Iqbal R.
CV ↓

Full-Stack Engineer

Muhammad Iqbal Ramadhan

I build systems end to end, from schema and infrastructure up to the interface people use. These days much of that work lives in the AI layer on top of those systems.

Bogor, West Java, Indonesia · 6+ yrs experience

Press startDownload CVGitHub ↗LinkedIn ↗
01 /

About

I'm Iqbal, a full-stack engineer based in Bogor. I've been an engineer from the start: on my first project in 2020 I designed the UI/UX and then built the frontend for it myself, and I've kept going down the stack ever since. Today I work across the whole product, from backend services and data models to the interfaces people use, and I stay with the systems I build long after they ship.

Most of my work now lives where AI meets real business data. At Baskit I'm the sole engineer behind Baskit OS, an internal platform where anyone can ask a question in plain language and get an answer from the finance and operations data they're allowed to see. Building it taught me that the hard part of AI engineering is rarely the model. It's the permissions, the guardrails, and being careful about what a model gets to see in the first place.

Outside of work, I build open-source tools. Palang AI is a security gateway that sits between apps and LLM providers, redacting sensitive Indonesian data like NIK and NPWP before it reaches a model. I also publish starter templates for new API services, so each project starts from a solid foundation. On top of that, I'm working toward my Informatics degree alongside full-time work.

Six years in, the rule I keep coming back to is simple: own the system, not the ticket.

What I work with

Languages

  • TypeScript
  • JavaScript
  • Python
  • Golang
  • PHP
  • SQL

AI / LLM

  • LLM agents
  • Tool calling
  • Text-to-SQL
  • Guardrails (PII redaction, prompt injection)
  • ONNX
  • Gemini

Backend

  • Node.js
  • Express
  • Hono
  • Bun
  • FastAPI
  • Echo
  • REST API
  • OpenAPI / Swagger
  • Socket.IO

Frontend

  • React
  • Next.js
  • Vue
  • Pinia
  • Zustand
  • React Query
  • Tailwind CSS
  • Ant Design
  • shadcn/ui

Databases

  • PostgreSQL
  • MongoDB
  • MySQL
  • TypeORM
  • Drizzle
  • Mongoose
  • SQLAlchemy
  • Alembic

Cloud & DevOps

  • AWS
  • Kubernetes
  • Helm
  • Docker
  • GitHub Actions
  • Jenkins
  • Grafana
  • Loki
02 /

Experience

  1. Oct 2025 – PresentBaskitNowFull-Stack Engineer · AI Engineering

    Full-stack engineer at Baskit, working across the internal platform, from the commercial ERP up to the AI layer on top of it.

    My main project is Baskit OS, our company-wide internal AI platform, built as sole engineer. Employees ask questions in plain language and get back reports, tables, diagrams, and flowcharts, without needing database access. What each person sees is scoped by team-level permissions, so finance and operations data never cross. I own the whole stack: authentication, the permission model, a provider-agnostic LLM layer, and deployment on AWS with Kubernetes, Helm, and GitHub Actions. I also wrote the platform's Architecture Design Document, reviewed by our Principal Engineer.

    A model writing SQL against production data is the risky part, so every query runs through a sandbox: single-SELECT enforcement, permission-based table allow-lists, forced row limits, and audit logs that outlive the chat session. The model writes the query. The guard decides whether it runs.

    Inside Baskit OS I built AR Workflow, which matches BCA and HSBC bank statements against Xero invoices. A 16-rule deterministic cascade does the matching and every calculation; an LLM only helps reason through the ambiguous cases, so every match stays auditable. Before launch I resolved 6 critical gaps, including an idempotency bug that would have created duplicate financial records in Xero.

    Beyond the AI layer I'm building Baskit Boost, our centralized payment service (card payments live via a bank payment gateway, Xendit virtual accounts in progress), and a WhatsApp chatbot on Twilio for brand assessment and order flows, plus backend work on BCP, our commercial ERP integrated with Xero. I also led BPD's migration off Supabase to AWS: backend rebuilt, every record and file moved over one weekend, production switched in a 3-minute deployment, zero downtime.

    • Node.js
    • TypeScript
    • PostgreSQL
    • MongoDB
    • Next.js
    • Gemini
    • AWS
    • Kubernetes
  2. Apr 2022 – PresentFreelanceNowFull-Stack Developer

    Independent engineering work alongside my full-time roles, building and shipping end to end on small team and freelance projects.

