Skip to content
Eldar Shakhvaliev
Discuss a project

Portfolio · 2026

Eldar Shakhvaliev

Fullstack developer with a backend focus · full cycle

Level: Middle+ → Senior · remote

PHP and Python, REST APIs, databases, integrations with external and corporate systems. Five years of commercial development (including a corporate portal for 1000+ users) and own products in production. Full cycle — from audit to deployment and support.

Download résumé (PDF)Discuss a project
5 yrs
commercial development
~22
projects in 2026
fancai
own product in production
1000+
users of a corporate portal
152-FZ
security & data compliance

02 — Process

How I work

I work by an engineering discipline — «specification → audit → implementation»: first a written spec as the single source of truth, then a separate plan audit, so blockers are caught before production, not after.

Architectural decisions, fact-checking, security and final responsibility stay with the engineer. This process discipline is what makes it possible to run dozens of projects in six months without losing quality.

Practices: a written specification, contract tests, secret-scan in pre-commit, atomic deploys, observability (monitoring and logs).

  1. 01researchgathering context and requirements
  2. 02plana written specification — the single source of truth
  3. 03audita separate plan audit — catches blockers before prod
  4. 04implementimplementation + contract tests

03 — Skills

Skills, backed by projects

Backend

  • PHP 7.4 / 8.x
  • Python 3.12
  • Laravel 11
  • FastAPI
  • aiogram 3
  • REST API
  • Celery / queues
  • WebSocket

CMS & platforms

  • WordPress (Plugin/Theme API, WooCommerce, FSE, ACF/SCF)
  • MODX Revolution
  • 1C-Bitrix
  • OpenCart / ocStore

Frontend

  • TypeScript / JS
  • React 19
  • Next.js 16
  • TanStack Query
  • Zustand
  • responsive layout
  • CSS / SCSS

Data & infrastructure

  • PostgreSQL / pgvector
  • MySQL / MariaDB
  • Redis
  • Docker / Compose
  • Caddy / Nginx
  • VPS / Ubuntu
  • monitoring (Grafana / VM)
  • CI/CD

Integrations

  • payments (YooKassa, TG Payments)
  • marketplaces Ozon/WB/YM
  • Active Directory / LDAP
  • OAuth2 / Keycloak
  • Firebase FCM
  • enterprise buses (ESB)
  • Jira API

AI / ML in products

  • LLM (OpenRouter, Gemini, Vertex)
  • provider abstractions
  • image generation (FLUX.2)
  • pgvector / semantics

Security & data compliance

  • security audit
  • 152-FZ / personal data
  • hardening (UFW / fail2ban)
  • secret-scan
  • compliance (281-FZ, FZ-38)

Each skill is backed by proof projects — links to cases will appear on the project pages.

04 — Experience

Work experience

  1. 2026 — present

    Independent development

    • Own products (fancai, telegram-bot) + full-cycle client work.
    • ~18 commercial projects in six months: WordPress, MODX, Bitrix, OpenCart, Laravel, FastAPI, Next.js.

  2. H2 2025

    Transition period

    • Started own products as a sandbox for a modern backend stack (Python/FastAPI, PostgreSQL, Celery, Docker).
    • fancai (08.2025) and telegram-bot (09.2025) — a bridge between employment and independent practice.

  3. 11.2020 — 12.2025

    BIA Technologies · PHP/WordPress developer

    • Key developer of the BiaPortal corporate portal (1000+ users, a team of three).
    • Integrations: enterprise bus (ESB; 1C / AD / HR), SSO via Active Directory, org-structure module (hierarchical SQL + Redis cache), role system, Jira API.
    • Growth: frontend / markup (2020–2022) → backend and integrations (2022–2025).

Before BIA: Seotime (2020), Business Buro (2019–2020), Upwork (2018–2019).

05 — Services

Services

Independent full-cycle contractor: I take a task from requirements to launch and support.

Websites & web apps

You need a site or a web service built for your case — not a template you will have to redo.

I design and build turnkey: corporate sites, catalogs, landing pages, product web apps — from requirements to launch.

For companies and product founders.

cases: idg-capital · fancai · falstem

Maintenance & improvements

The site works, but changing it is scary: the previous developer left, and nobody knows the code.

I join the existing codebase, figure it out, fix and carefully evolve it — no rewrite from scratch, no downtime.

For owners of live sites: WordPress, MODX, Laravel, custom systems.

cases: decore · ecoportal · gehwol · arctic

152-FZ & personal data

Site forms and analytics collect personal data — non-compliance with the Russian data law risks fines and blocking.

I bring the site into compliance with 152-FZ: consents, privacy policy, cookie notice, data storage in Russia.

For any business whose site collects requests, sign-ups or analytics.

cases: cookie-multi (6 sites) · infrastructure SaaS

Seven more directions — from migrations to automation.

  • Backend, APIs & integrations

    For companies whose site exchanges data with other systems.

    Systems are not connected: data is moved by hand, processes depend on people.

    I design REST APIs and connect the site to external services — payments, marketplaces, CRM, corporate systems; background automation included.

    cases: sharifa-backend-api · arctic · telegram-bot

  • Migrations

    For those who outgrew a site builder or are changing platforms.

    The platform got too small: the builder limits you, the theme resists changes, the data is locked in.

    I move sites between platforms and transfer data via API — keeping content, URLs and search positions.

    cases: smartway · retreat · v72 · plane

  • Technical & security audit

    Before a major rework, a site purchase, or after an incident.

    The site is slow, crashes or behaves oddly — and nobody can say what is inside.

    I review code, database and server: vulnerabilities, performance bottlenecks, technical debt. You get a prioritized fix plan.

    cases: otzapoya · sharifa-backend-api · puppycity

  • DevOps & infrastructure

    For teams that need their own server without a full-time admin.

    Shared hosting is not enough anymore, and an unattended server quickly becomes a risk.

    I set up and maintain: server, containers, SSL certificates, hardening, backups, monitoring.

    cases: plane · infrastructure SaaS

  • Bots & automation

    For businesses that live in Telegram or want to offload support.

    Routine — requests, payments, subscriptions, mailings — eats the team’s hours every day.

    I build Telegram services with payments, subscriptions and an admin panel; I automate business processes.

    cases: telegram-bot

  • SEO & performance

    For sites where search is a sales channel.

    The site loads slowly and ranks poorly — traffic and leads are lost silently.

    I clean up technical SEO: structured data, loading speed, caching, indexing.

    cases: homidomi · grade-law · smartway

  • AI integration in products

    For product teams with a specific AI-shaped task.

    Your product has tasks that are faster and cheaper to solve with language models than by hand.

    I embed AI features: text parsing and classification, image generation, semantic search.

    cases: fancai · plane

Discuss a project

Didn’t find your task? Describe it — I’ll tell you honestly whether I can help and how.

06 — Contact

Let's talk about your project

Open to employment (backend / fullstack) and full-cycle client work. Remote.

Download résumé (PDF)Message on Telegram