
Muhammad Khan
Verified Expert in Engineering
iOS Engineer and Developer
Vancouver, BC, Canada
Toptal member since March 12, 2026
Muhammad is a senior software engineer with 12+ years architecting mobile platforms and enterprise SDKs. He specializes in native iOS, Android, React Native, and Flutter, bridging complex frontends with robust back-end integrations using Node.js, Python, and SAP (BTP, OData, CAPM). An expert in secure architecture, video streaming, and AI workflows, he takes absolute technical ownership to modernize legacy systems and deliver highly scalable, real-time applications.
Portfolio
Experience
- iOS - 12 years
- Mobile App Security - 6 years
- SDK Development - 6 years
- SwiftUI - 6 years
- Core ML - 4 years
- VisionOS - 4 years
- Generative Artificial Intelligence (GenAI) - 2 years
- Artificial Intelligence (AI) - 2 years
Work Experience
iOS Computer Vision Expert
Jack Rudloff
- Built the on-device vision pipeline for an iOS kicking app: a CoreML YOLO detector running in VisionCamera frame processors tracks ball and goalposts every frame, and calls make/miss live, with no server.
- Replaced one-shot tap calibration with continuous goalpost tracking, so the phone can move between kicks. Lifted end-to-end accuracy from 78.1% to 90.6%, balanced on a harness that drives the shipped judge.
- Built the evaluation harnesses the project lacked after discovering train and test leakage had overstated accuracy for weeks: end-to-end, component, phantom-rate, and unseen-field, each answering one question.
- Led a pre-release audit that found and fixed 14 confirmed defects, two of them blockers: every per-kick video was silently discarded, and the yardage picker saved a different distance than it displayed.
- Diagnosed the central generalization failure by measurement, not guesswork: goalposts found in 26-80% of frames at trained locations against 12% at a new one, refuting a wrong hypothesis it had acted on.
- Hand-labeled 868 frames and retrained. Unseen-field detection went from 12% to 60%, and false ball detections went from 20.1% to 0%, but a regression of the headline number failed the gate, so it was rejected, not shipped.
- Designed a confidence gate that makes the app ask the kicker rather than record a verdict it cannot support, choosing the signal by experiment after the intuitive one measurably made accuracy worse.
- Built distance estimation from goalpost width and camera field of view, validated against hand-measured ground truth, separating random detector jitter from the systematic error that bounds its accuracy.
- Shipped to TestFlight through EAS with crash reporting, a production Postgres migration, and a 302-test mutation-verified suite. Fixed tooling that had been quietly destroying its own baseline measurements.
- Turned measurement into client decisions, replacing an unsupported "75-90% accurate" claim with four defined targets and the evidence needed to prove them: 110 human-checked kicks for 95%, about 370 for 99%.
Senior iOS SDK Engineer | Core ML, Computer Vision, Security
IDEASLAB.COM INC.
- Engineered a seamless, concurrent video processing pipeline capable of both real-time camera inference and high-volume offline video analysis using AVFoundation, CoreVideo, and Vision.
- Integrated multiple custom CoreML models (17-point and 29-point YOLO pose estimation, image segmentation, and LSTM trajectory smoothing) into a unified, high-performance execution strategy.
- Resolved critical Jetsam out-of-memory (OOM) crashes during heavy offline processing by implementing strict autoreleasepool memory boundaries and precise asynchronous task yielding.
- Architected a robust system to translate between conflicting mathematical spaces (top-left YOLO padded tensors vs. bottom-left Vision normalized bounds), ensuring UI overlays, bounding boxes, and complex polygon contours mapped flawlessly.
- Built a highly optimized, state-aware MotionPathTracker using binary search trees to ensure O(log n) performance when scrubbing through multi-thousand-frame swing trajectories.
- Developed a native secure model loader leveraging CryptoKit (AES-GCM) and AppleArchive to decrypt and decompress LZFSE .mlmodelc bundles at runtime, protecting proprietary ML assets.
- Designed advanced runtime security protocols, including active decoy file generation to thwart automated filesystem scrapers.
