The brief is usually wrong.
Finding that out is the job.

MSCLOUDTECH is a forward-deployed engineering practice. A senior engineer embeds with your team, works out what is actually broken, and ships the fix into your production. Eight years on AWS across petroleum, fintech, IoT and property. Four products shipped solo in the last twelve months. The person you talk to is the person writing the code.

8+ years

Production AWS shipped

4 products

Shipped solo in 12 months

128 rules

CostPatrol detection engine

5 scans

Published on costpatrol.io

The 5 scans are published on costpatrol.io and linked below, so you can open each one. Separate from those, two results from my own production work, not from a scan: an Aurora workload moved to DynamoDB plus OpenSearch, $4,200 to $630 a month, and a fix to unfiltered CloudWatch Metric Streams worth $6,900 a month. Those two are not linkable, so they are described rather than counted as proof.

Hired for one thing. The real problem was another.

Both of these started as a different request. Neither problem was in the brief, and in both cases the brief would have been the more expensive thing to build.

RAVINA DEVELOPMENTS · PROPERTY

Asked to connect their Meta ads and improve targeting. There was no ad account, no pixel and no conversion history, so there was nothing to optimise. The audit then found the live site advertising unit sizes the building does not have, and a delivery date already in the past.

Shipped instead: server-side conversion tracking deduplicated against the browser pixel, a bilingual product page carrying the real 70-unit schedule as an interactive floor plan traced from the architect's drawings, a teardown of ten competitors, and a 72-prospect call list.

Read the case study

ANONYMIZED SAAS ACCOUNT · FINOPS

Nobody asked for a database review. The scan found 17 Aurora clusters across two regions that could be merged nine into one and eight into one.

$2,192-3,132 a month found. The report is published, so this is one you can open and check rather than take my word for.

It is one of five published scans. The pattern repeats: the expensive thing is rarely the thing anyone suspected, which is why the review comes before the build.

Verify on costpatrol.io

FORWARD DEPLOYED

Inside a codebase I didn't write, since 2022.

Forward deployed is not a consulting engagement with a better name. Since 2022 I have been contracted into ATG Entertainment (80+ venues, billions of events a year), writing production code in their repositories, to their review standards, on their on-call rotation. Not advising from outside it.

since 2022

continuously embedded

1,441

commits in the client codebase

50

services contributed to

525

days with commits

Their process, not mine

Their standups, their design reviews, their PR standards, their out-of-hours rotation. On a platform with more than a hundred developers I ended up setting the PR review standard for the team. You do not get to import your own way of working. You earn the right to change theirs.

A codebase I inherited

50 services across a multi-tenant platform I did not write, built mostly by people who are still there. The first job in an embedded role is reading: understanding why the previous decision was made before proposing a different one. A lot of the value is knowing which parts not to touch.

Production responsibility

Zero-downtime database engine upgrades across staging, UAT and production. Out-of-hours on-call and live incident response on a revenue-critical platform. The difference between an advisor and an embedded engineer is who gets paged when the thing they recommended breaks.

A recommendation is cheap and reversible. Shipping it into someone else's production and carrying it afterwards is the part most engagements never reach. Commit figures measured 2026-08-21 from a private repository, so they are dated and self-reported.

Receipts. Not claims.

Specific work. Specific numbers. Specific stack. Sourced from real client engagements and public proof scans.

Scale & reliability

COSTPATROL

128 rules

AWS cost optimisation SaaS, first version shipped solo in two weeks. 38+ services, Slack-first, cross-account STS scanning.

LambdaDynamoDBEventBridgeStripe

BOODY

3 days

AI nutrition coach on WhatsApp/Telegram from concept to live users. Self-hosted LLM, 4-layer memory.

OllamaLanceDBTypeScript

VOWTRUST

1,000+ files

Institutional deal verification platform with automated KYC/AML checks and human-mediated deal rooms.

