Nikheel Kumbhani Email me

Full-stack developer building APIs, cloud infrastructure & AI agents Based in Surat, India.

I build Node.js and TypeScript backends, containerized cloud infrastructure and LLM agent tooling. Open to roles and contract work with teams in Germany and Europe.

Three tracks

One profile, three tracks. I write TypeScript, JavaScript, Python, SQL and Bash.

Cloud and DevOps

I containerize backend services, write the infrastructure as code, and build the pipelines that ship them.

  • VitaTrack: 9 backend services, a 13-service Docker Compose setup, and Kubernetes manifests, Helm charts, Terraform and Ansible to take it to a cluster.
  • SecureProxy: GitHub Actions runs the Jest suite and a Trivy vulnerability scan on every build, on a multi-stage Docker image with a non-root user.
  • Monitoring: Prometheus metrics, Grafana dashboards, Elasticsearch log aggregation and custom alerting rules in VitaTrack.

Docker, Docker Compose, Kubernetes, Helm, Terraform, Ansible, Nginx, GitHub Actions, Trivy, Prometheus, Grafana, Elasticsearch, Linux, Bash

AI agents

I build LLM agents that reason over APIs and codebases, and I test that the reasoning is right.

  • GraphMind reads a GraphQL schema at runtime and generates its own tools from it, so it needs no code changes when the API changes.
  • An evaluation suite of predefined question and answer pairs checks that GraphMind’s reasoning is correct, not just plausible-sounding.
  • GraphServerMCP turns a TypeScript/JavaScript codebase into a dependency graph an agent can query, with queries under 10 ms.

LLM function calling, Groq API, GraphQL, DataLoader, MCP, ts-morph

Full-stack

I build APIs and web apps end to end, with authentication, API security and delivery handled.

  • Patoliya Infortech: developing full-stack features across client interfaces and backend services, with automated test coverage preventing production regressions.
  • ChaseFlow: 20+ REST endpoints with JWT authentication on a PostgreSQL schema with 10+ indexes, built with Prisma.
  • MediConnect: a Next.js 16 portal with 10 backend API modules and JWT role access for patients, doctors and admins.

TypeScript, JavaScript, Node.js, Express.js, React, Next.js, Redux Toolkit, Tailwind CSS, Zustand, SWR, PostgreSQL, MongoDB, Redis, Prisma, Sequelize, Mongoose, GraphQL (Apollo Server), Socket.IO, BullMQ, Swagger/OpenAPI, Jest, Supertest

Selected work

Eight projects across cloud infrastructure, AI agents and full-stack systems. Three in detail, five in brief.

SecureProxy

Cloud and DevOps · Full-stack

A secure URL proxy platform with its own CI/CD pipeline and a written deployment runbook for an Ubuntu VPS.

  • SSRF protection with DNS validation and private IP blocking, plus SHA-256 API key hashing with per-key salts and tiered rate limiting.
  • A GitHub Actions pipeline runs the Jest suite and a Trivy vulnerability scan on every build.

Docker (multi-stage), GitHub Actions, Jest, Trivy, Nginx, Let’s Encrypt, PM2

GraphMind

AI/ML and agents

An autonomous AI agent and GraphQL API.

  • Reads a GraphQL schema at runtime and generates its own tools from it, so API changes need no code changes.
  • An automated evaluation suite of question and answer pairs checks the reasoning is correct, not just plausible-sounding.

LLM function calling, Groq API, GraphQL, DataLoader

MediConnect

Full-stack

A multi-role healthcare portal with appointment management and administrative oversight.

  • 10 backend API modules with JWT-based role access control, and a Next.js 16 frontend with Recharts analytics dashboards.
  • AWS S3 for secure document uploads.

Next.js 16, Zustand, SWR, Recharts, JWT, AWS S3

More projects

VitaTrack

Cloud and DevOps

A cloud-native microservice architecture: 9 backend services on PostgreSQL, MongoDB and Redis, run locally as a 13-service Docker Compose setup, with Kubernetes manifests (RBAC, network policies, ingress), Helm charts, Terraform and Ansible.