- Implemented stringent environment validation, deploying dynamic injection detection and anti-debugging mechanisms to protect the SDK’s intellectual property on consumer devices.
- Developed and routed highly secure API endpoints through OIC to communicate with active back-end workers for real-time license validation and state management, bypassing traditional monolithic architectures.
Full-stack Engineer
Radical Good Neural AI PLCC
- Shipped a release-gating build pass (12+ coordinated changes) that unblocked a clinical reliability study, delivering a signed TestFlight build across SwiftUI, Firebase, and a Python data pipeline.
- Brought the app's user-facing result language into FDA labeling compliance, audited every interpretation string across the app UI, PDF reports, and back end, and replaced diagnostic/causal wording with objective, range-relative statements.
- Standardized the clinical-metric taxonomy end-to-end (Swift data models, Firestore schema, PDF reports, CSV exports) so every measurement is consistently and auditably labeled across the stack.
- Designed and ran a backed-up, idempotent Firestore migration using the Firebase Admin SDK (Node.js), value-mapped legacy fields to a canonical schema with copy-before-delete safeguards and full pre/post verification, zero data loss.
- Built and deployed Cloud Functions (TypeScript) for automated report generation and one-time schema migration; hardened a destructive cleanup job with role-based access control and conditional deletes.
- Fixed a research data export pipeline (Python/Firestore) that was silently dropping nested per-screen metrics, adding a generic array-of-maps flattener to ensure complete exports.
- Kept a 1,100+ case test suite green (Swift Testing/XCTest) through every change and validated release builds on device and simulator before shipping.
- Partnered directly with the research lead to scope, confirm against source code, and document each change—translating regulatory and study requirements into verified implementations.
- Contributed to AI workflow implementation. Orchestrated and deployed generative AI capabilities utilizing AWS Bedrock AgentCore for 8 months, enabling intelligent data processing and automated threat-pattern analysis within a mobile ecosystem.
- Handled security and prompt architecture. Designed secure execution environments for Bedrock AI agents, ensuring that data passed between the mobile client and the AI models strictly adhered to enterprise security and sandboxing constraints.
Senior SAP Integration Consultant/Engineer
Multinational Pharmaceutical Company
- Migrated legacy ABAP systems to SAP BTP using CAPM and Node.js, ensuring enterprise scalability.
- Architected custom dashboards with SAPUI5 and Fiori Elements, consuming secure OData services.
- Built automated data workflows bridging SAP S4HANA and external APIs using RFC and OData.
- Enforced strict domain-driven design and OAuth access controls for secure API endpoints.
- Optimized periodic polling mechanisms and automated enterprise data retrieval pipelines.
- Led back-end modernization leveraging Core Data Services and microservices on SAP BTP.
- Integrated hybrid environments synchronizing legacy ECC instances with cloud native microservices.
- Implemented rigorous continuous integration pipelines across all SAP BTP applications.
- Designed highly decoupled event-driven architectures to replace monolithic legacy infrastructure.
- Executed secure SAP middleware integrations utilizing BAPI to validate strict product datasets.
Lead iOS and Mobile App Security Engineer
Chronicle Creations Inc
- Led the development of an AI-powered story platform (Swift 6 and SwiftUI) with 99.9% uptime across 100,000+ MAUs.
- Improved API performance by 25% by refining concurrency, optimizing network layers, and introducing caching.
- Reduced QA defects by 25% through improved onboarding, coding standards, and CI-driven automation.
- Designed secure, modular authentication flows leveraging token-based protocols and SSL pinning.
- Handled security and prompt architecture. Designed secure execution environments for Bedrock AI agents, ensuring that data passed between the mobile client and the AI models strictly adhered to enterprise security and sandboxing constraints.
- Contributed to AI workflow implementation. Orchestrated and deployed generative AI capabilities utilizing AWS Bedrock AgentCore for 16 months, enabling intelligent data processing and automated threat-pattern analysis within a mobile ecosystem.
Senior Software Engineer, iOS
Screening Eagle Technologies
- Designed reusable, modular SDKs integrated across multiple product lines, reducing integration time by 25%.