Next.jsLambdaPostgreSQLTerraform

DINTERO (OSLO)

50+ Lambdas

KYC/CDD compliance platform serving 4 Nordic countries from a single multi-tenant SaaS.

LambdaCognitoDynamoDBServerless

FinOps work

ANONYMIZED SAAS ACCOUNT

$2,192-3,132/mo

Found 17 Aurora clusters across two regions that could be merged nine into one and eight into one, $2,192-3,132 a month.

AuroraRDSMulti-regionverify on costpatrol.io

AURORA → DYNAMODB

85% cost cut

My own production work, not a scan: moved a search-heavy Aurora workload to DynamoDB single-table design plus OpenSearch, $4,200 to $630 a month.

DynamoDBOpenSearchMigration

MULTI-REGION ENV

Up to $1,112/mo

One scan found up to $1,112 a month: 35 findings across 7 AWS regions, covering NAT, RDS, EBS, S3, and Lambda.

NATRDSEBSS3verify on costpatrol.io

OBSERVABILITY

$6,900/mo

My own production work, not a scan: recovered by filtering CloudWatch Metric Streams that were shipping every metric to a third-party sink.

CloudWatchMetric StreamsPulumi

The revenue is on a public register.

MSCLOUDTECH OÜ files annual accounts in Estonia. Anyone can look them up in thirty seconds, without taking anything on this page on trust. The same filing lists one management board member, one shareholder and one beneficial owner, and all three are the same person.

2023

€99,553

Result+€25,060

2024

€109,405

Result+€4,303

2025

€98,184

Result−€20,023

Turnover and result, both as filed. 2025 was a loss and it is shown here because the register shows it either way.

Check the register

The scans are on the public record.

Every scan below ran on a real AWS account and links to a public CostPatrol report you can open in one click.

$2,192-3,132/mo

Aurora cluster sprawl: 17 clusters across two regions that could be merged nine into one and eight into one

$1,299-1,350/mo

Whole scan: 93 findings, 21 rules, 12 regions. The single Aurora I/O-Optimized finding inside it is $520/mo

DynamoDB billing mode: 3 tables on wrong mode

Up to $1,112/mo

35 findings across 7 regions

14 findings in one region, including one EBS volume dormant for 1,790 days

Want a scan on your own AWS account?

Who I have shipped for.

Real companies across six countries. Some are public, some are private. The work speaks for itself.

Norwegian fintech

Dintero

KYC/CDD boarding platform with 50+ Lambdas serving 4 Nordic countries.

Fortune Global 500 oil & gas

PETRONAS ICT

Downstream petroleum dashboards, SAP integration, real-time WebSocket APIs.

Malaysian RegTech

ReGov Technology

Blockchain identity (OMNI.iAM), serverless GraphQL, investment banking portal.

MedTech

Canary Detect

Multi-tenant diagnostics platform, HIPAA and SOC 2 aligned controls, sample tracking and audit trails.

Egyptian design studio

FourseeDesign

Booking site and internal dashboard on serverless AWS for $5/mo all-in.

Egyptian property developer

Ravina Developments

Acquisition stack from zero: server-side conversion tracking, bilingual product page, competitor teardown, outbound list.

What I build for myself.

Three production products shipped solo in twelve months using AI-augmented engineering. Proof I build, not just consult.

CostPatrol

AWS cost optimization and anomaly detection SaaS.

128 detection rules across 38+ AWS services. Slack-first delivery. Multi-tenant with cross-account STS. Stripe billing across 5 tiers.

TypeScriptLambdaDynamoDBEventBridgeStripeSlack

Read case study

Boody AI

WhatsApp and Telegram AI nutrition coach.

Self-hosted Gemma 4 26B for multimodal food recognition, selected by evaluating candidates on real food photos. 4-layer memory (SQLite metrics, LanceDB vectors, LLM-composed weekly notes, recent context). Custom MENA food database. Concept to live users in 3 days.

Node.jsTypeScriptOllamaLanceDBTelegrafBaileys

Private beta

VowTrust

Institutional deal verification for cross-border banking.

