Majed Alandajani

Project 01 · Multi-Agent AI Platform

Lead Architect and Engineer · ARA Travel

A 6-agent AI system that ingests customer inquiries via WhatsApp and email, routes them through specialized agents (Concierge, Email, WhatsApp, Contract, Operations, Staff Review), generates travel itineraries using Claude Sonnet with tool-calling, and handles end-to-end quote dispatch with human-in-the-loop approval for high-value quotes.

• Migrated from template-based responses to a Sonnet-with-tools architecture with an 11-tool router (search, distance-matrix calculations, availability check, finalize) governed by an anti-hallucination validator that rejects any item lacking a traceable source
• Implemented price-tier gating (preliminary / firm / locked) governed by formal contracts spanning 22 enumerated requirements
• Enforced HMAC-SHA256 webhook signature verification with constant-time comparison across all payment integrations, plus idempotency guarantees and replay protection
• Designed a three-tier security model: backend-only service keys, signed webhooks, and feature-flag-gated rollout
• Engineered Circuit Breaker pattern with state-machine recovery for AI gateway resilience, alongside 15 async background workers (asyncio.gather with graceful SIGTERM shutdown)

• Python
• FastAPI
• Pydantic
• Anthropic Claude
• Supabase
• PostgreSQL
• Render
• Sentry
• Twilio
• Microsoft Graph
• WooCommerce

Project 02 · Enterprise Digital Infrastructure

Head of Technology, End-to-End Ownership · 2 years

Built from scratch and currently govern the entire technology stack for a Saudi Destination Management Company. Microsoft 365 tenant administration, six SharePoint sites, four customer-facing web properties, device fleet management, and a portfolio of negotiated SaaS contracts.

• Stood up Microsoft 365 from zero: Entra ID, Exchange, SharePoint hubs (PMO · HR · Finance · Sourcing · IT · Product Dev), device-based BitLocker with key escrow
• Architected the Contracts Hub with an active/expired metadata model, enabling sub-30-second contract retrieval across the entire portfolio
• Launched 4 web properties: aratravel.sa, /rawaf/ (Umrah and Hajj packages with glassmorphism UI), /shop/ (WooCommerce store), /diving/ (specialty experiences)
• Integrated WooCommerce + Travel Tour Booking + Tap Payments + Google Merchant Center auto-sync
• Built Power BI executive dashboards and finance/subscriptions tracking system spanning PMO, contracts, and finance domains
• Led full cybersecurity incident response on a compromised Microsoft 365 account: forensic investigation across message trace, sign-in logs, OAuth tokens, and mailbox rules using Exchange PowerShell, Microsoft Graph PowerShell, Entra Admin Center, and Microsoft Purview. Delivered complete remediation and a reusable playbook
• Negotiated and contracted SaaS partnerships across the travel ecosystem: Tourplan, Almatar, WeBook, Almosafer, Trip.com, Expedia, Discover Saudi, Tap Payments

• Microsoft 365
• Entra ID
• SharePoint
• Power BI
• Power Automate
• WordPress
• WooCommerce
• Cloudflare
• Tourplan

Project 03 · Modern Web Platform Rebuild

Lead Engineer and Architect · Full-stack Next.js rebuild

Architected and built a full-stack customer-facing web platform to replace the WordPress site, integrating with the ARA Brain backend for real-time itinerary browsing, quote acceptance, payment flows, and customer portal features. Built as a server-rendered application with strict type-safety and tenant isolation enforced at the database layer.

• Built with Next.js 15 App Router + TypeScript + React 19, with 36 pages, 33 server action modules, and 24 API routes
• Designed a 56-table Supabase database schema with Row-Level Security (RLS) policies enforcing tenant isolation at the database layer
• Integrated Supabase Auth for session management, Microsoft Graph API for email transport, and outbound supplier webhooks
• Delivered a fully bilingual experience (Arabic RTL + English LTR) with proper locale routing, SEO alternates, and structured data for search engine indexing

• Next.js 15
• TypeScript
• React 19
• Supabase
• PostgreSQL + RLS
• Microsoft Graph
• Tailwind CSS
• Server Actions

Project 04 · Fractional CTO and Technical Advisory

Fractional CTO and Technical Advisor · Part-time engagement

Serving as the sole technical authority for LAMAS Management Consulting, a Saudi management consulting firm operating since 2011. Responsible for the entire technology stack: Microsoft 365 environment, domain and DNS management on Cloudflare, subscription governance, and strategic technical advisory across the firm's operations.

