Day · 09:00
By day

Fintech Engineer @ ZagTrader

SWIFT & FIX systems, exchange connectivity and AI test automation in C#/.NET and TypeScript.

Enter the day
Mohammad Otaqi — Software Engineer

MOHAMMADOTAQI

Night · 23:00
By night

Maker & app builder

I design and ship products after hours — mobile apps and SaaS in Flutter, React Native, Next.js & Django.

Enter the night
Day — The engineer

I engineer systems wherereliability isn't optional —it's the product.

Software Engineer building fintech infrastructure at ZagTrader by day — SWIFT & FIX messaging, exchange connectivity, an AI test-automation platform — and shipping my own mobile apps and SaaS products by night.

Settlement
MT54x
SWIFT settlement (ISO 15022)
0
platforms built
0
venue & feed integrations
0
years building
Recognition
  • +Google — IT Support (2023)
  • +Google — Project Management (2023)
  • +DataCamp — Python, NumPy & pandas
  • +Top 24 Finalist — Ahli Fintech Hackathon (2025)
  • +Best Member — GDVC (2024)
B.Sc. Computer Science
Al Hussein Technical University — 2025
The system

Messages that settle trades.

At ZagTrader I build the gateway between markets, custodians and banks — routing, validating and archiving SWIFT & FIX messages across the post-trade lifecycle.

SWIFT
MT54x
FIX
Engine
Banks
/ Custody
Settlement
Engine
Exchanges
SQL
Server
Market
Data
Experience
  1. Sep 2025 — Present

    ZagTrader

    Software Engineer

    Post-trade and market-data infrastructure for a capital-markets platform.

    • Built the Swift Suite — Engine, Bridge & Monitor — an end-to-end SWIFT securities-settlement platform processing ISO 15022 MT540–MT548, MT564 and MT598/599 with a maker-checker approval workflow.
    • Engineered the Swift Engine: an async task pipeline (reader → validator → builder → SWIFT validator → sender → archiver) that builds MT messages from SQL Server templates and validates them with Prowide via IKVM (Java↔.NET interop).
    • Built the Swift Bridge gateway relaying messages between the engine (TCP / MessagePack) and external operators — Fineksus (SOAP/CoreWCF), Tadawul·Edaa (SoupBinTCP) and SFTP — and rebuilt the Tadawul·Edaa templates from the ISO 15022 spec, fixing real network NAKs.
    • Designed the platform's public REST API (55 OpenAPI operations): scoped, rotatable API keys with deprecation/sunset headers, idempotent submission, signed webhooks with an event outbox and RFC 7807 errors — 59/59 endpoints verified live.
    • Added Azure Key Vault / HashiCorp Vault secrets management, an RBAC permission system with custom roles, and offline TOTP 2FA enrollment across the suite.
    • Built the GUI and production release pipeline for ZT-AMTP, a multi-agent LLM platform that crawls web apps and generates, runs and certifies Playwright tests (Temporal, Fastify, Drizzle/PostgreSQL, React); raised the customer-app pass rate from 41% to 67.7%.
    • Delivered FixPortal to production: FIX validation against QuickFIX/n dictionaries, per-market rules and message diffing — ASP.NET Core + EF Core + PostgreSQL + React, 170+ automated tests and CI/CD.
    • Integrated exchange connectivity: Crypto.com FIX (HMAC logon, TLS pinning, market data + order entry), AIX FIX reference data, BVB SOAP reference data (845 instruments) and CoinMENA REST with Ed25519 signing — alongside CMC Markets FX and OKX (WebSocket v5) connectors.
    • Built the IDC historical-data reader (.NET 10, WebSocket → SQL Server) that replaced a legacy PHP job and added intraday resolutions.
    • Created WatchList dashboard (React + SignalR) for real-time market-data visualization; built the Swift Monitor dashboard (React 19 + TypeScript, SignalR) with audit trail, template versioning/diff, and OTP/2FA auth.
    • Shipped ZagKeyGenWeb hardware-bound licensing (TripleDES, HMAC-SHA256, AES-256/PBKDF2) to production on Docker Compose with PostgreSQL, role-based access and an audit trail.
    • Migrated five Swift/FIX repositories from SVN to Gitea; analyzed ZagTraderConnector integrations and database architecture to inform middleware planning; packaged apps via Inno Setup.
    C#.NET 10ASP.NET CoreReactTypeScriptSignalRSWIFTFIXSQL ServerPostgreSQLDockerPlaywright
  2. Jul 2024 — Mar 2025

    Lightning Gate (JPECO)

    Flutter & Mobile Developer

    Built and shipped cross-platform mobile applications.