Dual-mode platform. Express runs a 15-45 sec automated KYC/AML pipeline. Institutional runs human-mediated deal rooms with bank officer and lawyer roles. 1,000+ TypeScript files.

Next.jsLambdaPostgreSQLTerraformServerless

SOC 2 design

The work behind the receipts.

Full write-ups of selected engagements. Architecture, decisions, trade-offs, and the production numbers.

Dintero KYC/CDD Platform

4 Nordic countries. 6 compliance providers. Built on Serverless + CDK.

Read case study

128 rules / 38+ services

CostPatrol FinOps SaaS

Multi-tenant, cross-account scanning, Slack-first alerts, Stripe billing.

Read case study

Millions of readings/day

Smart Water Monitoring

IoT ingestion, 15+ real-time alert types, leak detection at scale.

Read case study

70 units, 4 floors

Ravina Square Launch Stack

Conversion tracking, an interactive plan traced from the architect drawings, competitor teardown.

Read case study

Four principles. Each backed by how I actually work.

01

AI-augmented engineering

I built my own Claude Code skill ecosystem (20+ custom skills: PR review, security scans, content QA, project discovery). CostPatrol, Boody, and VowTrust each shipped solo in weeks instead of months.

02

Senior only

Senior and hands-on. No bootcamp grads, no junior pairs, no offshored throughput. The person you talk to is the person writing the code.

03

Tested under load

TDD with Jest plus LocalStack for Lambda. Integration suites hit real backing services. UAT before merge. I assume flash sales, throttling, and the stuff that breaks at scale.

04

The audit comes first

Before building what was asked for, I check it is the right thing. On the Ravina launch that meant finding a conversion event firing from 35 different URLs, and product copy describing units the building does not have. Neither was in the brief. Both would have been paid for in wasted ad spend.

I lead every project and write the backend.

My brother Youssef Hany, a senior frontend engineer, builds the React web and React Native or Flutter mobile apps. Hania Ayman helps with design. Remote-first since 2020.

Founder & Lead Engineer

Mohamed Shehabeldin

Backend and infrastructure engineer. Eight years shipping production systems on AWS across fintech, IoT, energy, and devtools. Cut an AWS bill by 85% on an Aurora migration. Shipped four products solo in 12 months with Claude Code. Founded MSCLOUDTECH in 2022.

mohamed@mscloudtech.io LinkedIn GitHub

Regular collaborators

YH

Senior Frontend Engineer

Youssef Hany

4+ years of React and Next.js for teams in the US, Europe and the Gulf, including Arabic, right-to-left apps for the Saudi market. Also builds React Native and Flutter mobile apps. Built the Alive & Well storefront (thisisaliveandwell.com) and worked on the FourseeDesign build.

HA

Design

Hania Ayman

Product design and user experience. Bridges design and engineering on client work where the interface matters as much as the system underneath.

In their words.

MSCLOUDTECH integrated quickly with our agile delivery, brought the AWS depth we were missing, and adapted to the way our teams already worked.

Their team-extension model carried us through the rollout of an event-driven architecture. The stability and scalability of what shipped speaks for itself.

Engineering Manager

UK theatre ticketing platform

I lead every project. Remote-first.
Registered in Estonia.

MSCLOUDTECH OÜ. Remote-first since 2020, registered in Estonia in 2022. Software development and AWS consulting. I write the backend and AWS myself. Youssef Hany builds the React web and mobile apps, and Hania Ayman helps with design. Youssef is paid by MSCLOUDTECH, so his work sits under the same contract and the same guarantee. No outsourcing to strangers, no junior pyramid. Clients across the UK, Norway, Malaysia, Egypt, US, and UAE.

Founded

2022

Registered

Tallinn, EE

Reg #

16617760

Delivery

I lead every project

Clients

6+ countries

Let's talk about what
you're building.

30-minute call. No pitch. I will tell you honestly if I am the right fit.