    Most of it has been in umroh travel. On Umroh.in and Rihla, two platforms for Islamic pilgrimage agencies, I worked with the client teams from requirements through deployment: booking flows for hotels, Haramain train tickets, and vehicle rentals, package management, and the internal dashboards their staff use to handle bookings, payments, and customers day to day.

    I was also part of the team behind Smart Bengkel, a full-stack platform for an automotive service company, where AI is built into the operational workflows rather than bolted on as a feature.

    On the government side I contributed to the backend behind BPASN, the body that rules on administrative appeals from civil servants facing dismissal. Case records there decide careers, so the work centred on optimized PostgreSQL queries and strict data integrity controls.

    I also support other engineers on their international projects, contributing implementation work inside their existing delivery setups: a vehicle booking platform for a client in Japan, and Block Builder, a task management tool for longwall mining operations in Australia, built around a drag-and-drop block layout designed for the 60-inch touchscreens used on site.

    One habit carries across all of it. Every engagement leaves behind reusable component libraries and project starters, so the next project starts further along than the last.

    • React
    • Next.js
    • Vue
    • TypeScript
    • Golang
    • PostgreSQL
  3. Dec 2024 – Jun 2025Kandara TechFull-Stack Developer

    Worked on AP2T, the national enterprise CRM for PLN, Indonesia's state electricity utility, built together with PLN Icon Plus and GSP. Field staff across the country use it to process customer requests: new electricity installations, power upgrades, and temporary lighting connections.

    I was hired as a full-stack engineer, and on AP2T my work was on the frontend. I built and shipped the interfaces for core modules covering installation requests, power adjustment flows, monitoring dashboards, and master data management. PLN's processes run through multi-stage approvals, so much of the work was step-based workflow UIs that keep a long approval chain understandable to the person in front of the screen, plus reusable patterns for multi-tab navigation shared across modules.

    The bigger structural piece was a Micro Frontend architecture, which let several teams build and release their modules in parallel instead of queueing behind one codebase. Alongside that I built reusable Vue components with Pinia for state management, so module teams started from shared building blocks rather than their own versions of the same thing.

    I also integrated the frontend with backend APIs to keep data in sync across modules, and wrote the Transfer of Knowledge documentation for handover, so the system stays maintainable after the delivery team steps away. Working with people from PLN Icon Plus and GSP meant translating enterprise requirements into frontend decisions that could survive national-scale usage.

    • Vue
    • Pinia
    • Tailwind CSS
    • Ant Design Vue
    • Micro Frontend
  4. Jul 2022 – Jun 2024FishlogFrontend Developer

    Frontend engineer at Fishlog, building ERP-scale interfaces across the company's internal platforms, from warehouse operations to blockchain-based seafood traceability.

    I led the frontend build of Fishlog's Warehouse Management System from the ground up. It became the tool the company and its partner cold storage operators run their day on, covering inventory and stock movement, batching workflows, QR-based product tracking, and direct integration with Fishlog's B2B marketplace. Seafood moves fast and in batches, so the interfaces had to stay usable for warehouse staff working at speed, with real-time sync over Socket.IO keeping every screen in the same state as the floor.

    I also built the frontend for the blockchain-based traceability system end to end: the admin panel that manages the on-chain ledger, and the public-facing views that let partners and consumers follow a product's journey from catch to delivery. Traceability only earns trust if the data is legible to someone outside the company, so the user-facing side got as much attention as the internal one.

    Partner onboarding was another piece I owned. Digital signature integration and automated MoU generation replaced a process that used to run on manual paperwork, which cut the time between a partner saying yes and actually being active.

    Across all of it I established reusable UI component libraries and starter boilerplates that became internal standards, so new projects began with settled patterns instead of each team reinventing them.

    • React
    • TypeScript
    • Tailwind CSS
    • Socket.IO
  5. Oct 2021 – Apr 2022PT Delameta BilanoEngineering Trainee · Technician

    Intensive engineering training program at PT Delameta Bilano covering microcontrollers, sensors, server infrastructure, and networking, all taught through hands-on projects rather than theory.

    For the final project I independently built a web application integrated with payment gateway hardware, pulling transaction data off the devices in real time and keeping it synchronized for monitoring. It was my first time working against hardware that does not forgive assumptions the way an API does.

