I build secure backend systems for enterprise PKI — Spring Boot, X.509, OCSP, post-quantum. Currently shipping crypto services at Codegic.
Lahore, Pakistan
Open to remote work
const muhammad = {role: 'Software Engineer',focus: ['PKI', 'CLM', 'Post Quantum'],stack: ['Java', 'Spring Boot', 'TypeScript'],location: 'Lahore, PK',available: true,};
I'm a software engineer with a deep specialization in PKI and enterprise security. Over the past two years at Codegic, I've designed and shipped production systems handling certificate lifecycles, OCSP responders, HSM integrations, and high-volume signing.
Backend foundation: Java + Spring Boot. Frontend: React + Next.js. Same engineering discipline on both sides.
Software Engineer · PKI Backend
Post-quantum
cryptography
This portfolio
Next.js 16 · MUI v9 · Docker on RenderVia multithreading, caching, and data-access optimization
Tuned hot paths and revocation lookup
CMP · SCEP · EST · ePassport · post-quantum
Databases
45%Java Microservices
30%Oracle Certification
20%High-scale PKI backend at Codegic. Spring Boot + Spring Security stack supporting certificate issuance, OCSP, automated renewal, ePassport integration, and protocols including CMP, SCEP, EST, and post-quantum algorithms.
Throughput optimization across Codegic platform — ~44% certificate-generation gain, ~120% OCSP-response improvement via multithreading, caching, and data-access redesign. Java 17 → 21 and frontend CRA → Vite migrations.
Gen-AI learning platform that uses LLMs to generate interactive visual stimuli (videos) for students and teachers. Personalized content delivery, real-time query support, collaborative learning.
Real-time chat application built with Android Studio and Java, backed by Firebase. One-to-one messaging, media sharing, push notifications, login/registration — replicating core WhatsApp features.
Design and harden certificate infrastructure end to end — the area I work in daily at Codegic.
High-scale Java + Spring Boot services built for correctness and speed — I've shipped +44% throughput gains.
Own a feature from database to UI with the same engineering rigor on both sides of the stack.
A second set of eyes on security-sensitive systems — architecture guidance, threat modeling, and code review.
Have a project that needs deep security or full-stack expertise?
Let's talk@Muhammad-Shahroz-Siddiqui
81 contributions in the last yearWelcome to my blog — here I write about PKI, security engineering, and full-stack development.
Read post
Looking for someone who can ship X.509 / OCSP / signing systems and own the frontend on top? Drop a note.