
Muhammad Khan
Verified Expert in Engineering
iOS Engineer and Developer
Vancouver, BC, Canada
Toptal member since March 12, 2026
Muhammad Khan is a senior iOS engineer with 12+ years building platforms and SDKs for millions. An expert in Swift, SwiftUI, and clean architecture, he specializes in video streaming, fintech, and secure authentication. Proven in modernizing legacy systems and slashing crash rates, Muhammad integrates AWS Bedrock AgentCore for generative AI workflows and Oracle Integration Cloud (OIC) for enterprise system routing to lead end-to-end delivery of scalable, real-time mobile experiences.
Portfolio
Experience
- iOS - 12 years
- Mobile App Security - 6 years
- SDK Development - 6 years
- SwiftUI - 6 years
- Core ML - 4 years
- VisionOS - 4 years
- Generative Artificial Intelligence (GenAI) - 2 years
- Artificial Intelligence (AI) - 2 years
Preferred Environment
iOS, Swift, SwiftUI, CI/CD Pipelines, AWS Bedrock AgentCore, Oracle Integration Cloud (OIC), Enterprise Integration, Generative AI Integration, Android, React Native
The most amazing...
...thing I've built is sentinelden.com, an independent iOS security tool.
Work Experience
Senior iOS SDK Engineer | Core ML, Computer Vision, Security
IDEASLAB.COM INC.
- Engineered a seamless, concurrent video processing pipeline capable of both real-time camera inference and high-volume offline video analysis using AVFoundation, CoreVideo, and Vision.
- Integrated multiple custom CoreML models (17-point and 29-point YOLO pose estimation, image segmentation, and LSTM trajectory smoothing) into a unified, high-performance execution strategy.
- Resolved critical Jetsam out-of-memory (OOM) crashes during heavy offline processing by implementing strict autoreleasepool memory boundaries and precise asynchronous task yielding.
- Architected a robust system to translate between conflicting mathematical spaces (top-left YOLO padded tensors vs. bottom-left Vision normalized bounds), ensuring UI overlays, bounding boxes, and complex polygon contours mapped flawlessly.
- Built a highly optimized, state-aware MotionPathTracker using binary search trees to ensure O(log n) performance when scrubbing through multi-thousand-frame swing trajectories.
- Developed a native secure model loader leveraging CryptoKit (AES-GCM) and AppleArchive to decrypt and decompress LZFSE .mlmodelc bundles at runtime, protecting proprietary ML assets.
- Designed advanced runtime security protocols, including active decoy file generation to thwart automated filesystem scrapers.
- Implemented stringent environment validation, deploying dynamic injection detection and anti-debugging mechanisms to protect the SDK’s intellectual property on consumer devices.
- Developed and routed highly secure API endpoints through OIC to communicate with active back-end workers for real-time license validation and state management, bypassing traditional monolithic architectures.
Full-stack Engineer
Radical Good Neural AI PLCC
- Shipped a release-gating build pass (12+ coordinated changes) that unblocked a clinical reliability study, delivering a signed TestFlight build across SwiftUI, Firebase, and a Python data pipeline.
- Brought the app's user-facing result language into FDA labeling compliance, audited every interpretation string across the app UI, PDF reports, and back end, and replaced diagnostic/causal wording with objective, range-relative statements.
- Standardized the clinical-metric taxonomy end-to-end (Swift data models, Firestore schema, PDF reports, CSV exports) so every measurement is consistently and auditably labeled across the stack.
- Designed and ran a backed-up, idempotent Firestore migration using the Firebase Admin SDK (Node.js), value-mapped legacy fields to a canonical schema with copy-before-delete safeguards and full pre/post verification, zero data loss.
- Built and deployed Cloud Functions (TypeScript) for automated report generation and one-time schema migration; hardened a destructive cleanup job with role-based access control and conditional deletes.
- Fixed a research data export pipeline (Python/Firestore) that was silently dropping nested per-screen metrics, adding a generic array-of-maps flattener to ensure complete exports.
- Kept a 1,100+ case test suite green (Swift Testing/XCTest) through every change and validated release builds on device and simulator before shipping.
- Partnered directly with the research lead to scope, confirm against source code, and document each change—translating regulatory and study requirements into verified implementations.
- Contributed to AI workflow implementation. Orchestrated and deployed generative AI capabilities utilizing AWS Bedrock AgentCore for 8 months, enabling intelligent data processing and automated threat-pattern analysis within a mobile ecosystem.
- Handled security and prompt architecture. Designed secure execution environments for Bedrock AI agents, ensuring that data passed between the mobile client and the AI models strictly adhered to enterprise security and sandboxing constraints.
