m.alnuaimi
Platform Architecture Riyadh, KSA

I build the layer
other products
stand on.

Mohammed Alnuaimi — senior software engineer at Cerebra. I founded and architected the core of Deep I, the multi-tenant Laravel platform three commercial cybersecurity products run on, and built BeShield end to end.

See the work mnuaimi8@gmail.com
Current scope
Products on the core
3
Application classes
~2,800
Domain models in BeShield
56
Tenancy model
db-per-tenant
Also shipping
yaqa.app
5+Years building enterprise software
3Commercial products on the core
~2,800Application classes in the codebase
56Domain models I designed in BeShield
How I work

Architecture is a decision you live with for years.

Three things I hold to, learned the expensive way — on a platform that had to absorb a second and a third product without being rewritten.

Build the core once

Tenancy, identity, licensing and localization are not product features — they are platform guarantees. Every product that reimplements them adds one more place for them to disagree.

Isolation is a promise, not a column

A tenant id on every query is a promise you renew a thousand times a day. A database per tenant is a promise you make once, at the boundary — and an enterprise security review can verify it.

The domain is the hard part

Fifty-six models in BeShield exist because governance, risk and compliance genuinely contains that many distinct things. Flattening them into a simpler schema is how a GRC product stops passing audits.

Deep I — the shared core

One codebase. Three products. Isolated tenants.

Everything below the product line is what I own. Select a capability to see what it actually does.

BeShield Governance, risk & compliance built end-to-end · 56 models PhishGuard Phishing simulation & response principal engineer · + Outlook add-in InfoShield Security awareness training core contributor
DEEP I CORE Module system · shared domain layer · cross-product contracts

A custom tenant database manager provisions, migrates and boots an isolated Microsoft SQL Server database for every customer, with per-tenant settings and bootstrappers layered on top. One codebase — and a deployment an enterprise security review can actually sign off on.

SAML 2.0 with metadata generation and a built-in SSO tester, Microsoft Entra ID, and LDAP / Active Directory user provisioning with scheduled synchronization, reconciliation summaries and authentication audit logs — so an enterprise onboards its whole directory instead of creating users by hand.

An installer, a validator, seat allocation and a runtime guard that together decide which products and how many users a tenant may run — enforced at the boundary rather than trusted to each module.

Queue-driven delivery on Horizon for campaign and synchronization workloads, with Microsoft Graph for mail — the same pipeline whether a product is sending one policy acknowledgment or a fifty-thousand-recipient phishing campaign.

Full Arabic and English throughout, right-to-left layout included — not a translation file bolted on at the end, but a first-class concern in every module, because in this market half the users never switch to English.

DATA LAYER Microsoft SQL Server — one isolated database per tenant Redis · Horizon · Octane · Docker · GitLab CI/CD

Selected work

2021 — present

BeShield

owned end-to-end

A governance, risk and compliance platform for enterprises in Saudi Arabia — risk register and risk projects, compliance frameworks with control mapping, internal controls, audit management, third-party risk, vulnerability management, and the full policy lifecycle with acknowledgment tracking.

NCA ECCSAMA CSFISO 27001NIST CSFNDMOPCI-DSSSWIFT
  • Risk register and risk projects — assessment workflows, risk levels, treatment and remediation plans, and exception requests with approval chains.
  • Compliance frameworks with a central library importer, control mapping across frameworks, and internal control tracking.
  • Audit management — audit plans, scopes, observations, and a management dashboard.
  • Third-party and vendor risk — vendor register, service inventory, questionnaires and scoring.
  • Vulnerability management with Tenable integration, CPE technology matching, scan ingestion and ticketing.
  • Dark-web monitoring, and the full policy lifecycle: authoring, versioning, publication, acknowledgment tracking and document export.
domain models
56
integrations
Tenable · dark web
recognition
Innovation Award

PhishGuard

principal engineer

Campaign engine and scheduler, template and landing-page builders with AI-assisted generation, QR-code and attachment lures, delivery through Microsoft Graph, and click tracking with user-agent analysis — feeding a layered risk score per user, group, department and organization.

