Featured, 6 Oct 2026
GitHub Actions OIDC Trust Policy for AWS
GitHub now issues two OIDC subject formats. Here is a trust policy that accepts both, a way to prove it against every repository, and a safe order for retiring keys.
Shahid Yousuf Senior Software Engineer
Building software end to end for 10+ years across Frontend, Backend, Distributed Systems, Databases, Observability, AWS Cloud and AI-Enabled Applications.
Recently shipped
The right engineer, with modern AI tools, workflows, processes and capabilities, delivering with you and your team.
Saves time
No handoff delays
Saves money
No resource waste
Better product
No outdated processes
Live on GitHub
4,122
contributions, last year
I help businesses design, build and run the software they depend on, from the first version of a product to the systems that keep it fast, secure and reliable as it grows.
Bring me in as a freelance engineer to build it, or as a consultant to review your architecture, plan a migration or guide your team. Either way, you work directly with me across the full lifecycle: understanding your goals and product requirements, planning and estimation, development workflows and CI/CD, secure deployments, observability, and ongoing maintenance and support.
See past workMost software delays come from handoffs: a brief rewritten for the next person, context lost between roles, a decision waiting on the next meeting. With AI and modern tooling now covering much of the work that used to need extra hands, one experienced engineer can take a well-scoped project from the first conversation to production without those gaps.
I work with AI-enabled software engineering workflows: AI-assisted development and code review alongside automated tests, infrastructure as code and CI/CD, which take care of the repetitive work. My time goes on the decisions. When a project genuinely needs more people, I will say so at the start and help you plan for it.
Featured, 6 Oct 2026
GitHub now issues two OIDC subject formats. Here is a trust policy that accepts both, a way to prove it against every repository, and a safe order for retiring keys.
Deny a verb or assert a state? A practical guide to choosing between SCPs, RCPs and declarative policies, with examples and a safe rollout checklist.
AWS13 min read
The order of operations for moving an AWS account between organizations: invite from the destination, enroll in Control Tower, then close the sign-on, guardrail and old-role gaps.
AWS12 min read
My own product, 2026
A paid daily practice platform for UPSC, State PSC, SSC, banking, railways and defence aspirants. I designed, built, launched and operate the whole product myself.
Product DesignFull-Stack Web ApplicationAI-Assisted ContentOnline PaymentsSEOCore Web VitalsMobile-First Design
My own product, 2026
A personal voice AI assistant I built end to end: a native iPhone app with natural, interruptible conversation and a backend that lets the AI act on real accounts.
Native iOSReal-Time VoiceStreaming SpeechLLM Tool UseOAuthPythonAutomated Testing
Cybersecurity managed services provider, 2026
For a cybersecurity managed services provider, I set up AWS Control Tower over a live multi-account estate, rolled out preventive guardrails and CIS security monitoring, cleaned up identity and access, and built a safe method for moving accounts between AWS organizations.
AWS Control TowerAWS OrganizationsService Control PoliciesResource Control PoliciesDeclarative PoliciesIAM Identity CenterAWS Security HubCIS BenchmarkAWS ConfigIAM Access AnalyzerCloudTrailCloudFormation StackSetsTerraformGitHub OIDCPython
Share your goals, timeline and any constraints, whether you need it built or want expert advice. I read every message myself, as the engineer who would build it, and reply with a clear view on approach, scope and next steps.