Lead iOS and Mobile App Security Engineer
Chronicle Creations Inc
- Led the development of an AI-powered story platform (Swift 6 and SwiftUI) with 99.9% uptime across 100,000+ MAUs.
- Improved API performance by 25% by refining concurrency, optimizing network layers, and introducing caching.
- Reduced QA defects by 25% through improved onboarding, coding standards, and CI-driven automation.
- Designed secure, modular authentication flows leveraging token-based protocols and SSL pinning.
- Handled security and prompt architecture. Designed secure execution environments for Bedrock AI agents, ensuring that data passed between the mobile client and the AI models strictly adhered to enterprise security and sandboxing constraints.
- Contributed to AI workflow implementation. Orchestrated and deployed generative AI capabilities utilizing AWS Bedrock AgentCore for 16 months, enabling intelligent data processing and automated threat-pattern analysis within a mobile ecosystem.
Senior Software Engineer, iOS
Screening Eagle Technologies
- Designed reusable, modular SDKs integrated across multiple product lines, reducing integration time by 25%.
- Built real-time data and visualization features using WebSockets, Combine, and Charts for cross-platform environments.
- Migrated legacy Objective-C modules to Swift and SwiftUI, reducing technical debt and improving maintainability.
- Led an automated testing strategy, significantly increasing release stability for a multi-team organization.
Senior iOS Engineer
Marn Technologies
- Built modular frameworks for hardware integrations, including scanners, printers, and terminals, improving developer velocity.
- Engineered low-latency local network communication protocols, achieving over 99% uptime in high-volume environments.
- Improved system reliability by introducing analytics-driven enhancements and performance instrumentation.
- Collaborated with product, QA, and back-end teams to streamline workflows and shorten release cycles.
Senior iOS Engineer, eCommerce and Loyalty
Cooperative Computing
- Delivered core iOS features used by millions of global users across multiple production apps.
- Reduced checkout flow failures by 12% by optimizing critical paths and simplifying UI interactions.
- Improved production reliability by 15% by driving monitoring, structured logging, and automated incident workflows.
- Accelerated release velocity 25% through CI/CD improvements and engineering process refinement.
Senior iOS Engineer
Invision Solutions
- Developed two applications single-handedly. Improved app reliability through faster development cycles and introduced unit testing for junior developers, reducing defects by 40%.
- Performed development and handled management of iOS mobile apps.
- Evaluated ongoing projects technically and performed code previews.
- Managed projects and defined requirements, scoping, and goals. Handled version control using tools like Git.
Senior iOS Engineer
Lutebox
- Handled mobile app development. Team management was my core responsibility.
- Designed public-facing Swift SDKs with documentation and versioning, reducing support requests by 30% and speeding partner onboarding.
- Achieved 90% client satisfaction with initial product mockups and delivered 4 major updates on time.
- Coordinated feature rollouts with less than 1% downtime.
Experience
Dreambook Kids
https://dreambook.kids/Screening Eagle Inspect
https://apps.apple.com/ca/app/screening-eagle-inspect/id1520348552Pampers Rewards
https://apps.apple.com/us/app/pampers-rewards/id1224627026Marn POS
https://apps.apple.com/us/app/marn/id1495693049Garage POS
https://apps.apple.com/sa/app/garage-pos/id1454372626RuntimeGuard SDK: iOS Runtime Defense Framework
https://sentinelden.com/sdk/runtimeguard/The framework also includes App Attest integration for server-side trust. Built using public iOS APIs only, it uses PrivacyInfo.xcprivacy to declare required-reason categories at the precise reason-code level (3B52.1, 35F9.1). Designed for iOS 17+, it ships as a code-signed .xcframework with a hardware-uptime-anchored license clock.