I also wrote the Outlook add-in in C# / VSTO: a one-click Report Phishing ribbon for both simulated and genuine mail, shipped as a code-signed MSI for enterprise rollout.

  • Campaign engine: scheduling, target groups, custom senders, and a snapshot model so a finished campaign's numbers never drift.
  • Template and landing-page builders with AI-assisted generation, HTML import, sanitization and validation.
  • Risk scoring at four levels — user, group, department and organization — with executive reporting on top.
  • A reporting pipeline for both simulated and genuine suspicious mail, with SOAR and dark-web integrations downstream.
  • The Outlook add-in: C# / VSTO on .NET Framework 4.8 for Outlook 2019+, packaged as a code-signed MSI with WiX.
add-in stack
C# · VSTO · .NET 4.8
packaging
signed MSI · WiX
downstream
SOAR · exec reports

InfoShield

core contributor

The awareness training product on the same core — courses and learning paths, a shared awareness library, gamification with points and levels, certificates, and campaign-driven assignment with completion reporting for compliance.

content
central library
languages
Arabic · English

Yaqa

founder · solo

A live subscription SaaS for tailoring businesses in Saudi Arabia, designed, built and operated by me alone. Customer measurement records that outlive the order, a production workflow from cutting to delivery, fabric inventory that deducts itself, deposits and balances, staff roles, and WhatsApp notifications.

Invoicing is integrated with ZATCA — compliant electronic invoices with QR codes, generated and submitted automatically.

  • A tailoring shop's real problem is not invoicing — it is that the customer returns a year later and nobody can find their measurements.
  • So the measurement record, not the order, sits at the centre of the data model — and everything else hangs off it.
  • Built on the same multi-tenant principles as the day job, at a scale one person can operate: provisioning, billing, support and releases included.
status
live · subscription
model
multi-tenant
visit
yaqa.app

Yemen Pay

2021 — 2022

An electronic payment gateway built during my time in financial services — transaction flows, settlement and reporting for an exchange and money-transfer operator.

stack
ASP.NET · SQL Server

Experience

Oct 2023 — present Riyadh, Saudi Arabia

Software Engineer · Cerebra

Associate Software Engineer, Oct 2023 — Jan 2025

Founded and architected the Deep I core. Built database-per-tenant multi-tenancy on SQL Server with a custom tenant database manager, delivered enterprise identity across SAML 2.0, Microsoft Entra ID and Active Directory, and designed the licensing subsystem that gates product access per tenant. Scaled the platform with Laravel Octane and Horizon, and led the platform-wide upgrade to PHP 8.4 / Laravel 13 / Filament 5.

Jan 2021 — Jul 2023 Sana'a, Yemen

IT Engineer · Al-Hitar Exchange

Built desktop and web applications for exchange and money-transfer operations in ASP.NET and Microsoft SQL Server, designed the databases and branch reporting behind them, and ran the company network and backup infrastructure.

2018 — 2021 Sana'a, Yemen

Higher Technical Diploma, Information Technology

Sana'a Community College — average 92.73%, Excellent.

Stack

what I reach for
Backend

PHP 8.4 · Laravel 13 · Filament 5 · Livewire · Octane · Horizon · Sanctum · Socialite · C# / .NET · ASP.NET

Data

Microsoft SQL Server · MySQL · Redis · Oracle · schema design · query optimization

Architecture

Multi-tenant SaaS · modular monolith · RESTful APIs · queues & background jobs · event-driven design · RBAC

Identity

SAML 2.0 · Microsoft Entra ID · OAuth 2.0 · LDAP & Active Directory · audit logging

Delivery

Docker · GitLab CI/CD · Nginx · Linux · Pest · PHPUnit · Git

Domain

Governance, risk & compliance · security awareness · phishing simulation · e-invoicing (ZATCA)

Open to senior and staff engineering & architecture roles.

If you are building something that has to hold up after the third module and the fiftieth tenant, I would like to hear about it.

Email me LinkedIn
Email
mnuaimi8@gmail.com
Phone
+966 54 579 5430
GitHub
Mohammed-800
Languages
Arabic · English