    After the program I moved into a technician role centred on data work for Tol Bali Mandara toll road operations: writing SQL queries to manage and back up transaction data, and producing the operational reports the team relied on. I also supported maintenance of the electronic payment systems deployed along the road.

    This was where I learned what production really means. Toll transactions run continuously, money is attached to every record, and a missed backup is not something you fix later. That instinct for data integrity has stayed with me since.

    • SQL
  6. Feb 2020 – Aug 2020Kejar.idFrontend Developer · UI/UX

    My first engineering role, on Matrikulasi, an LMS used by students to work through their course material. I owned both sides of the interface: I designed the UI/UX first, then built it as the frontend engineer on the same project.

    That meant turning my own designs into a production application: responsive, reusable UI components in HTML5, SASS, and Laravel Blade, wired up to the backend through REST APIs. Implementing your own mockups teaches you quickly which design decisions are cheap and which ones quietly cost a week, and I have designed differently ever since.

    I also took part in a Ruby on Rails bootcamp during this period, mostly so I could follow what the backend team was doing instead of treating their side as a black box.

    • Figma
    • HTML5
    • SASS
    • Laravel Blade
    • REST API
03 /

Projects

  • Flagship · in production

    Baskit

    Company-wide internal AI platform where employees ask questions in plain language and get back reports, tables, diagrams, and flowcharts.

  • In production

    Baskit

    Baskit's operations core platform: the commercial ERP, integrated with Xero.

  • Card live · VA in progress

    Baskit

    Baskit's centralized payment service, consolidating every company payment flow in one place.

  • Migrated · live

    Baskit

    Baskit's live internal payment dashboard, moved off Supabase with zero downtime.

  • Open source · published

    Personal · open source

    Open-source, OpenAI-compatible security gateway that sits between applications and LLM providers.

  • Open source · public template

    Personal · open source

    Minimal Express 5, TypeScript, and PostgreSQL starter for new API services, with the production essentials already in place.

  • Shipped

    Fishlog

    Warehouse management system for Fishlog and its partner cold storage network.

  • Shipped

    Fishlog

    Blockchain-based seafood traceability, from catch to delivery.

  • Shipped

    Fishlog

    Partner onboarding with digital signatures and automated MoU generation.

  • Shipped

    Kandara Tech · PLN

    National enterprise CRM for PLN, Indonesia's state electricity utility.

  • Shipped

    Mapped Out Solutions · AU

    Task management tool for longwall mining operations in Australia.

  • Shipped

    BKN · ID

    Backend for BPASN, the body that rules on administrative appeals from civil servants facing dismissal.

  • Shipped

    Rihla.co.id

    Platform for Islamic pilgrimage agencies: hotels, Haramain train tickets, and vehicle rentals.

  • Shipped

    Umroh.in

    Pilgrim booking app and admin dashboard for Islamic pilgrimage agencies.

Flagship · in production2025 – Present

Baskit OS

Baskit

Company-wide internal AI platform where employees ask questions in plain language and get back reports, tables, diagrams, and flowcharts.

Baskit OS is the company-wide internal AI platform at Baskit. Employees ask questions in plain language and get back reports, tables, diagrams, flowcharts, and HTML outputs, without needing database access. Answers come from Xero accounting data and BCP operational data, and what each person sees is scoped by team-level permissions: finance data stays with finance, ops data with ops, everyone else gets general questions only.

I built it as sole engineer and own the whole stack: Google SSO with JWT authentication, the permission model, a provider-agnostic LLM layer, and deployment on AWS with Kubernetes, Helm, and GitHub Actions. I also wrote the platform's Architecture Design Document, reviewed by our Principal Engineer.

A model writing SQL against production data is the risky part, so every query runs through a sandboxed text-to-SQL tool: single-SELECT enforcement, permission-based table allow-lists, forced row limits, and tool and LLM call audit logs that outlive the chat session. The model writes the query. The guard decides whether it runs.

