Montréal, Québec · Open to select work

Raheel Riaz Malik

          Full Stack Developer12 Years Shipping
        

Twelve years of production web applications — national e-commerce, fintech and B2B software — across in-house teams and agencies in Montréal and Karachi. Architecture through deployment, end to end.

Get in touch

Raheel Riaz Malik — R. R. MalikEst. 2012

Years shipping
production software

Companies, in-house
and agency

Production
deployments

Query time cut
at national scale

Shipped for

Kanguru DormBooker Next Generation eSolutions

01 / Profile

A decade of production code, now pointed at ledgers and agents

I'm a full stack developer with 12+ years designing, building and deploying production web applications — e-commerce at national scale, fintech, and B2B software — across in-house teams and agencies in Montréal and Karachi.

Today I work on crypto accounting infrastructure at Cryptoworth: Laravel services that reconcile wallets, exchanges and chains; subledger logic that has to survive an audit; and ERP integrations with QuickBooks Online, Xero and NetSuite. Cost basis, tax lots, internal transfer versus disposal — the details where correctness is the whole product.

The newer half of the work is AI systems that do real jobs: MCP servers connecting LLM clients to live accounting APIs behind PKCE-enforced OAuth, and reconciliation agents built around evidence binding, tool-call budgets and prompt-injection defence. Deterministic orchestration does the mechanical work; the model advises on exceptions.

I take end-to-end ownership — architecture, schema, deployment, monitoring — and I'm equally comfortable owning a greenfield build or landing in a fifteen-year-old codebase and making it faster without breaking it.

Where I go deep

Crypto accounting & reconciliationCost basis, tax lots, transfer classification, ASU 2023-08

ERP & subledger integrationQuickBooks Online, Xero, NetSuite, DualEntry — AR/AP and journal entries

AI agents & MCPAgentic loops, tool orchestration, prompt engineering, injection defence

Identity & API securityOAuth 2.0 / OIDC, Keycloak, PKCE, scoped partner access

E-commerce at scaleMagento 2, checkout conversion, catalogue and query performance

Legacy modernisationPHP upgrades, refactors, CI/CD, measurable performance work

02 / Experience

Where the work happened

Six companies since 2012 — appliance and powersports retail at national scale, a property-management SaaS, a Montréal digital agency, and now crypto accounting infrastructure.

            2025 — Present
            Current post
          

Software Engineer, Full Stack

Cryptoworth  ·  Montréal, QC  ·  cryptoworth.com

Crypto accounting, reconciliation and close-management SaaS.

Build and maintain Laravel backend services for crypto accounting and asset tracking, with secure REST endpoints that keep portfolios synchronised in real time across many wallets.
Own MCP server integrations that let LLM clients read and act on live accounting APIs, including the submission of Cryptoworth's MCP server to Anthropic's connector directory.
Lead partner integration setup end to end: Keycloak OAuth 2.0 / OIDC client registration, PKCE enforcement, scope design and redirect-URI policy for DualEntry, Campfire and others.
Design AI reconciliation agents — gap analysis, evidence binding, tool-call budgets, prompt-injection defence and prompt-caching strategy.
Build ERP subledger logic against QuickBooks Online, Xero and NetSuite, including AR/AP receivables and journal-entry construction under ASU 2023-08.
Integrate exchange and chain APIs (Kraken, Bittensor), fixing pagination and classification bugs that mis-labelled external transactions as internal transfers.

Laravel

PHP

Angular

MCP

Keycloak

QuickBooks

Xero

Mar 2022 — Jul 20231 yr 5 mos

Full Stack Developer

Canadian Appliance Source  ·  Canada  ·  canadianappliance.ca

Canada's largest national appliance retailer.

Rebuilt the checkout flow with client-side validation, cutting abandonment and lifting conversion.
Optimised MySQL queries and indexes, reducing query execution time by 40%.
Upgraded legacy applications to PHP 8.1, introducing Middleware and Permissions components for performance and security.
Cut page load times through code and query optimisation, improving engagement across the storefront.
Engineered a streamlined deployment process, and raised team standards through code review and mentorship.

PHP 8.1

MySQL

JavaScript

CI/CD

Aug 2021 — Dec 20215 mos

Full Stack Developer

FortNine  ·  Montréal, QC  ·  fortnine.ca

Canada's online source for motorcycle, ATV and powersports gear.

Engineered new sales modules on Magento 2 with PHP, MySQL and JavaScript, extending the platform's commerce capability.
Built dynamic, configurable landing-page widgets that drove a measurable increase in sales leads.
Applied PHP design patterns and best practice to keep a large storefront codebase maintainable.

Magento 2

PHP

MySQL

Dec 2016 — Aug 20214 yrs 9 mos

Full Stack Developer

Kanguru Digital Agency  ·  Montréal, QC

Client platforms across finance, services and marketing.

Replaced outdated authentication libraries with ISO/IEC 27001-compliant solutions, hardening security across client platforms.
Built backend APIs in PHP/Laravel with responsive Vue.js front ends.
Rebuilt mortgage processing systems, cutting lead conversion time with a flexible data import/export mechanism.
Integrated Twilio, Google Maps, PayPal and other third-party services to extend product capability.
Refactored legacy codebases, moved workloads to cloud infrastructure, and ran client delivery end to end.