PostgreSQL, MongoDB, Redis, Docker Compose, Kubernetes, Helm, Terraform, Ansible, Prometheus, Grafana, Elasticsearch

GraphServerMCP

AI/ML and agents

An MCP server that parses a TypeScript/JavaScript codebase with ts-morph into an in-memory dependency graph an AI agent can query. Call resolution reached 100% accuracy with a two-phase scan, and queries stay under 10 ms with LRU caching and live file watching.

MCP, TypeScript/JavaScript, ts-morph, LRU caching, file watching

ChaseFlow

Full-stack · Cloud and DevOps

A freelance invoice and client management API: 20+ REST endpoints with JWT authentication on a 4-table PostgreSQL schema with 10+ indexes, CHECK constraints and triggers. Cron-based overdue invoice detection with one-way status transitions and paid-invoice locking.

PostgreSQL, Prisma, JWT, REST, cron, Docker Compose

Action-Hub

Full-stack

A real-time auction platform on the MERN stack with automated balance management, refunds for losing bidders and commission tracking. Three roles (Admin, Seller, Buyer) with business rule enforcement and Cloudinary multi-image uploads.

MongoDB, Express, React, Node.js, Cloudinary

Social Media Backend API

Full-stack · Real-time backend

A backend API with real-time chat and background jobs: 7 controllers and 6 data models, Socket.IO chat and BullMQ job processing, Twilio SMS and Nodemailer email notifications (Handlebars templates), documented with Swagger/OpenAPI.

Node.js, TypeScript, Socket.IO, BullMQ, Twilio, Nodemailer, Handlebars, Swagger/OpenAPI

AWS

Built with S3, studied 26 more services

S3 handles secure document uploads in MediConnect. The services below I have studied but not yet used in a project.

Compute and containers
EC2, Lambda, ECS, EKS, Auto Scaling
Storage
EBS, EFS
Databases
RDS, Aurora, DynamoDB
Networking and delivery
VPC, Route 53, CloudFront, API Gateway, Elastic Load Balancing
Security and identity
IAM
Messaging and integration
SQS, SNS, EventBridge, Step Functions, SES
DevOps and operations
CloudWatch, Systems Manager, CodePipeline, CodeDeploy
AI
Bedrock

Foundations

Algorithms
Graph traversal for code analysis in GraphServerMCP, and memory-conscious in-memory caching.
Networking
Nginx reverse proxy, DNS resolution handling, Kubernetes network policies and ingress routing.
Linux
Ubuntu VPS with systemd process supervision, UFW/iptables firewall rules, SSH hardening and Bash deployment scripts.
Concurrency
Event-driven async I/O, multi-process clustering with PM2, and worker queues with BullMQ and Redis.
Security
SSRF prevention with DNS validation and private CIDR blocking, SHA-256 API key hashing with per-key salts, tiered rate limiting, Trivy container scanning and Helmet.js headers.
Debugging
Isolating regressions with automated integration tests and structured logging.

Experience

Full Stack Developer

Patoliya Infortech

January 2026 to present

  • Engineer core full-stack features across client-facing interfaces and backend services in a live production environment.
  • Implement automated unit and integration test suites to safeguard against regressions and ensure dependable releases.
  • Take direct ownership of features from technical design through code review, testing, and production deployment.

Data Analytics Intern

IBM SkillsBuild

Virtual Internship

  • Executed end-to-end data analytics pipelines on structured datasets: data wrangling, exploratory analysis, and feature engineering.
  • Engineered interactive visualizations and analytical dashboards using Python (Pandas, NumPy, Matplotlib) and Tableau to surface actionable insights.

Education

2022 to 2026

B.Tech in Computer Engineering

Gujarat Technological University

Contact

nikheelkumbhani001@gmail.com

Based in Surat, India (IST, UTC+5:30). Email is the quickest way to reach me.