Backend work senior teams can't offload.
8+ years shipping the kind of engineering that only shows up when it matters: hacked-site recovery at portfolio scale, performance rescues under load, and custom WooCommerce engines no plugin can model.
I'm Tawhidul — a Senior WordPress backend engineer based in Dhaka, working remote with teams across the US, EU, and APAC.
I get called in when off-the-shelf plugins can't model the rules, when production is on fire under load, or when a compromised portfolio needs a permanent fix — not another cleanup. I've delivered 300+ site recoveries, 30–60% performance gains, and 20+ custom plugins that replaced paid third-party licenses.
The stack, honed under load.
Not a laundry list — the tools I reach for when engineering time is expensive and correctness is non-negotiable.
A track record of hard, quiet wins.
Three roles, one throughline: fixing what other engineers avoid, and measuring the outcome in dollars saved and outages prevented.
- ▹Built a centralized multi-site security automation platform (cron detection, auto-quarantine, hardening) protecting 300+ client sites — re-infection rate near zero.
- ▹Cut performance overhead 30–60% by auditing MySQL queries, adding indexes, enabling object caching, and pruning bloat.
- ▹Engineered a custom WooCommerce pricing + payment layer that replaced 3 paid third-party plugins.
- ▹Delivered zero-data-loss WooCommerce migrations with post-migration reconciliation scripts.
- ▹Built REST + webhook integration layer replacing manual hand-offs with end-to-end automated order pipelines.
- ▹Architected 20+ custom PHP plugins — eliminated recurring license costs across 20+ sites.
- ▹Built role-based WordPress platforms with custom admin dashboards and audit trails for distributed US teams.
- ▹Engineered automated quiz platform + email-journey workflows handling thousands of monthly events.
- ▹Implemented API-based payment and order processing with WooCommerce ↔ back-office state syncing.
- ▹Deployed and tuned the Zoho One ecosystem — eliminated duplicated data entry across CRM/Books/Campaigns/Desk.
- ▹Built custom PHP apps for reporting, lead routing, and ops automation.
- ▹Built custom PHP WordPress themes from Figma/PSD/XD using Customizer API, Meta Boxes, CPTs, and Taxonomies — no page-builder bloat.
- ▹Diagnosed and resolved performance + bug backlogs across production sites — no emergency escalations.
- ▹Set up GA + GTM for traffic, conversion, and event insights.
- ▹Recovered hacked sites and applied hardening (permissions, .htaccess, login protection, scheduled scans).
- ▹Performed zero-downtime migrations with DNS cutover and post-migration verification.
Case studies, not screenshots.
Each of these solved a real problem for a real team. Click a card for the full architecture, outcome, and lessons learned.
How we can work together.
Discrete engagements or long-term embed. All engagements start with a paid discovery call to scope correctly.
What people say when the pressure was real.
"Tawhidul recovered our entire portfolio after a coordinated attack. The re-infection rate went from weekly to zero."
"He engineered a WooCommerce pricing layer that replaced three paid plugins and unlocked rules we'd been avoiding for years."
"Cut 30–60% off our production load without touching hosting spend. Rare backend talent."
"The reconciliation scripts he wrote made a scary migration boring. Zero data loss, zero drama."
"Ships senior-team-caliber work without the senior-team overhead. Just gets it done."
"Tawhidul recovered our entire portfolio after a coordinated attack. The re-infection rate went from weekly to zero."
"He engineered a WooCommerce pricing layer that replaced three paid plugins and unlocked rules we'd been avoiding for years."
"Cut 30–60% off our production load without touching hosting spend. Rare backend talent."
"The reconciliation scripts he wrote made a scary migration boring. Zero data loss, zero drama."
"Ships senior-team-caliber work without the senior-team overhead. Just gets it done."
Let's build something that ships.
I typically reply within 24 hours. For urgent recovery or performance work, mention it in the subject.