- Built real-time data and visualization features using WebSockets, Combine, and Charts for cross-platform environments.
- Migrated legacy Objective-C modules to Swift and SwiftUI, reducing technical debt and improving maintainability.
- Led an automated testing strategy, significantly increasing release stability for a multi-team organization.
Senior iOS Engineer
Marn Technologies
- Built modular frameworks for hardware integrations, including scanners, printers, and terminals, improving developer velocity.
- Engineered low-latency local network communication protocols, achieving over 99% uptime in high-volume environments.
- Improved system reliability by introducing analytics-driven enhancements and performance instrumentation.
- Collaborated with product, QA, and back-end teams to streamline workflows and shorten release cycles.
Senior iOS Engineer, eCommerce and Loyalty
Cooperative Computing
- Delivered core iOS features used by millions of global users across multiple production apps.
- Reduced checkout flow failures by 12% by optimizing critical paths and simplifying UI interactions.
- Improved production reliability by 15% by driving monitoring, structured logging, and automated incident workflows.
- Accelerated release velocity 25% through CI/CD improvements and engineering process refinement.
Enterprise SAP Integration Engineer
Large US Enterprise Client
- Architected secure OData services via SAP Gateway to expose enterprise data for external platforms.
- Engineered robust RESTful APIs utilizing ABAP to synchronize complex SAP ECC datasets in real time.
- Integrated legacy SAP modules with cloud applications, enforcing strict OAuth access controls.
- Optimized back-end data retrieval workflows, ensuring low-latency transaction processing at scale.
- Built highly decoupled integration layers bridging internal SAP infrastructure with web environments.
- Executed secure SAP middleware integrations utilizing BAPI to validate strict product datasets.
Senior iOS Engineer
Invision Solutions
- Developed two applications single-handedly. Improved app reliability through faster development cycles and introduced unit testing for junior developers, reducing defects by 40%.
- Performed development and handled management of iOS mobile apps.
- Evaluated ongoing projects technically and performed code previews.
- Managed projects and defined requirements, scoping, and goals. Handled version control using tools like Git.
Senior iOS Engineer
Lutebox
- Handled mobile app development. Team management was my core responsibility.
- Designed public-facing Swift SDKs with documentation and versioning, reducing support requests by 30% and speeding partner onboarding.
- Achieved 90% client satisfaction with initial product mockups and delivered 4 major updates on time.
- Coordinated feature rollouts with less than 1% downtime.
Project History
Dreambook Kids
https://dreambook.kids/Screening Eagle Inspect
https://apps.apple.com/ca/app/screening-eagle-inspect/id1520348552Pampers Rewards
https://apps.apple.com/us/app/pampers-rewards/id1224627026Marn POS
https://apps.apple.com/us/app/marn/id1495693049Garage POS
https://apps.apple.com/sa/app/garage-pos/id1454372626RuntimeGuard SDK: iOS Runtime Defense Framework
https://sentinelden.com/sdk/runtimeguard/The framework also includes App Attest integration for server-side trust. Built using public iOS APIs only, it uses PrivacyInfo.xcprivacy to declare required-reason categories at the precise reason-code level (3B52.1, 35F9.1). Designed for iOS 17+, it ships as a code-signed .xcframework with a hardware-uptime-anchored license clock.