Laravel

Vue.js

Twilio

PayPal

Jan 2015 — Dec 20162 yrs

Full Stack Developer

DormBooker  ·  Montréal, QC

SaaS property management for student housing.

Led development of the platform end to end — web front end plus hybrid iOS and Android apps, published to the App Store and Google Play.
Integrated Stripe payments and Google APIs to expand functionality and smooth user journeys.
Designed APIs with the backend team and tightened the delivery lifecycle with policies that improved code quality.

PHP

Stripe

iOS / Android

Dec 2012 — Jul 20141 yr 8 mos

Software Engineer

Next Generation eSolutions  ·  Karachi, Pakistan

Bespoke platform development for regional clients.

Designed scalable architectures for online testing platforms, crowdfunding solutions and point-of-sale systems.
Built dynamic features in PHP, JavaScript and the Zend Framework.
Directed database design and migrations, and managed release roll-outs with stakeholders.

PHP

JavaScript

MySQL

03 / Work

Live products I helped build

Three platforms you can open right now. Previews are pulled live from each site, so what you see is what is in production today.

cryptoworth.com

loading live preview Cryptoworth website

Current

Crypto accounting & close infrastructure

Laravel services reconciling wallets, exchanges and chains for enterprise finance teams. I own the MCP server integrations, the Keycloak OAuth layer for partner access, and the ERP subledger logic that pushes journal entries into QuickBooks, Xero and NetSuite.

MCP connector directory ASU 2023-08 subledger

Visit site

National retail

Checkout and performance work on a national storefront

Canada's largest appliance retailer. I rebuilt the checkout flow with client-side validation to cut abandonment, upgraded legacy applications to PHP 8.1, and reworked MySQL queries and indexes to take 40% off execution time.

−40% query time PHP 8.1 migration

Visit site

canadianappliance.ca

canadianappliance.caLive site · visit to view

fortnine.ca

fortnine.caLive site · visit to view

Magento 2

Sales modules for Canada's powersports store

New commerce modules on Magento 2, plus configurable landing-page widgets that let marketing ship campaign pages without engineering time — and drove a measurable lift in sales leads.

Configurable widgets High-traffic catalogue

Visit site

Internal systems and independent builds

Not publicly viewable

Financial close automation

A close pipeline for an enterprise accounting application. Deterministic job orchestration handles the mechanical work; an LLM advisory layer steps in only on exceptions.

Reconciliation AI agent

An agentic advisor loop for crypto reconciliation, built around evidence binding, strict JSON output contracts, tool-call budgets and hardened prompt-injection defences.

MCP server integrations

Model Context Protocol servers that let LLM clients act on real business systems — accounting APIs, email, calendar, storage — behind PKCE-enforced OAuth with scoped partner access.

Crypto market analysis platform

A self-hosted analysis platform with a weighted composite scoring engine over live market data, running on AWS EC2 and RDS behind Nginx and PM2.

Automated listing pipeline

End-to-end content and e-commerce automation: generate the imagery, assemble the listing, publish through marketplace APIs — no human in the loop for the routine path.

Club management platform

A membership and operations platform for clubs and organisations — scheduling, rosters and billing on a typed, schema-first stack.

04 / Stack

Tools of the trade

Everything here is something I have shipped with, not something I have read about.

Languages

PHP

JavaScript

TypeScript

Python

HTML5

CSS / SASS

Backend

Laravel

Node.js

Express

CodeIgniter Zend REST API design

Frontend

React

Next.js

Vue.js

Angular

Redux

Tailwind

jQuery

Data

MySQL

PostgreSQL

MongoDB

Prisma Query optimisation

Cloud & DevOps

AWS EC2 / RDS

Docker

Nginx

GitHub Actions

Cloudflare

Linux

AI & automation

Claude API

OpenAI API MCP servers Agent workflows Prompt engineering

Commerce & ERP

Magento 2

QuickBooks

Xero NetSuite

Stripe

PayPal

Twilio

Security & auth

Keycloak

OAuth 2.0 / OIDC

JWT / PKCE ISO/IEC 27001 practice

Practice

Git

Jest / TDD

Agile / Scrum Code review Mentorship

05 / Proof

Verified by shipped work

Each capability below is tied to the system it was proven on, in production, with the company named.

MCP server engineering

Production MCP server connecting LLM clients to live accounting APIs — submitted to Anthropic's connector directory.

Cryptoworth · 2025

OAuth 2.0 / OIDC delivery

Keycloak client registration, PKCE enforcement, scope and redirect-URI policy for named enterprise partners.

Cryptoworth · DualEntry, Campfire

ERP subledger integration

QuickBooks Online, Xero and NetSuite journal entries and AR/AP receivables built to ASU 2023-08 treatment.

Cryptoworth · 2025

Database performance

Query and index rework that cut execution time 40% on a national storefront, alongside a PHP 8.1 migration.

Canadian Appliance Source

Magento 2 module development

Sales modules and configurable landing-page widgets on a high-traffic powersports catalogue.

FortNine

Published mobile apps

Hybrid iOS and Android clients shipped to the App Store and Google Play alongside the web platform.

DormBooker

Education

Master of Engineering (MEng) Concordia University Montréal, Québec

BSc, Computer Science & Information Technology NED University of Engineering & Technology Karachi, Pakistan · 2009 — 2012

Languages

UrduNative

EnglishFluent

HindiFluent

PunjabiConversational