift · PostgreSQL · Redis · PDPL / GDPR / NCA