PayloadGuard SDK: iOS Networking Defense
https://sentinelden.com/sdk/payloadguard/AgenticGuard SDK: On-device LLM Agent Sandbox
https://sentinelden.com/sdk/agenticguardEnclaveVault SDK: Apple Secure Enclave Wrapper
https://sentinelden.com/sdk/enclavevaultSentinelDen Studio: macOS App for iOS Binary Audits
https://sentinelden.com/audit/Education
Master's Degree in English and Computer Programming
SALU Pakistan - Pakistan
Bachelor's Degree in Arts and Computer Programming
SALU Pakistan - Pakistan
Certifications
Mobile App Software Development Bootcamp
SSUET Karachi, Pakistan
Skills
Libraries/APIs
AWS Amplify, Lottie-iOS, Mixpanel iOS SDK, Firebase iOS SDK, OpenCV, Core Graphics, Core Animation, Google Maps SDK, Google+ iOS SDK, RxSwift, Google Location API, Node.js, Google Maps, Apple Maps, WebRTC, Apple Subscriptions, Google Maps API, Stripe, Claude API, Stripe API, Kingfisher, React, iOS Native Libraries, REST APIs, React Testing Library, FFmpeg, API Development, Vue, Vue 3, PyTorch, NumPy, PiLLoW
Tools
Xcode, GitLab CI/CD, GitHub, Jira, CoreLocation, Git, Bitbucket, Google Analytics, TestFlight, SAP UI5, Apple HealthKit, Claude, Claude Code, Claude Agent SDK, Fastlane, Codex, Auth0, SAPUI5, SAP S/4HANA, Expo, Amazon Cognito, LLDB, GitLab, SAP Fieldglass, AVPlayer, SAP SDK, SAP Fiori, Esri, Capacitor, SAP Remote Function Call (RFC), Sentry
Languages
Swift, Python, Python Script, Objective-C, JavaScript, Java, C++, TypeScript, Kotlin, GraphQL, HTML5, Go, Dart, SQL, CSS, HTML, ABAP
Frameworks
SwiftUI, Core ML, ARKit, XCTest, XCUITest, UIKit, iOS SDK, MapKit, OAuth 2, AppKit, React Native, API Framework, Apple CryptoKit, Core Motion, Tailwind CSS, Core Bluetooth, Apple Vision Framework, App Intents, WidgetKit, StoreKit, Unity, Next.js, .NET, Django, Android SDK, Agentic Frameworks, Flutter, SAP Gateway
Paradigms
Unit Testing, Object-oriented Programming (OOP), Mobile App Design, REST, Agile, Clean Architecture, Model View ViewModel (MVVM), Testing, Mobile Development, Code Refactoring, Foundation Models, App Development, DevOps, Offline-first Development, Microservices, Software Testing, Penetration Testing, HIPAA Compliance, Event-driven Architecture, Stress Testing, Model Context Protocol (MCP), Role-based Access Control (RBAC), Automated Testing, Continuous Delivery (CD), Continuous Integration (CI), UI Design, ABAP Managed Database Procedures (AMDP)
Platforms
iOS, VisionOS, Firebase, Azure, Mobile, MacOS, Mixpanel, Android, WatchOS, Amazon Web Services (AWS), Oracle Integration Cloud (OIC), Windows, Google Cloud Platform (GCP), SAP ABAP, SAP NetWeaver, Shopify, AWS Lambda, Docker, Vertex AI, Vercel, tvOS, SAP Mobile, Replit
Storage
SQLite, PostgreSQL, Database Architecture, Amazon Aurora, Datadog, Relational Databases, MySQL, Redis, Google Cloud, SQL Sentry
Industry Expertise
Cybersecurity, Project Management, Social Media
Other
AVFoundation, CI/CD Pipelines, IT Troubleshooting, Mobile App Development, Apple Pay, LiDAR, PSPDFKit, GitHub Actions, Tap payment, Mada, POS SDK, Epson SDK, Payment APIs, Optical Character Recognition (OCR), Amplitude, OAuth, MVVM-C, Social Media Login, iPadOS, Google+ Authentication, APIs, PDF, Bluetooth Beacons, WebSockets, Tap Payments, POS, Leadership, User Interface (UI), Engineering, Generative Artificial Intelligence (GenAI), App Store, Reverse Engineering, SSL, Obfuscation, Mobile App Security, SDK Security, In-app Purchases, SDKs, App Store Acceptance Process, App Store Connect, GPS Integration, GPS, RoomPlan, Coding, Push Notifications, Messaging, SAP, Internet of Things (IoT), Computer Vision, Machine Learning, Software Architecture, Minimum Viable Product (MVP), Education Technology (Edtech), Learning, AI Integration, AI Model Integration, Subscriptions, API Integration, System