SAIF ALMOGRABE
AI · BACKEND · AUTOMATION
A portfolio designed to answer one question fast: what can Saif actually build?
SA / 001
I’m an Artificial Intelligence & Data Science student who learns by building useful, maintainable software.
My work sits where backend engineering, data, automation, and application security meet. I build REST APIs, PostgreSQL-backed applications, local-first browser tools, and n8n workflows.
Right now I’m strengthening the bridge between AI integrations and dependable software systems—with a practical eye for testing, debugging, security, and deployment.
Practical AI integrations shaped around structured inputs, useful outputs, and dependable workflows—not AI for decoration.
AI-assisted product features, data-driven prototypes, and intelligent workflow layers.
REST APIs with authentication, authorization, validation, predictable errors, and explicit trust boundaries.
Secure API foundations, authenticated services, and production-minded backend architecture.
Webhook-driven workflows that validate inputs, connect services, return structured data, and reduce repetitive work.
n8n workflows, API integrations, triage flows, and repeatable business-process automation.
Relational modeling, parameterized SQL, secure database access, permission design, and application-level validation.
PostgreSQL-backed applications with clear data models, ownership rules, and security controls.
Choose what you need. The portfolio will point you to the strongest evidence.
What are you looking for?
A Node.js + Express API designed around explicit trust boundaries: authentication, role-based access, validation, rate limits, IDOR protection, safe errors, and PostgreSQL persistence.
Documented security review, Postman test plan, protected ownership routes, and production-style configuration.
An existing commerce API needed explicit trust boundaries across users, roles, products, and orders.
A security-focused Express API with protected routes, validation, ownership controls, and PostgreSQL persistence.
Routes → validation and authentication → controllers → parameterized SQL → Neon PostgreSQL.
JWT verification, live role checks, RBAC, IDOR protection, rate limits, Helmet, controlled CORS, and safe errors.
A documented security review and reusable Postman plan covering the required authorization and failure cases.
A single-service full-stack task manager with JWT authentication, reminders, filtering, automatic database setup, and PostgreSQL persistence.
Same-origin frontend and API, documented production configuration, and a health endpoint for deployment.
Task tracking often splits the interface, API, and deployment into unnecessary moving parts.
An authenticated task manager with reminders, filters, automatic schema setup, and PostgreSQL persistence.
One Express service serves the static interface and API, backed by PostgreSQL on the same origin.
JWT authentication, a 32-character minimum secret, managed SSL support, restricted CORS, and a health endpoint.
A compact full-stack system that can be deployed as one Node web service with a managed database.
An import-ready n8n workflow that validates incoming tickets, classifies five issue types, assigns priority, calculates SLA deadlines, and returns structured JSON.
Credential-free workflow, sample payloads, transparent rule ordering, and automated tests for triage scenarios.
Support teams lose time manually reviewing and prioritizing every incoming ticket.
An import-ready webhook flow that validates requests, classifies issues, assigns priority, and calculates SLA deadlines.
POST webhook → validation and rule engine → classification and SLA calculation → structured JSON response.
Core n8n nodes only, no credentials, security rules evaluated first, transparent categories, and reusable output.
A consistent first-pass triage process packaged with sample payloads, documentation, and automated tests.
A lightweight browser app for tracking applications, statuses, notes, search, filters, statistics, and JSON backups—without accounts or a backend.
Local-first storage, explicit JSON export/import, responsive UI, and zero API keys or external data transfer.
Job seekers need one place to track applications, statuses, links, dates, and follow-up notes.
A responsive dashboard for CRUD operations, search, status filters, statistics, and explicit backups.
A framework-free browser interface stores records in localStorage and exports or restores JSON on demand.
No account, backend, database, API key, or silent data transfer; the user controls every backup.
A useful privacy-first tool that runs locally and keeps application data in the user’s browser.
The work is public, inspectable, documented, and connected to the implementation—not invented testimonials.
Six public repositories expose the code, project structure, and implementation history.
Inspect GitHub ↗ 02 / SECURITYThe E-commerce API documents authentication, RBAC, IDOR protection, safe SQL, rate limits, and a Postman test plan.
Inspect evidence ↗ 03 / TESTSThe ticket-triage workflow includes executable tests across validation, security, outage, access, billing, and default cases.
Inspect tests ↗ 04 / DOCUMENTATIONEach featured build explains setup, architecture, constraints, security choices, and what still comes next.
Read the docs ↗Clarify the real workflow, users, and failure cases.
Define data, boundaries, roles, and expected behavior.
Implement the smallest useful system cleanly.
Test permissions, inputs, edge cases, and outputs.
Document, deploy, observe, and improve.
Developing server-side features, PostgreSQL models, REST API integrations, authentication flows, validation, testing, debugging, and technical documentation.
Building public, documented systems across API security, PostgreSQL applications, browser-first tools, and n8n workflow automation.
Tafila Technical University—building practical software experience alongside academic study in AI and data science.
Google credential ID 24563886, listed in the CV featured on LinkedIn.
I’m open to internships, freelance backend work, automation projects, and technical collaborations.
Schedule a Meeting↗