Tofarati Farinu, software engineer in Lagos

Full-stack engineer in Lagos. TypeScript, React, Next.js, Node and PostgreSQL, with a security habit. Open to remote and on-site roles.

Scroll to fall
Secure by default
Fast by measurement
Origin

Trained in London. Building for Lagos.

I read Computer Science at Royal Holloway, University of London and came home to build. I am completing my national service year in Lagos while shipping production work: a civic platform used by a government office, a commerce rebuild for a paying client, and the studio that delivers both.

Outside the office I run Wolban Tech, a web and mobile studio, and I am halfway into an MSc in Data Science and AI. I work with AI coding agents every day and treat them like a build team: I set the architecture, the security bar and the taste, they move fast inside it.

Now
Founder and lead developer, Wolban Tech. National service year, Lagos.
Studying
MSc Data Science and Artificial Intelligence, Docenti Global Business School, 2027
Degree
BSc Computer Science, Royal Holloway University of London, 2023
Cares about
Secure defaults, honest performance numbers, interfaces a non-technical team can run without me
01
01 / Civic platform

Ikeja Corps Service Portal

Nigeria's national service office in Ikeja took attendance with a fingerprint scanner and a queue. I built a phone-first web app whose promise is on its landing page: your service year, minus the paperwork. It delivers QR check-in inside a geofence, a leave tracker that follows the real paper process, notices with push notifications, and Cooper, an AI assistant running on Google's Gemma through OpenRouter that answers only from the office's own documents.

3check-in paths, each audited with a reason
60srotation on HMAC-signed personal passes
26migrations, schema validation on every input, strict CSP
  • Next.js 15
  • React 19
  • TypeScript
  • PostgreSQL
  • Prisma
  • Auth.js
  • Tailwind v4
  • Web Push
  • AI integration: Gemma via OpenRouter
  • Retrieval-grounded answers
  • Agentic coding (Claude Code)
  • Vercel
ikeja-corps-service-portal.vercel.appOpen ↗
Ikeja Corps Service Portal landing page: the headline Your service year, minus the paperwork, sign-in cards for corps members and staff, and Cooper the assistant in NYSC uniform
Live app · landing pagePaper, ink and stamp
A
Flags are questions for a human. Identical GPS points, implausible accuracy or a shared phone raise a flag on the register. No automated penalties.
B
Built for a free tier on purpose. Lazy evaluation plus a nightly cron job keeps absences correct when the free hosting tier allows one scheduled run a day.
C
Follows the real process. The local office does not approve leave, so the app tracks the request's journey to the state office instead of faking authority.
02
rapjointlagos.comOpen ↗
RapJointLagos home page: black header with the RAPJOINTLAGOS wordmark above photo tiles for the book and record store, listening lounge, merchandise, restaurant and events
Live site · home pageBlack · white · burnt orange
A
Security before pixels. Backup, emergency patch, user enumeration blocked, login lockout with 2FA, PHP 8.3, security headers and HTTPS on every page before any redesign started.
B
Stayed on WordPress on purpose. A framework rewrite did not fit the budget or a non-technical team. A clean custom theme, cutting 32 plugins down to the essentials and rebuilding the asset pipeline got the result for less.
C
Checkout that understands the business. Bookings, donations and memberships never ask for a courier; physical goods get live courier quotes through a shipping API.
02 / Commerce rebuild

RapJoint​Lagos

A hip-hop book and record store in Ikoyi with a WordPress site that had survived five builds. The audit found a form plugin ten versions behind a CVSS 9.8 unauthenticated RCE, exposed admin usernames and no gateway beyond bank transfer. I patched and hardened first, then rebuilt the front end as a clean custom theme, integrated Paystack card and bank payments at checkout, and retuned the site to the client's brand book.

4.9 → 2.7slargest contentful paint, halved
52 → 10stylesheets; scripts 37 to 11
90 / 100mobile and desktop PageSpeed, from 73 and 93
  • PHP
  • WordPress · WooCommerce
  • Custom theme (CSS, JS)
  • Payment gateway (Paystack)
  • Security headers · 2FA
  • Email auth (DKIM, DMARC)
  • Caching · CDN images
  • Structured data (SEO)
03
03 / The studio

Wolban Tech

The studio I founded and lead. Wolban Tech designs and builds fast, secure web and mobile products for Nigerian businesses: sub-second loads on 3G, secure-by-default architecture, weekly demos, and plain-English decisions so clients stay in control. Its own site runs on Next.js. Case studies so far: the RapJointLagos rebuild above, a Wolban Travels booking site that sells packages around the clock, and a Wolban Short Lets site for furnished Ikeja apartments.