    • Developed mobile apps with Flutter & Firebase, focused on stability and scalability.
    • Partnered with designers and developers to deliver features and fix bugs, improving UX and reliability.
    FlutterDartFirebase
  3. Jul 2023 — May 2025

    Jordan Esports Federation (JEF/JEG)

    Esports Staff

    IT support and officiating for national esports tournaments.

    • Provided IT support and served as a referee during official esports tournaments.
    • Ensured smooth execution of competitive events by managing technical infrastructure.
    IT SupportEsports
  4. Nov 2021 — Jul 2024

    HTU Student Activities

    Technical Support System Controller

    Managed IT systems and coordinated technical support for student events.

    • Managed IT systems and coordinated technical support for student events and activities.
    • Led technical operations for large-scale events, including MACH1 with AreoSquad at King's Academy.
    IT SupportEvent Tech
  5. Jun 2023 — Oct 2023

    HTU Online Learning Center

    Technical Support & Web Development

    Contributed to the HTUx platform and supported staff.

    • Drafted user manuals and technical documentation to streamline onboarding.
    • Delivered IT support that cut issue-resolution time and improved workflow continuity.
    WebDocsSupport
Systems — ZagTrader

What I've built on the clock.

05 systems
  1. 01

    Swift Suite

    SWIFT securities-settlement platform (Engine · Bridge · Monitor) and its public API.

    2025—26

    End-to-end platform processing ISO 15022 MT540–548, MT564 and MT598/599 settlement messages. An async .NET engine builds & validates messages (Prowide via IKVM); a bridge relays to Fineksus / Tadawul·Edaa / SFTP; a React + SignalR monitor adds real-time status, audit, maker-checker approval, RBAC and TOTP 2FA. A public REST API (55 operations) exposes it to clients with scoped API keys, idempotent submission and signed webhooks; secrets load from Azure Key Vault or HashiCorp Vault.

    C# · .NET 10 · React · SignalR · IKVM · SQL Server · OpenAPI
  2. 02

    ZT-AMTP

    AI-driven test-automation platform.

    2026

    A multi-agent platform that crawls a web app, generates test cases with LLMs, writes Playwright tests and runs and certifies them, orchestrated with Temporal. I built the GUI — a Fastify + Zod + Drizzle API on PostgreSQL and a React + TanStack Query front end with live run updates (LISTEN/NOTIFY → SSE), per-project RBAC, GitHub / Entra SSO and LLM token accounting — and the production release pipeline. Raised the customer-app pass rate from 41% to 67.7%.

    TypeScript · Fastify · Drizzle · PostgreSQL · React · Temporal · Playwright
  3. 03

    FixPortal

    FIX-protocol administration portal — in production.

    2025—26

    Validates FIX messages against QuickFIX/n dictionaries (standard, engine and uploaded), with per-market rules, saved messages, diffing and a file catalog; manages customers, markets, billing and sessions. ASP.NET Core + EF Core on PostgreSQL with a React front end, JWT token versioning and login rate limiting; 170+ automated tests and push-to-main CI/CD.

    ASP.NET Core · EF Core · PostgreSQL · React · QuickFIX/n
  4. 04

    ZagKeyGenWeb

    Cryptographic, hardware-bound licensing — in production.

    2025—26

    Generates and validates software licenses bound to host, database and operator limits, with tamper detection — TripleDES + HMAC-SHA256 integrity and AES-256/PBKDF2 secure-config decryption. Runs in production on Docker Compose with PostgreSQL, Admin/Operator roles and an audit trail.

    ASP.NET Core · PostgreSQL · Docker · TripleDES · HMAC · AES
  5. 05

    Exchange & market-data connectors

    Crypto.com, AIX, BVB, CoinMENA, CMC Markets, OKX & IDC.

    2025—26

    Crypto.com FIX end to end (HMAC-signed logon, TLS certificate pinning, market data and order entry), AIX FIX 5.0 SP2 reference data, BVB SOAP reference data across 845 instruments, a CoinMENA FIX ↔ REST order bridge with Ed25519 signing, a CMC Markets FX reader, an OKX connector (WebSocket v5) and an IDC historical reader (WebSocket → SQL Server) that replaced a legacy PHP job.

    C# · FIX · WebSocket · SOAP · Ed25519 · SQL Server
Night — after hours

When the markets close, the building begins.

Night — Selected work

Things I build after hours.