Features

  • AR Workflow: reconciles BCA and HSBC bank statements against Xero invoices. A 16-rule deterministic cascade does all the matching and every calculation, and an LLM only helps reason through the ambiguous cases. The model never does the math, so every match can be explained, reproduced, and audited. Before launch I resolved 6 critical gaps, including an idempotency bug that would have created duplicate financial records in Xero.
  • WhatsApp chatbot on Twilio: multi-step flows for brand assessment, order confirmation with customer accept or reject, and placing orders directly in WhatsApp, so partners never leave the app they use daily.
  • TypeScript
  • Node.js
  • PostgreSQL
  • Gemini
  • Xero API
  • Twilio
  • AWS
  • Kubernetes
Internal platform · private

In production2025 – Present

BCP

Baskit

Baskit's operations core platform: the commercial ERP, integrated with Xero.

BCP is Baskit's operations core platform, the commercial ERP the business runs on. It covers distributor and brand management, sales and purchase orders, invoicing, and third-party warehouse operations, with accounting integrated with Xero.

I work on it as a backend engineer. It is also the operational data Baskit OS answers questions over, so my work spans the platform from the commercial ERP up to the AI layer on top of it.

  • TypeScript
  • Node.js
  • Express
  • TypeORM
  • PostgreSQL
  • Xero API
Internal platform · private

Card live · VA in progress2025 – Present

Baskit Boost

Baskit

Baskit's centralized payment service, consolidating every company payment flow in one place.

Baskit Boost is the centralized payment service that consolidates all of Baskit's payment flows. Instead of each product integrating payments on its own, they go through one service.

Card payments are live through a bank payment gateway, and I'm currently extending it to virtual account payments via Xendit.

  • TypeScript
  • Node.js
  • Xendit
Internal service · private

Migrated · live2025 – Present

BPD: Supabase → AWS

Baskit

Baskit's live internal payment dashboard, moved off Supabase with zero downtime.

BPD is Baskit's live internal payment dashboard. It was still running on Supabase while the team relied on it every day, so the move to AWS had to happen without anyone noticing.

I led the migration: rebuilt the backend, then moved every record and file over one weekend. The production switch ran as a 3-minute GitHub Actions deployment, with zero downtime.

  • PostgreSQL
  • AWS
  • S3
  • GitHub Actions
Internal tooling · private

Open source · publishedOngoing

Palang AI

Personal · open source

Open-source, OpenAI-compatible security gateway that sits between applications and LLM providers.

Palang AI is an open-source, OpenAI-compatible gateway that sits between applications and LLM providers to enforce security policies. Apps and AI agents send sensitive data to LLM providers with little control over what leaks or what an agent is allowed to do; Palang drops in front of any OpenAI-compatible client.

It redacts Indonesian identifiers like NIK, NPWP, and phone numbers, detects prompt injection in layers (heuristics, then an ONNX classifier, then an optional LLM judge), enforces tool-call policy for AI agents, and catches leaks with canary tokens.

Every request goes to an async audit log with a monitoring dashboard. It runs on Bun and Hono, with Drizzle and PostgreSQL for storage and Transformers.js to run the ONNX classifier.

  • TypeScript
  • Bun
  • Hono
  • Drizzle
  • PostgreSQL
  • Transformers.js
Repo ↗

Open source · public templateTemplate

API Service Boilerplate

Personal · open source

Minimal Express 5, TypeScript, and PostgreSQL starter for new API services, with the production essentials already in place.

The goal is a fast start for new services with a clear structure and as little speculative abstraction as possible. It ships strict types with OpenAPI-driven validation, stateless JWT auth with rate-limited auth endpoints, liveness and readiness probes, graceful shutdown that drains in-flight requests, and structured logging with error codes generated from the OpenAPI spec.

It is the base for production services at work, including BFF and core services. A complete CRUD module shows the reference pattern, and CI runs the tests against a real PostgreSQL. Anything a service might not need, like caching, metrics, or refresh tokens, is left out on purpose until it is.

  • TypeScript
  • Node.js
  • Express
  • TypeORM
  • PostgreSQL
  • Jest
  • Docker
Repo ↗

Shipped2022 – 2024

Fishlog WMS

Fishlog

Warehouse management system for Fishlog and its partner cold storage network.

Fishlog's Warehouse Management System is the ERP-like tool the company and its partner cold storage operators run their day on: inventory and stock movement, batching workflows, QR-based product tracking, and direct integration with Fishlog's B2B marketplace.

I led the frontend build from the ground up, including the frontend architecture for its multi-tenant setup. Seafood moves fast and in batches, so the interfaces had to stay usable for warehouse staff working at speed, with real-time sync over Socket.IO keeping every screen in the same state as the floor.

It was adopted across Fishlog's entire company and partner network for day-to-day warehouse operations.

