Imran Shahid
Director of Engineering Sydney, Australia

Engineering leadership,
secure-by-design architecture,
delivery at AI speed.

I lead engineering organisations and architect the distributed platforms they run. Twelve years at Xref across four roles, from first developer to Director of Engineering. I've led through two acquisitions and their due-diligence processes, a multi-region GDPR refactor, and the build-out of a nineteen-person team from scratch. Most of what I know about engineering leadership was learned in the middle of those.

FY23
Open APIs I proposed in 2017 became Xref's top revenue generator
~30
Engineers across platform, DevOps, testing and data
2023
Recipient of Xref's first-ever CEO Award
80%
Unit test coverage across the platform

Currently

01

Removing the constraints AI exposed.

AI didn't create a bottleneck at Xref. It removed the old one — people typing code — and everything slow downstream of it suddenly showed. We shipped weekly, through three branch stages. I'm moving us to one trunk, merged continuously, deployed to production every day.

What I work on

02

Leadership. Engineering strategy and technical roadmaps, resource planning, team building and mentoring, and the estimation and delivery practices that keep forecasts honest. I have built organisations from a single developer up to around thirty across four disciplines, run hiring and performance management at that scale, and started an internship programme that converted four engineers to full-time within six months.

Architecture. API-first system design on AWS and Azure, Python and Django services, microservices and distributed systems, Docker and Terraform, observability with Datadog, and feature-flag delivery with TDD. I have taken a monolith to a modular platform and then to microservices, opened it up through revenue-generating public APIs, and refactored it across regions for GDPR compliance and global scale.

Security and quality. Secure-by-design development, vulnerability management and ISO 27001 practice, alongside AI-assisted review and development through Cursor and CodeRabbit. Formal OffSec certifications and secure-development training sit behind it; in practice it means regular scanning and remediation, vendor security assessments, client questionnaire responses, and 80% unit test coverage across the platform.

Career

03
2021 —
Present

Director of Engineering

Xref Limited

Lead a global organisation of around thirty engineers across platform, DevOps, testing and data. Delivered the API-first Trust Marketplace and the Enterprise platform, and established feature-flag delivery, PERT-based estimation and AI-assisted development.

2019 —
2021

Lead DevOps & Security

Xref Limited

Ran DevOps on infrastructure-as-code with CloudFormation and Terraform, and owned vulnerability scanning, remediation workflows and company-wide ISO 27001 activity.

2016 —
2019

Head Architect

Xref Limited

Led platform modernisation. Proposed and launched the Open APIs in 2017 and directed a multi-region refactor that enabled GDPR compliance and global scale.

2014 —
2016

Senior Developer

Xref Limited

Joined as the first developer and second employee. Rewrote the legacy application in Django, migrated infrastructure to AWS, and broke the monolith into a modular platform.

2001 —
2013

Earlier: Python and PHP development in Sydney, software architecture and team lead roles in Pakistan, and five years as a lead software design engineer at Polycom Thailand.

Credentials

04

Security

OSCCOffSec
KLCPOffSec
Secure developmentCyberCX
Web securityPortSwigger

Education

Graduate Certificate, Cyber Security & Networking
Melbourne Institute of Technology, 2022
Master of Computer Science
University of Arid Agriculture Rawalpindi, 2004

Open to conversations about engineering leadership.

LinkedIn