Integration, Performance Optimization, AI-assisted Development, VisionKit, Frameworks, Security, Mach-O, App Attest, DeviceCheck, Jailbreak Detection, Frida Detection, Runtime Defense, SDK Development, P-256 ECDSA, TLS Pinning, SPKI Hashing, AES-GCM, ECDH P-256, HMAC Key Derivation function (HKDF), Network Security, MITM Defense, Replay Protection, Cryptographic Protocol Design, LLM Security, Prompt Injection Defense, On-device AI, MLX, ECDSA-P256, Hash Chains, Audit Logging, Sandboxing, SecKey, SecAccessControl, LocalAuthentication, FaceID, TouchID, Biometric Authentication, Key Storage, LAContext, Hardware-backed Crypto, macOS Development, iOS Security Audit, Mach-O Analysis, Notary, Code Signing, Binary Analysis, OWASP MASVS, Static Analysis, Dynamic Instrumentation, DMG Distribution, Tracking, WatchOS UI, IP Protection, Debugging, Instrumentation, IT Security, Scalability, App Reviews, Code Review, Vulnerability Assessment, Auditing, Audits, Mobile Apps, Lottie, Lovable, Prompt Engineering, Geolocation, Authentication, Media Compression, AI Algorithms, Computational Mathematics, Native Mobile Apps, UI Animation, Back-end, QR Codes, Full-stack, User Experience (UX), Deep Linking, Architecture, Enterprise Integration, Amazon Bedrock AgentCore, Generative AI Integration, Embedded Systems, Sensors & Actuators, Google Play Store, Large Language Models (LLMs), Back-end Development, Maps, Integration, Payments, Marketplaces, Webhooks, Payment Gateways, Full-stack Development, SAP Business Technology Platform (BTP), OData, SAP CAP, SAP Cloud Application Programming Model, SAP ECC, App Design, Apps, iPhone, Bug Fixes, IT Audits, Planning, Manual QA, Data Extraction, Agentic Engineering, 2D Games, Game Development, Mobile Games, Mobile Game Development, iPad, Algorithms, Geofencing, Payment Processing, Technical Leadership, OpenAI, eCommerce, Anti-fraud, Cryptography, Modernization, Mobile Device Management (MDM), iOS Mobile Device Management (MDM), AI Development, Streaming, Videos, Cloud Storage, Transcoding, Video Streaming, EMR, Healthcare Software, OpenTelemetry, Bluetooth, Location Services, Location Tracking, Hardware, AI Engineering, Agentic AI, Agentic Coding, Cursor AI, Vendor Management, Web Development, Reviews, AI Agent Orchestration, AI Agents, Plugins, Code Auditing, Startups, Inventory Management, Lightspeed, Solution Architecture, Multi-tenant Architecture, Multi-tenant SaaS, SaaS, Enterprise Resource Planning (ERP), ERP django, Application Security, Authorization, Cloud Infrastructure, Data Modeling, Front-end, Networking, Mobile Architecture, Network Architecture, Cloud, SAP Basis, SAP ERP, Cloudflare, AI Safety, AI Security, Agentic AI Systems, Cloud Security, Machine Learning Operations (MLOps), AI Tools, Agentic RAG Systems, RAG Architecture, Cloud Platforms, HTTP Live Streaming (HLS), AirPlay, Personalization, React Native Bridge, AI-generated Code, Analytics, Mobile UX, Artificial Intelligence (AI), Yapdatabase, Supabase, Supabase Auth, MDK, SSAM, AI Pipeline, Rive, Eye Tracking, STB, CAMP, SAP Migration, SAP Open Data Protocol (OData), BAPI, ABAP Debugging, ABAP Enhancements, ABAP Core Data Services, ABAP RESTful Application Programming Model (RAP), System Integration Testing (SIT), Workflow Automation & System Integration, native Expo modules, react-native-vision-camera (frame processors), react-native-worklets-core, AsyncStorage, YOLO object detection, Ultralytics, coremltools, dataset curation and hand-labelling, model evaluation and gating, Storage, Row-level Security (RLS), SQL schema migrations, Node.js REST services, Gemini and Claude APIs, EAS Build, node:test, Mutation Testing, technical writing for non-technical stakeholders
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring