Muhammad Huda Nugroho Fullstack Developer

I build scalable end-to-end systems — from database design and backend APIs to user interfaces. Currently working with Node.js, .NET, PostgreSQL, and MS SQL Server.

Stack

linkedin.com/in/xhudan github.com/xhudan

Experience

PT Datacaraka Solusindo — Full‑Stack Developer

April 2025 — Present West Jakarta, Indonesia

CURRENT

Built web applications using .NET (MVC, API, Blazor) and Bootstrap for responsive UI.
Managed MS SQL Server databases including schema design for enterprise systems.
Applied web security best practices including secure authentication, data encryption, input sanitization, and XSS mitigation.
Troubleshot technical issues and improved application performance across varying workload conditions.

Stack .NETBlazorBootstrapMS SQLiXGuardDexGuard

Indonesia Stock Exchange (IDX) — Quality Assurance

September 2024 — April 2025 South Jakarta, Indonesia

Designed and implemented testing plans for capital market applications and IDX systems.
Performed functional, performance, and regression testing to ensure applications are bug-free and reliable.
Ensured applications met both functional and non‑functional requirements across six protocols.

Stack Katalon Studio

Education

Universitas Gunadarma

Bachelor's Degree, Informatics GPA 3.52 / 4.00

2020 — 2024

Activities · Student Association for Environmental and Adventure Activity (Mapala)

Certifications & Programs

Wirausaha Merdeka

Universitas Multimedia Nusantara · Dec 2023

A national entrepreneurship program focused on digital business innovation, entrepreneurial mindset, and action-based learning. Participated in business development, market validation, mentoring sessions, and collaborative projects with local SMEs.

Fullstack Web Development Bootcamp

Binar Academy · Jul 2023

An intensive bootcamp covering full-stack web development fundamentals including JavaScript, React, Node.js, REST API, databases, authentication, and deployment through hands-on projects and collaborative learning.

Projects

Personal and freelance work, outside of employment. Click any project to expand details.

Kenal Bakat — Talent Strengths Assessment Portal

Jul 2026

Multi-tenant B2B SaaS for talent-strength mapping, built performance-first for a 2 vCPU / 2 GB VPS.

Visit project

Built a scoring engine mapping 102 Likert answers to a Top-5-of-34 strengths profile plus a Hunter/Farmer/Executor sales-role layer.
Kept results immutable by computing scores once at submission against per-attempt weight snapshots.
Enforced multi-tenant isolation with JWT-derived scoping, cryptographic invite tokens, and instant token rotation.
Cut assessment writes ~10× via debounced client batching into a single multi-row bulk upsert endpoint.
Took 200 concurrent test-takers from 100% failure to 0% on the target VPS through pool sizing and a single guarded-upsert hot path.
Shipped questions once at attempt start with forward-only navigation, keeping the DB out of the per-question path.
Deployed via Docker Compose + PM2 cluster behind host Nginx and Cloudflare, with DB and API bound to localhost.
Validated capacity with a staged k6 load test (register → login → assessment).

Stack NestJSDrizzle ORMPostgreSQLDockerPM2NGINXCloudflarek6

Shotpix — HTML-to-PNG Render Tool

Jun 2026

Render any HTML template into a high-resolution PNG, pixel-perfect and print-ready

Visit project

Built a SvelteKit backend using Playwright to render HTML into pixel-accurate, print-correct PNGs entirely in memory, with no disk I/O.
Implemented DPI-accurate output by computing device scale factor from target size and injecting the pHYs metadata chunk via png-tools.
Designed a strict network security model blocking all outbound requests during render except an explicit font-host allowlist, closing off SSRF and CDN supply-chain risk.
Reused a single long-lived Chromium instance with a fresh, isolated browser context per request, bounded by a concurrency semaphore and queue.
Built a render-readiness sequence (font loading, then DOM-idle detection) to ensure screenshots capture the fully settled page.

Stack SvelteKitPlaywrightTypeScriptZodVitest

AssetTrack — Asset & Loan Tracker

Mar 2026 — May 2026

A simple web application for managing inventory assets and tracking borrowing records.

Built the same REST API three times — NestJS + Drizzle, Go + Echo + pgx, and ASP.NET Core + EF Core — all sharing one behavior contract and OpenAPI spec.
Designed PostgreSQL schema with UUID keys, soft-delete, and partial unique indexes.
Implemented JWT auth with cookie/bearer extraction, multi-bucket rate limiting, and magic-byte file validation.
Developed SvelteKit frontend with full CRUD for assets, categories, loans, and users, including role-based access control.
Added bilingual UI (English / Bahasa Indonesia) using Paraglide.

Stack NestJSDrizzle ORMGoASP.NET CoreEF CorePostgreSQLSvelteKitTailwind CSS

Forstra — HR Consulting SaaS Platform

Jan 2026 — May 2026

Multi-tenant, AI-powered SaaS platform automating document generation workflows for a strengths-consulting firm.

Built a multi-tenant REST API with NestJS, Drizzle ORM, and PostgreSQL + pgvector, enforcing tenant isolation on every query via JWT-derived tenant ID.
Integrated Cohere embeddings into a RAG pipeline over a Knowledge Base for context-aware AI document generation.
Designed a per-tenant token economy with row-level locking to prevent race conditions and a budget-based cap to stop generation before overspend.
Built a document-generation engine that renders AI-produced JSON specs into native .docx and .pptx files server-side via the docx and PptxGenJS libraries — never executing model-generated code.
Hardened multi-tenant file uploads against magic-byte / polyglot injection with randomized extension-less storage, nosniff + download-only serving, and content-sniff rejection of HTML/SVG/MHTML.
Built real-time notifications using Postgres LISTEN/NOTIFY for multi-instance SSE delivery, without Redis.
Developed a SvelteKit frontend with a conversational chat interface and role-based dashboards (superadmin/admin/member).
Designed a model-agnostic AI layer via Vercel AI Gateway, supporting both cloud (Claude, Cohere) and local (Ollama) providers.

Stack NestJSSvelteKitPostgreSQLpgvectorDrizzle ORMpg-bossCohereLlamaParseOllaman8nVercel AI Gateway

APPA — Internal Business Management App

May 2025 — Aug 2025

Web app with user access control, inventory tracking, and cashier operations.

Implemented Role‑Based Access Control (RBAC).
Built Stock Management and Point‑of‑Sale (POS) features.
Used cron jobs for daily expired‑product checks with email and in‑app alert notifications.
Performed backend validation testing and load testing with K6 to detect race conditions.
Configured VPS firewall to restrict backend access only to the frontend.

Stack NestJSPrismaPostgreSQLK6CronNGINX