I'm Bilal Nasr. I build whole platforms.

Senior Full Stack Engineer, focused on backend: PostgreSQL schemas, APIs and system design, carried through to the web apps, admin tools and deploy. I work at Lelabo Digital, from Kfarhim in the Chouf, and in my own time I go lower, into routers, RADIUS and sockets.

Open to senior roles and freelance builds, remote or in Lebanon.

Email meDownload CV
Bilal Nasr in a black suit and round glasses

Work

PassPo

Pet health passport and vet booking

Livepasspo.ai

Repos
8
Routes
about 565
Tables
84
Sign-in realms
7
My commits
527 of 842

A health record for your pet, and one place to book the vets, groomers and trainers who look after it. A single API serves the web app, the admin and provider CMSes, and two Flutter apps, which were mainly a teammate's work.

  • Moved auth off Supabase onto our own: OTP, refresh tokens, per-account 2FA, session revocation, audit logs
  • One account-erasure path across six realms, with a log that keeps no personal data
  • Arabic and English web app, right-to-left included

TypeScript, Express, PostgreSQL, Next.js, Flutter, Google Cloud Run

Freelance, small team. Top committer.

One stone is ten commits. Pale stones are mine, grey ones my teammates'.

Emarmo

B2B marketplace for natural stone

Opening soonemarmo.com

Tables
about 160
Routes
about 540
Role realms
4
Backend test files
145
My commits
420 of 613

Buyers, sellers, inspectors and an operations team trading stone by the container. The hard part is the money and the freight: payments are held, released and refunded over weeks, against goods that have to fit in a box and survive inspection.

  • An escrow ledger with hold, release and refund entries, idempotent payments, credit terms and disputes
  • Container loads limited by floor area and by stone weight, enforced at every layer
  • AI summaries, listing help and offer replies, plus an MCP server that gives AI coding tools our schema and routes

TypeScript, Express, PostgreSQL, Next.js, Sentry, Vitest, Playwright

Freelance, small team. Top committer.

LAN Wi-Fi Manager

Failover between wired and Wi-Fi

ReleasedDownload

Public releases
30
Rust tests
1,160
Commits
81

A desktop app for computers on both LAN and Wi-Fi. When the wired line drops, it moves the machine over, and it can use both lines at once. Split mode and the macOS build are the newest parts and still need field testing on real hardware.

  • Same features in two codebases: C# on Windows, Rust and Tauri on Ubuntu and macOS
  • Split mode is a hand-built local proxy that binds each connection to one adapter, with a crash-safe restore

C#, Rust, Tauri, TypeScript, GitHub Actions

My own project. Solo.

QuotaLeft

Billing and logins for small ISPs

Pre-release, private repo

Tables
50+
Automated tests
4,000+
Lab redial p99
20.6 ms
Commits
72

Subscriber management, billing and a branded portal for small internet providers, with its own RADIUS for PPPoE logins. No customers yet, it ships once it is complete.

  • An on-site RADIUS box that keeps logins working offline, with a cloud FreeRADIUS fallback behind WireGuard
  • In a lab load test, 2,000 subscribers redialled in 60 seconds with none lost
  • Tested on physical MikroTik hardware, which caught two bugs the virtual lab missed

TypeScript, NestJS, PostgreSQL, Next.js, FreeRADIUS, WireGuard, Docker

My own project. Solo.

Internet Monitor

Home internet usage and outage history

Live, for one user: meSource on GitHub

Tables
16
Outage causes
6
Commits
97

Tracks my home line from a MikroTik router, keeps the history in Postgres and emails me before the quota runs out.

  • Push-only ingest, because the router sits behind carrier-grade NAT
  • Survives PPPoE counter resets, router clock skew and unreported reconnects
  • Sorts every outage into one of six causes, from data the router keeps during the outage

TypeScript, Next.js, PostgreSQL, RouterOS scripts, Vercel

My own project. Solo.

Fernlock

Self-hosted secrets manager

Built, not yet deployed, private repo

Tables
21
API operations
62
Commits
402

Encrypted environment variables with per-environment access, pulled into a local .env by a CLI. The API, auth, CLI and dashboard are built, and the Docker Compose bundle passes its end-to-end tests. It is not deployed yet: the first install on a real machine is what is left.

  • Envelope encryption with key rotation, and an audit table the app itself cannot edit
  • Custom auth with Argon2id and TOTP, and a device-code sign-in for the CLI
  • The CLI refuses to write a Git-tracked file

TypeScript, Fastify, PostgreSQL, Drizzle, React, Docker Compose

My own project. Solo.

Fernway

Self-hosted deploy panel

In progress, private repo

Tables
8
Commits
12

A panel that shows every project on a server, its health, its deployed commit and its deploy history with live logs, and lets me deploy and roll back without SSH. It sits on top of an existing timer-based deploy script instead of replacing it.

  • The web app has no power of its own: every privileged action goes through a narrow host agent with a fixed list of verbs
  • Secret values never pass through the panel. It shows key names, and Fernlock holds the values
  • Passkey login behind Cloudflare Tunnel and Access

TypeScript, Next.js, Node.js, PostgreSQL, Docker Compose, Cloudflare

My own project. Solo.

Background

  1. Feb 2024 – now

    Senior Full Stack Engineer, Lelabo Digital

    Promoted to senior. I own architecture decisions and technical direction on key features, mentor engineers and guide interns. Day to day that means MERN and PostgreSQL applications, Node.js backends, caching, SEO and performance work, and automation that replaces manual ops.

  2. Oct 2023 – Jan 2024

    Web Developer Intern, MISCK, Lebanon

    Full-stack features in Next.js, Tailwind CSS and Firebase, backend performance fixes, and UX improvements that reached production.

  3. Mar 2022 – Oct 2023

    Coding Instructor, Bright Champs

    Taught coding to UK students from grade 1 to grade 12 and trained other teachers on the curriculum. If you can't explain a concept simply, you don't really understand it. That still shows up in my code reviews.

What I work with

Databases and system design
PostgreSQL, MongoDB, schema design, query optimization, system design
Languages
TypeScript, JavaScript, Python, Rust, C#, C, C++, Java, PHP, Shell
Backend and web
Node.js, Express, NestJS, Fastify, React, Next.js, Tailwind CSS, Tauri, Laravel
Infrastructure
Docker, Google Cloud, Cloudflare, Vercel, Firebase, GitHub Actions
Networking
RADIUS, PPPoE, WireGuard, MikroTik RouterOS, cabling and troubleshooting
Testing and tools
Vitest, Playwright, Sentry, Git, Claude Code, Cursor, GitHub Copilot

Education

  • Bachelor's in Computer Science, Lebanese University
  • Full Stack Development, Park Innovation, 2023. A 400-hour course.
  • IT Essentials, Cisco Network Academy, 2022

Tell me what you're building.

Hiring a senior engineer, or need a platform built? Email is the quickest way to reach me.

[email protected]

© 2026 Bilal Nasr. Kfarhim El Chouf, Lebanon.