  • React
  • TypeScript
  • Tailwind CSS
  • Socket.IO
Shipped product · private

Shipped2022 – 2024

Fishlog Traceability

Fishlog

Blockchain-based seafood traceability, from catch to delivery.

The traceability system records a seafood product's journey on a blockchain ledger, to improve data transparency and auditability across Indonesia's fisheries supply chain.

I built the frontend end to end: the admin panel that manages the on-chain ledger, and the public-facing views that let partners and consumers follow a product from catch to delivery. Traceability only earns trust if the data is legible to someone outside the company, so the user-facing side got as much attention as the internal one.

  • React
  • TypeScript
  • Tailwind CSS
Shipped product · private

Shipped2022 – 2024

Fishlog Onboarding

Fishlog

Partner onboarding with digital signatures and automated MoU generation.

Partner onboarding at Fishlog used to run on manual paperwork. I built the client onboarding system end to end to replace it.

Digital signature integration and automated MoU PDF generation turned the paperwork into a flow, which cut the time between a partner saying yes and actually being active.

  • React
  • TypeScript
Shipped product · private

Shipped2024 – 2025

PLN AP2T

Kandara Tech · PLN

National enterprise CRM for PLN, Indonesia's state electricity utility.

AP2T is the national enterprise CRM for PLN, Indonesia's state electricity utility, built together with PLN Icon Plus and GSP. Field staff across the country use it to process customer requests: new electricity installations, power upgrades, and temporary lighting connections.

I built and shipped the interfaces for core modules covering installation requests, power adjustment flows, customer monitoring dashboards, and master data management. PLN's processes run through multi-stage approvals, so much of the work was step-based workflow UIs that keep a long approval chain understandable to the person in front of the screen, plus reusable patterns for multi-tab navigation shared across modules.

A Micro Frontend architecture let several teams build and release their modules in parallel instead of queueing behind one codebase, on shared Vue components with Pinia. I integrated the frontend with backend APIs to keep data in sync across modules and wrote the Transfer of Knowledge documentation for handover.

  • Vue
  • Pinia
  • Tailwind CSS
  • Ant Design Vue
Enterprise · private

ShippedFreelance

Block Builder

Mapped Out Solutions · AU

Task management tool for longwall mining operations in Australia.

Block Builder is a visual task management tool for longwall mining operations, built for Mapped Out Solutions in Australia. Crews track tasks on a digital block layout through a drag-and-drop pin system, in real time.

Everything is designed for the 60-inch touchscreen monitors used on site. I contributed frontend and feature work inside another engineer's existing delivery setup.

  • Next.js
  • TypeScript
  • shadcn/ui
  • React Query

ShippedFreelance

BPASN Appeals Backend

BKN · ID

Backend for BPASN, the body that rules on administrative appeals from civil servants facing dismissal.

BPASN is the state body, under BKN, that rules on administrative appeals from civil servants facing dismissal. I contributed to the backend behind its case management.

Case records there decide careers, so the work centred on optimized PostgreSQL queries and strict data integrity controls over case data, with the API documented in Swagger.

  • Golang
  • Echo
  • PostgreSQL
  • Swagger

ShippedFreelance

Rihla Travel

Rihla.co.id

Platform for Islamic pilgrimage agencies: hotels, Haramain train tickets, and vehicle rentals.

Rihla is a travel booking platform for Islamic pilgrimage, covering hotels, Haramain train tickets, and vehicle rentals in one place.

I worked with the client team from requirements through deployment, building the responsive booking flows as reusable components with full API integration across every booking feature.

  • Next.js
  • TypeScript
  • Ant Design
  • Zustand

ShippedFreelance

Umroh.in

Umroh.in

Pilgrim booking app and admin dashboard for Islamic pilgrimage agencies.

Umroh.in serves Islamic pilgrimage agencies on two sides: a pilgrim-facing booking app, and an internal admin dashboard staff use to manage packages, bookings, payments, and customer interactions day to day.

I worked with the client team from requirements through deployment, building both with reusable components and full API integration.

  • React Ionic
  • Next.js
  • TypeScript
04 /

Contact

Have a project in mind, or just want to talk engineering? My inbox is open.

iqbal.ramadhan3000@gmail.com

Bogor, Indonesia · GMT+7

LinkedIn ↗GitHub ↗CV ↓