HRM System

Internal Product

Lead System Architect & Full-stack Developer

1.5 Month

2026

<p data-path-to-node="2">Built a production-grade, enterprise-level Human Resource Management system serving as a complete workforce management platform. Engineered to deliver exceptional performance, the platform maintains <b data-path-to-node="2" data-index-in-node="199">sub-100ms API response times across 200+ endpoints</b> while handling complex enterprise workflows.</p><h3 data-path-to-node="4"><b data-path-to-node="4" data-index-in-node="0">Key Architectural Features</b></h3><ul data-path-to-node="5"><li><p data-path-to-node="5,0,0"><b data-path-to-node="5,0,0" data-index-in-node="0">High-Performance Backend:</b> Powered by <b data-path-to-node="5,0,0" data-index-in-node="37">NestJS 11</b> with 43 robust RESTful API modules.</p></li><li><p data-path-to-node="5,1,0"><b data-path-to-node="5,1,0" data-index-in-node="0">Modern Frontend &amp; Desktop:</b> Features a <b data-path-to-node="5,1,0" data-index-in-node="38">Next.js 16</b> glassmorphic admin dashboard built with <b data-path-to-node="5,1,0" data-index-in-node="89">React Server Components</b>, alongside a <b data-path-to-node="5,1,0" data-index-in-node="126">Tauri 2.x</b> desktop application for native hardware integration.</p></li><li><p data-path-to-node="5,2,0"><b data-path-to-node="5,2,0" data-index-in-node="0">Secure Authentication:</b> Utilizes a self-hosted <b data-path-to-node="5,2,0" data-index-in-node="46">Better Auth</b> service with built-in multi-tenant organization support.</p></li></ul><h3 data-path-to-node="7"><b data-path-to-node="7" data-index-in-node="0">Core Innovations</b></h3><ul data-path-to-node="8"><li><p data-path-to-node="8,0,0"><b data-path-to-node="8,0,0" data-index-in-node="0">Data Isolation:</b> A comprehensive multi-tenant architecture ensuring complete data separation between organizations.</p></li><li><p data-path-to-node="8,1,0"><b data-path-to-node="8,1,0" data-index-in-node="0">Biometric Attendance Pipeline:</b> A real-time data pipeline connecting physical <b data-path-to-node="8,1,0" data-index-in-node="77">ZKTeco devices</b> to the cloud using a native desktop agent.</p></li><li><p data-path-to-node="8,2,0"><b data-path-to-node="8,2,0" data-index-in-node="0">Modular Payroll Engine:</b> An automated processing engine built to support highly complex salary structures and dynamic tax calculations.</p></li></ul>

<p data-path-to-node="2">Enterprise HR systems face a unique paradox: they must be extraordinarily flexible to accommodate diverse organizational structures, compliance requirements, and regional labor laws—while remaining simple enough for non-technical HR staff to operate daily.</p><h3 data-path-to-node="4"><b data-path-to-node="4" data-index-in-node="0">Key Problems to Solve</b></h3><ul data-path-to-node="5"><li><p data-path-to-node="5,0,0"><b data-path-to-node="5,0,0" data-index-in-node="0">1. Multi-tenancy at scale</b> Each organization needs completely isolated data, custom configurations, and independent workflows without infrastructure duplication.</p></li><li><p data-path-to-node="5,1,0"><b data-path-to-node="5,1,0" data-index-in-node="0">2. Biometric device integration</b> ZKTeco attendance devices communicate via proprietary TCP/UDP protocols. No existing cloud solution could bridge physical devices to a web-based HRM without custom middleware.</p></li><li><p data-path-to-node="5,2,0"><b data-path-to-node="5,2,0" data-index-in-node="0">3. Complex payroll calculations</b> Salary structures vary wildly: multiple components (HRA, DA, Special Allowance), tax slabs, loan EMI deductions, advance recoveries, and benefit allocations—all needing atomic batch processing.</p></li><li><p data-path-to-node="5,3,0"><b data-path-to-node="5,3,0" data-index-in-node="0">4. Real-time attendance at scale</b> Processing thousands of daily punch records from multiple devices, correlating them with shift schedules, leave records, and holiday calendars in real-time.</p></li><li><p data-path-to-node="5,4,0"><b data-path-to-node="5,4,0" data-index-in-node="0">5. Role-based access with granularity</b> 13 distinct roles (from SuperAdmin to Employee) each requiring different data visibility, action permissions, and UI experiences across 22+ dashboard modules.</p></li><li><p data-path-to-node="5,5,0"><b data-path-to-node="5,5,0" data-index-in-node="0">6. Offline-first device management</b> Desktop agents must continue collecting attendance data even when cloud connectivity is interrupted, then sync seamlessly when reconnected.</p></li></ul>