PayloadGuard SDK: iOS Networking Defense
https://sentinelden.com/sdk/payloadguard/AgenticGuard SDK: On-device LLM Agent Sandbox
https://sentinelden.com/sdk/agenticguardEnclaveVault SDK: Apple Secure Enclave Wrapper
https://sentinelden.com/sdk/enclavevaultSentinelDen Studio: macOS App for iOS Binary Audits
https://sentinelden.com/audit/Education
Master's Degree in English and Computer Programming
SALU Pakistan - Pakistan
Bachelor's Degree in Arts and Computer Programming
SALU Pakistan - Pakistan
Certifications
Mobile App Software Development Bootcamp
SSUET Karachi, Pakistan
Skills
Libraries/APIs
AWS Amplify, Lottie-iOS, Mixpanel iOS SDK, Firebase iOS SDK, OpenCV, Core Graphics, Core Animation, Google Maps SDK, Google+ iOS SDK, RxSwift, Google Location API, Node.js, Google Maps, Apple Maps, WebRTC, Apple Subscriptions, Google Maps API, Stripe, Claude API, Stripe API, Kingfisher, React, iOS Native Libraries
Tools
Xcode, GitLab CI/CD, GitHub, Jira, CoreLocation, Git, Bitbucket, Google Analytics, TestFlight, Apple HealthKit, Claude, Claude Code, Claude Agent SDK, Fastlane, Codex, Auth0, SAP SDK, SAP UI5, SAP Fiori, Esri
Languages
Swift, Python, Python Script, Objective-C, C++, TypeScript, Kotlin, Dart, JavaScript, Java, SQL
Frameworks
SwiftUI, Core ML, ARKit, XCTest, XCUITest, UIKit, iOS SDK, MapKit, OAuth 2, AppKit, React Native, API Framework, Apple CryptoKit, Core Motion, Tailwind CSS, Core Bluetooth, Apple Vision Framework, App Intents, WidgetKit, Flutter
Paradigms
Unit Testing, Object-oriented Programming (OOP), Mobile App Design, REST, Agile, Clean Architecture, Model View ViewModel (MVVM), Testing, Mobile Development, Code Refactoring, Foundation Models, App Development, DevOps, Offline-first Development
Platforms
iOS, VisionOS, Firebase, Azure, Mobile, MacOS, Mixpanel, Android, WatchOS, Amazon Web Services (AWS), Oracle Integration Cloud (OIC), Windows, Google Cloud Platform (GCP), SAP Mobile
Storage
SQLite, PostgreSQL, Google Cloud
Other
AVFoundation, CI/CD Pipelines, IT Troubleshooting, Mobile App Development, Apple Pay, LiDAR, PSPDFKit, GitHub Actions, Tap payment, Mada, POS SDK, Epson SDK, Payment APIs, Optical Character Recognition (OCR), Amplitude, OAuth, MVVM-C, Social Media Login, iPadOS, Google+ Authentication, APIs, PDF, Bluetooth Beacons, WebSockets, Tap Payments, POS, Leadership, User Interface (UI), Engineering, Generative Artificial Intelligence (GenAI), App Store, Reverse Engineering, SSL, Obfuscation, Mobile App Security, SDK Security, In-app Purchases, SDKs, App Store Acceptance Process, App Store Connect, GPS Integration, GPS, RoomPlan, Coding, Push Notifications, Messaging, Internet of Things (IoT), Computer Vision, Machine Learning, Software Architecture, Minimum Viable Product (MVP), Education Technology (Edtech), Learning, AI Integration, AI Model Integration, Subscriptions, API Integration, System Integration, Performance Optimization, AI-assisted Development, VisionKit, Frameworks, Security, Mach-O, App Attest, DeviceCheck, Jailbreak Detection, Frida Detection, Runtime Defense, SDK Development, P-256 ECDSA, TLS Pinning, SPKI Hashing, AES-GCM, ECDH P-256, HMAC Key Derivation function (HKDF), Network Security, MITM Defense, Replay Protection, Cryptographic Protocol Design, LLM Security, Prompt Injection Defense, On-device AI, MLX, ECDSA-P256, Hash Chains, Audit Logging, Sandboxing, SecKey, SecAccessControl, LocalAuthentication, FaceID, TouchID, Biometric Authentication, Key Storage, LAContext, Hardware-backed Crypto, macOS Development, iOS Security Audit, Mach-O Analysis, Notary, Code Signing, Binary Analysis, OWASP MASVS, Static Analysis, Dynamic Instrumentation, DMG Distribution, Tracking, WatchOS UI, IP Protection, Debugging, Instrumentation, IT Security, Scalability, App Reviews, Code Review, Vulnerability Assessment, Auditing, Audits, Mobile Apps, Lottie, Lovable, Prompt Engineering, Geolocation, Authentication, Media Compression, AI Algorithms, Computational Mathematics, Native Mobile Apps, UI Animation, Back-end, QR Codes, Full-stack, User Experience (UX), Deep Linking, Architecture, Enterprise Integration, AWS Bedrock AgentCore, Generative AI Integration, Embedded Systems, Sensors & Actuators, Google Play Store, Large Language Models (LLMs), Back-end Development, Maps, Integration, Payments, Marketplaces, Webhooks, Payment Gateways, Artificial Intelligence (AI), Yapdatabase, Supabase, Supabase Auth, SAP, MDK, SSAM, AI Pipeline, Rive, Eye Tracking
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring