About

Senior Full Stack Engineer · CTO

Mahmoud Tolba

I design, build, secure and operate real-world systems, from the architecture and the code to the infrastructure they run on.

CTO & Co-Founder, LeadLink Solutions
Microsoft · Exchange & MECM
IBM Certified Cybersecurity Analyst

Senior full stack engineer and CTO with a hybrid background spanning cybersecurity, cloud infrastructure, MSP operations, and product engineering. Co-founder and CTO of LeadLink Solutions. IBM certified cybersecurity analyst with hands-on penetration testing experience. Proven track record architecting and shipping production systems across insurance, healthcare, and enterprise sectors in Azure and cloud-native environments.

GitHub LinkedIn

Projects

LeadLink Solutions Platform

Full Stack

Problem: A BPO and IT-services business needed one system for clients, leads, team operations and reporting.
Architecture: Multi-tenant web platform: React front end, Node.js and Flask services, PostgreSQL, containerised on Azure.
Security: Tenant-scoped data, secure authentication and role-based access control.
Result: In production for global clients, with real-time reporting.

React
Node.js
PostgreSQL
Docker
Azure
Flask

Experience

LeadLink Solutions
1. CTO and Co-Founder
  Jan 2023 to Present · Hybrid
  - Drive company technology strategy and oversee delivery of secure, scalable solutions for global clients.
  - Led cloud infrastructure, automation, and AI-driven tooling initiatives that improved efficiency, reduced costs, and supported business growth.
  - Build and guide cross-functional engineering teams ensuring BPO and IT services achieve high client satisfaction.
  - Built the platform from the ground up with React, Node.js, PostgreSQL, Docker, and Azure.
Skyscraper Insurance
1. Senior Full Stack Engineer
  Oct 2025 to Jun 2026 · Remote
  - Promoted to Senior Full Stack Engineer.
  - Own system architecture and technical direction for core insurance platforms.
  - Drive design decisions across frontend (React), backend (Flask and Node.js), and data layers.
  - Lead API design, performance optimization, and security hardening including auth flows, role-based access, and scalable database schemas.
2. Full Stack Engineer
  Nov 2024 to Oct 2025 · United States
  - Built and maintained full stack insurance technology solutions.
  - Developed scalable React frontend components and Python and Node.js backend services for the insurance industry with focus on performance, security, and compliance.
  - Contributed to vulnerability scanning initiatives and production deployments on Azure.
GlobiQOR
1. Full Stack Engineer
  Jan 2024 to Nov 2024 · Remote
  - Developed full stack features across the GlobiQOR platform using React and Flask.
  - Worked on frontend component architecture, RESTful API design, and database optimization.
  - Contributed to CI/CD pipeline improvements and code quality initiatives.
Microsoft
1. Microsoft Exchange Engineer
  Aug 2023 to Mar 2024 · Hybrid
  - Diagnosed and resolved enterprise Microsoft Exchange Server issues including email delivery, mailbox access, and collaboration features.
  - Optimized server performance, managed mailbox recovery, ensured security and compliance, and developed backup and recovery strategies.
  - Collaborated cross-team on complex issue resolution and stayed current on Exchange best practices.
2. MECM Engineer
  Apr 2023 to Mar 2024 · Hybrid
  - Identified and resolved issues in Microsoft Endpoint Configuration Manager environments.
  - Analyzed logs, reviewed configurations, and troubleshot communication between clients and servers.
  - Addressed software deployment, patching, and database performance.
  - Documented resolutions and collaborated with IT teams for complex multi-system issues.
MEDRITE Urgent Care
1. Supervisor of Technical Operations
  Aug 2022 to Mar 2023 · New York
  - Led a team collaborating with the NYC Department of Health on at-home COVID vaccination and PCR testing programs.
  - Grew Operations Team from 4 to 30+ employees.
  - Elevated client satisfaction from 84 to 94 percent.
  - Spearheaded automation efforts that streamlined 80 percent of reporting processes.
2. Senior Subject Matter Expert
  Feb 2022 to Aug 2022 · Hybrid
  - Developed and conducted comprehensive training programs for support agents.
  - Monitored customer interactions for quality and compliance.
  - Handled escalations from the Director of Projects and Operations.
  - Conducted performance evaluations and implemented industry best practices to elevate team performance.
3. Support Lead
  Nov 2021 to Feb 2022 · Hybrid
  - Assisted agents with inquiries through multiple communication channels.
  - Cultivated a cooperative and supportive working environment ensuring agents had a positive experience and the tools needed to succeed.

Capabilities

Full-Stack Engineering

Product features end to end, from API design and data model to the interface people use.

Evidence

Core insurance platform features across React, Flask and Node.js
A multi-tenant BPO and IT-services platform, built from the ground up
Mobile and IoT clients backed by cloud APIs

Tools

React
TypeScript
Python
FastAPI
Flask
Node.js
PostgreSQL
React Native

Security Center

Protected

IBM Certified Cybersecurity Analyst · security built into every layer

Principles

Least privilege: Every service, key and person gets only what it needs, and nothing by default.
Verify on the server: Clients, devices and AI agents are treated as untrusted. Authorisation is decided server-side.
Secrets stay out of code: Credentials live in managed stores, are rotated, and never reach a repository.
Private by default: Admin and internal services sit behind an authenticated private network, not the public internet.
Recoverable: Encrypted, off-site backups and a tested way back in if something fails.

This site

Transport: HTTPS only, TLS 1.2+, HSTS
Content-Security-Policy: default-src 'self': no inline scripts or styles, no third-party code
Isolation: Cross-Origin-Opener-Policy and Cross-Origin-Resource-Policy set; framing denied
Tracking: No cookies, no third-party analytics; first-party page counts with hashed IPs
Disclosure: RFC 9116 security.txt published

Report a vulnerability (security.txt)

Terminal

guest@tolba:~$ whoami

mahmoud tolba, senior full stack engineer & cto

type 'help' to see what this shell can do

About

Mahmoud Tolba

Projects

LeadLink Solutions Platform

Real-Time GPS Tracking System

Security Audit and Scanning Framework

Insurance Platform Engineering

MSP Automation Tooling

Experience

LeadLink Solutions

Skyscraper Insurance

GlobiQOR

Microsoft

MEDRITE Urgent Care

Capabilities

Full-Stack Engineering

Evidence

Tools

Secure System Architecture

Evidence

Tools

Cloud & Infrastructure

Evidence

Tools

DevOps & Automation

Evidence

Tools

Cybersecurity

Evidence

Tools

AI Systems

Evidence

Tools

Security Center

Principles

This site

Terminal

Mail