Senior Software Engineer with 6+ years architecting and delivering enterprise-grade, multi-platform mobile applications on Clean Architecture, SOLID principles, and Dart 3 sealed-class type safety.
Currently lead architect of PAAS at Qara Digital Solutions β a single-codebase platform powering 20+ live production apps across the Saudi market, with a self-built multi-flavor CI/CD pipeline, a multi-theme control dashboard, and fully self-hosted release infrastructure.
Beyond day-to-day feature work, I own the platform's security and DevSecOps posture β Firebase App Check, RASP hardening (certificate pinning, root/jailbreak detection), and incident response when things go wrong β and I build my own AI-assisted tooling rather than just consuming off-the-shelf copilots.
Background spans full-stack web (Vue.js, React.js, Node.js, Laravel, Django) from earlier in my career, which now shows up as an advantage β I think about mobile apps in terms of the APIs and systems behind them, not just the UI layer.
class BoulesHisham {
final String role = "Senior Software Engineer / Mobile Architect";
final String location = "Cairo, Egypt πͺπ¬ (Open to Remote / Relocation)";
final String current = "Lead Mobile Architect @ Qara Digital Solutions (KSA)";
final List<String> expertise = [
"Clean Architecture & SOLID Principles",
"Dart 3 Sealed Classes & Type Safety",
"BLoC / Cubit State Management",
"Multi-Flavor CI/CD & Self-Hosted Runners",
"Mobile App Security (App Check, RASP, mTLS)",
"Firebase Full-Stack Integration",
"AI-Assisted Dev Tooling (self-hosted LLMs)",
"Full-Stack Background (Node.js, Django, React)",
];
final String philosophy = "Build it right β not just make it work.";
}Flutter Β· Dart 3 Β· Firebase Β· ObjectBox Β· GitHub Actions
Single shared codebase powering 20+ live production apps (Android + iOS) across the Saudi market.
- ποΈ Feature-cluster modular Clean Architecture (
/clusters/,/users/,/core/,/di/) - β‘ Remote Asset System (ObjectBox + Firebase RTDB) β zero app releases required for brand/theme updates
- π Dart 3 sealed-class ImageLoader β compile-time-safe image rendering
- π Self-hosted CI/CD: GitHub Actions runners on dedicated hardware + VPS, packaging every branded flavor from one codebase
- β
Automated CI-integrated QA pipeline (
flutter_test,bloc_test,mockito) generating test-status reports on every PR
Firebase App Check Β· Play Integrity Β· RASP Β· mTLS
Rolled out Firebase App Check across PAAS's multi-flavor builds β Play Integrity for production, a fixed-UUID debug provider for QC/staging β layered on top of an existing RASP posture (certificate pinning, root/jailbreak detection).
- π¨ Responded to a real security incident (a leaked private Dart package) by implementing mTLS client-certificate authentication and SSH key-based access controls for the self-hosted CI/CD pipeline
- π§Ή Followed through with full post-incident hygiene across affected infrastructure
Ubuntu Β· GitHub Actions Runners Β· Bare-Metal Hardware
Built and operate PAAS's self-hosted CI/CD on dedicated hardware (HP EliteDesk running Ubuntu) rather than relying on hosted runner minutes.
- π§ Debugged runner registration failures and OOM crashes under load
- π¦ Pre-installed and pinned the Flutter SDK (3.29.0) and Android SDK without a full Android Studio install
- π Rewrote the project's quality-gate as a reusable GitHub Actions workflow shared across the monorepo
RooCode Β· Ollama Β· OpenRouter Β· Continue CLI
Built a custom AI-assisted development setup for the PAAS monorepo rather than using default copilot tooling out of the box.
- π§© Custom RooCode modes tuned separately for frontend, Flutter/mobile, and DevSecOps workflows
- π₯οΈ Self-hosted Ollama on a VPS running
qwen2.5-coderandqwen3-coder, wired into Android Studio and VS Code via the Continue CLI
Swift Β· SwiftUI Β· macOS Β· AppKit
A native macOS menu bar utility that polls Jira and triggers GitHub Actions APK builds directly from the desktop β built to cut the friction of jumping between Jira, GitHub, and a terminal just to kick off a build.
- π οΈ Worked through AppKit integration quirks and Keychain entitlement issues to get secure credential storage working natively
Flutter Β· Dart Β· Package Architecture
4 internal Flutter packages enabling code reuse across the app suite, with strict versioned API boundaries between modules.
Node.js Β· TypeScript Β· Python Β· Shell
Production CLI for multi-environment config orchestration with graceful API fallback. Released as v2.0.0.
Flutter Β· Dart Β· build_runner
Two open-source Flutter dev tools: build-time model code generation, and compile-time-safe access to UI resources (colors, fonts, assets).
Senior Software Engineer β Lead Mobile Architect
Qara Digital Solutions Β· Sep 2023 β Present Β· Cairo, Egypt / Remote (KSA)
Head of Mobile Development
CorporateStack Solutions Β· Mar 2022 β Sep 2023 Β· Cairo, Egypt
Full-Stack Developer
Ergasti Digital Β· Oct 2019 β Mar 2022 Β· Cairo, Egypt
- π CS50: Introduction to Computer Science β Harvard University
- π CS50: Introduction to Programming with Python β Harvard University
- π Flutter Apprentice β Google
- π¨ Deepening front-end engineering skills β working a vanilla JS β React roadmap alongside mobile work
- π CI security scanning tooling (CodeQL, Snyk, Semgrep) and visual regression / PR preview deployment workflows
- πΏ Git workflow refinement β rebase-first strategies, cherry-pick promotion across environments
- πͺπ¬ Arabic β Native
- π¬π§ English β Professional Proficiency
- πͺπΈ Spanish β Beginner
- πΌ Senior Flutter / Mobile Engineer roles
- π Remote positions worldwide
βοΈ Relocation opportunities- π§© Freelance/contract Flutter work β active on Mostaql, with PAAS as a credibility anchor
- π€ Open-source collaboration on Flutter packages