• Own the full Microsoft 365 environment: user provisioning, license optimization, security policies, and mailbox governance
• Manage the domain portfolio and DNS configuration on Cloudflare, including SPF/DKIM/DMARC email authentication
• Provide strategic technical advisory on tooling, vendor selection, and technology roadmap decisions
• Manage the firm's subscription portfolio, making sure every service remains worth its cost

• Microsoft 365
• Entra ID
• Exchange
• Cloudflare DNS
• Email Auth (SPF/DKIM/DMARC)
• SaaS Governance
• Technical Advisory

Project 05 · Premium Bilingual Website

Lead Engineer, Designer and Deployment Owner

Designed, built, and deployed a bilingual corporate website for LAMAS Management Consulting. A fully static, edge-served single-page marketing site with 3D brand storytelling, scroll-driven animations, and true right-to-left Arabic support, deployed to Cloudflare Pages with a full SEO and accessibility audit.

• Built with Next.js 15 static output + TypeScript + React 19, styled with Tailwind CSS 3 driven by a documented design token system
• Engineered a 3D brand mark hero using React Three Fiber, drei, and three.js, with an automatic flat fallback when 3D is not available, so it renders on every device
• Implemented scroll-driven storytelling with GSAP + ScrollTrigger, targeting 60fps by limiting animations to transform and opacity properties
• Achieved AA accessibility compliance with proper landmarks, keyboard navigation, and contrast ratios; delivered full technical SEO with canonical URLs, hreflang, structured data, and social preview cards
• Full ownership: domain registration and DNS on Cloudflare, static build pipeline, and single-command deployment to Cloudflare Pages

• Next.js 15
• TypeScript
• React 19
• React Three Fiber
• three.js
• GSAP + ScrollTrigger
• Tailwind CSS 3
• Cloudflare Pages

Project 06 · CRM Architecture and Lead Lifecycle Design

Data Analyst by title, CRM Architect in practice

Designed a 3-stage CRM transformation for a Suzuki dealership. The work moved from documenting the chaotic manual lead-routing reality, through mapping a semi-automated current state, to architecting an end-to-end automated lead pipeline with classification logic spanning six departments.

• Stage 1 (Discovery): documented manual email-forwarding chaos and broken handoffs between sales, service, and marketing
• Stage 2 (Current State): mapped the existing semi-automated flow combining ClickUp, Autoline, and Excel handoffs
• Stage 3 (Future State): architected an automated pipeline with a Hot/Warm/Cold/Lost classification algorithm (80-100% / 50-70% / 20-40% / 0-10% purchase probability)
• Spanned six departments (Telesales, Aftersales, Test Drive, Marketing, Fleet, Call Center), each with defined data contracts and automated transitions
• Also delivered a full website audit, a March 2024 marketing campaign analysis (sales x payment method x car model x financing partner), and target-audience segmentation

• Process Architecture
• Lead Classification
• Google Analytics
• Snapchat Ads
• Instagram Insights
• Data Analysis

Project 07 · Serverless Automation

Lead Engineer

A serverless system that monitors Saudi Arabia's official tenders portal (tenders.etimad.sa) despite its Cloudflare protection, filters tourism-relevant tenders by category, and emails the team weekly with new opportunities. It runs entirely on GitHub Actions with no infrastructure of its own.

• Headless Playwright automation that handles the portal's Cloudflare bot checks
• JSON state persistence with stash/rebase Git workflow for reliable conflict resolution between scheduled runs
• HTML email reports with deep-links to relevant tenders, filtered by tourism categories (1701, 1702, 1704)
• Runs on the GitHub Actions free tier on a weekly Sunday schedule, with no servers to maintain

• GitHub Actions
• Playwright
• Python
• JSON State
• HTML Email