10 projects
  1. 01Mobile

    Sudur

    Quran-memorization app with AI recitation grading.

    Play closed testing

    View project
  2. 02Web

    Mabsim

    Multi-tenant clinic management SaaS.

    Pre-launch

    View project
  3. 03Web

    Wared

    Inventory & warehouse system for distributors.

    Pre-launch

    View project
  4. 04Mobile

    Word Oasis

    Arabic letter-wheel crossword game.

    Play closed testing

    View project
  5. 05Mobile + Hardware Live

    ShieldKin

    Family-safety wristband, optional ring + companion app.

    In development

    View project
  6. 06Web + Mobile Live

    MOT

    Gaming community platform — mobile app + n0tmot.com.

    App on Play internal testing

    View project
  7. 07Mobile

    Masra

    Islamic education platform — Flutter app + Node/Prisma API.

    View project
  8. 08Mobile

    Sehleh

    On-demand local-services marketplace.

    View project
  9. 09Web

    Tabayyun

    AI Arabic news & image-tampering verifier.

    View project
  10. 10Web

    FactQuest

    Gamified media-literacy trainer.

    View project
Also on the bench
  • 11

    onecli

    Developer tool

    My multi-model AI coding CLI: one streaming REPL over the Claude, Codex, Gemini and Qwen CLIs with mid-chat model switching, a shared project “brain” that syncs context files, a planner → workers → auditor pipeline, and a council mode where several models answer and one judges.

    Node.js · Zero dependencies · LLM orchestration
  • 12

    Rental marketplace

    Two-sided marketplace · in progress

    Apartment rentals with long-term leases and nightly stays over one inventory — building stack diagrams, 2D floor plans and 360° tours, and a double-entry ledger with commission at lease origination.

    NestJS · Prisma · PostGIS · Flutter · Next.js
  • 13

    QrBooking

    SaaS for cafés · in progress

    A QR code per table opens the menu and reveals the Wi-Fi password once the café's ordering rule is met; an on-site router agent rotates passwords nightly. Multi-tenant with PostgreSQL row-level security.

    Next.js · PostgreSQL · RLS · WebSockets
Beyond the desk

Hackathons, awards & community.

Ahli Fintech Hackathon

Ahli Fintech Hackathon

Top 24 Finalist · 2025

Tech 3arabi Hackathon

Tech 3arabi Hackathon

7th Place · 2025

GDVC

GDVC

Best Member Award · 2024

ACM @ HTU

ACM @ HTU

Treasurer & IT Support

The toolkit

What I build with

01

Languages

C#TypeScriptJavaScriptDartPythonJavaSQL
02

.NET & Backend

.NET 8–10ASP.NET CoreSignalREntity Framework CoreWeb APIsBackground ServicesNode.js · FastifyNestJSDjango · DRFREST / OpenAPIWebhooks
03

Fintech & Protocols

SWIFT (ISO 15022 · MT540–548)FIX 4.4 / 5.0 SP2 (QuickFIX/n)SoupBinTCPITCHSOAP / CoreWCFSFTPMarket dataJoFotara e-invoicing
04

Frontend & Mobile

ReactNext.jsFlutterReact Native · ExpoTanStack QueryTailwind CSSMaterial UIVite
05

Security & Interop

Cryptography (AES · 3DES · HMAC · PBKDF2)Ed25519 · TLS pinningJWTOAuth · Entra SSOOTP / 2FARBACAzure Key VaultHashiCorp VaultIKVM (Java↔.NET)Prowide
06

Data & Tooling

SQL ServerPostgreSQLSupabaseValkey / RedisPrisma · DrizzleMongoDBFirebaseDocker ComposeCI/CD (GitHub · Gitea · EAS)Git / GitHubMessagePackInno Setup
07

Testing & Automation

PlaywrightVitestxUnitJestTemporal workflowsLLM test agents
08

Local LLMs & Hardware

Ollama · LM Studio · llama.cppGGUF / K-quantsGPU + VRAM sizingCUDA · layer offloadLocal OpenAI-compatible APIs · Open WebUIHugging Face (Llama · Qwen · Mistral)PC / workstation builds
09

AI & Agentic Engineering

Prompt & context engineeringStructured / JSON outputPrompt cachingTool / function callingAgent harnessesMCP (Model Context Protocol)Claude Code · Cursor
Contact

Let's buildsomething that holds.

Get in touchRésumé

Targeted 2-page CVs: .NET & Fintech Backend · Full-Stack & Mobile