3 launchesRapJointLagos, Wolban Travels, Wolban Short Lets
<24hresponse window on every enquiry
3G-firstevery page tuned for patchy Lagos networks
  • Next.js · React
  • TypeScript
  • Node.js
  • PostgreSQL
  • Cross-platform mobile
  • OWASP-aligned reviews
wolbantech.comOpen ↗
Wolban Tech home page: the headline Websites and apps that grow your business, Get a website and Book consultation buttons, and a green wireframe globe tagged Secure, 3G-optimized and Lagos
Live site · home pageForest green · sage
A
Paperwork is part of the product. Numbered invoices and receipts, a signed PDF for every payment, short non-technical recaps for the client after each phase.
B
Working rules written down. Verify against the live server, test more than the home page, keep a security-first order. Each lesson from a build goes into the next quote.
Earlier orbits

Before the studio

Bloomberg L.P. · London · 2023

Portfolio optimisation in Python

Built core portfolio-optimisation features in Jupyter, implementing five algorithmic models that cut strategy evaluation time by 20%. Workshops with Bloomberg engineers on data structures and algorithms for financial prototypes.

  • Python
  • Jupyter
  • NumPy · pandas
Mastercard · Virtual · 2025

Security analyst programme

Analysed 20+ simulated phishing emails for social engineering and spoofing indicators, identified the highest-risk business units and wrote an awareness plan and reporting workflow built to lift detection and response by 25% or more.

  • Phishing analysis
  • Awareness training
  • Incident reporting
Wolban Travels · Lagos · 2024

Travel booking front end

A responsive interface for a Lagos travel business, built to feel the same on a phone in traffic as on a desk: HTML, CSS, JavaScript and Bootstrap, no framework overhead.

  • HTML5
  • CSS
  • JavaScript
  • Bootstrap
Instrument panel

What I reach for

Web

  • TypeScript · JavaScript
  • React · Next.js
  • Node.js · Express
  • PostgreSQL · Prisma
  • PHP · WordPress
  • Tailwind · CSS

Security

  • ISO/IEC 27001 controls
  • Hardening · CSP · HSTS
  • Wireshark · Nmap
  • Burp Suite · Metasploit
  • Active Directory
  • CompTIA Security+in progress

AI and data

  • Claude · Codex · Gemini
  • Agentic coding workflows
  • Retrieval-grounded assistants
  • Python · machine learning
  • Kaggle ML (2024)certified
  • Azure Fundamentalsin progress

Ops and other

  • Vercel · managed Postgres · CDN
  • Git · GitHub
  • Bash · PowerShell
  • C++ · C# · Java · Rust
  • Cisco Packet Tracercertified
  • IT support · testing · docs
Flight log

Where I have been

SEP 2026 · NOW

Founder and lead developer

Wolban Tech, Ikeja

Shipped the RapJointLagos rebuild: 28% lighter home page, Paystack checkout, admin access behind 2FA and login limits.

FEB 2026 · NOW

National service year

Lagos

Software development and IT support in the public sector, alongside the studio and the portal.

MID 2026 · NOW

Ikeja Corps Service Portal

Independent build for the NYSC Ikeja 1 office

From field research to a live Next.js app, demonstrated to the head of the NYSC Ikeja office on 23 September 2026. A pilot with one service group is next.

DEC 2025 · JAN 2026

Cyber security analyst intern

Mastercard virtual programme

Phishing analysis, risk mapping and an awareness plan.

JUL 2024

Web developer

Wolban Travels, Ikeja

Responsive booking front end in HTML, CSS, JavaScript and Bootstrap.

NOV 2023 · DEC 2023

Software developer

Bloomberg L.P., London

Portfolio optimisation models in Python; workshops with Bloomberg engineers.

JUL 2023

BSc Computer Science

Royal Holloway, University of London

Egham, Surrey. MSc Data Science and AI at Docenti Global Business School follows, expected September 2027.

∞
04 / The view from outside

Let's build the next one

You got back out. Open to software engineering and secure-systems roles, remote or in Lagos, and to studio work through Wolban Tech. I reply within a day.

Hand-built, no framework · four worlds rendered on your GPU · © 2026 Tofarati Farinu