Meet Nate
About Nathan Mabasa
I'm a software engineer in Johannesburg with seven years of shipping production web applications for agencies and in-house teams. I build React and Next.js interfaces in TypeScript, usually on top of APIs I've designed myself, so I understand the system underneath the screen and not just the screen.
I founded ComplyMate, a POPIA compliance product for South African small businesses. Along the way I've shipped payments across four South African and Zambian gateways, including mobile money, and built LLM-powered features like a client-facing analytics chatbot.
I work AI-first, with Claude Code in my daily workflow, and I hold the Google Cybersecurity Professional Certificate, so security is part of how I build rather than a phase at the end. My BCom in Marketing Management keeps me asking what the software needs to do for the business.
- Building with
- React, Next.js 15, TypeScript, Supabase, Node.js
- Payments
- Peach Payments, Payfast, Transaction Junction, Kazang mobile money
- AI
- Claude Code, agent loops, LLM chat features, RAG
- Currently
- Senior Lead Software Engineer at Medinox
- Studying
- AWS Solutions Architect
- Education
- BCom Marketing Management, Richfield, 2019
The toolbox
What I build with
The stack I reach for day to day, grouped the way a hiring team usually asks about it.
- Frontend
- React
- Next.js 15 (App Router)
- TypeScript
- JavaScript (ES6+)
- Tailwind CSS
- Framer Motion
- HTML5
- CSS3 / SASS
- APIs and data
- REST APIs
- Supabase
- Node.js / Fastify
- Headless WordPress / WooCommerce
- Webhooks
- Resend
- Payments
- Peach Payments
- Payfast
- Transaction Junction
- Kazang mobile money
- WooCommerce Subscriptions
- AI and LLMs
- Claude Code
- Autonomous agent loops
- LLM chat features
- LangChain
- RAG and vector databases
- Engineering practice
- Git and GitHub
- Code review
- CHANGELOG-driven docs
- Role-based access control
- OWASP-aware secure coding
- Analytics and SEO
- Google Analytics
- Technical SEO
- Schema markup
- Core Web Vitals
- SEMrush
- Cloud and backend
- Azure
- PHP
- Python
- MySQL
- Linux
- DNS and server configuration
Safety first
Secure by default
Most of what I build takes payments, stores personal data or connects to someone else's API. Security isn't a separate phase for me. It's part of how the code gets written.
Google Cybersecurity Professional Certificate
Eight courses covering Python, Linux, SQL, SIEM tools, intrusion detection, threat analysis and network security. Completed October 2024.
OWASP-aware secure coding
Input validation, output escaping and role-based access control on the features I ship, and the same checks when I review someone else's code.
Payments without shortcuts
Gateway integrations across Peach Payments, Payfast, Transaction Junction and Kazang, including a mobile money flow with no server-side payment notifications.
Privacy as a product
I founded ComplyMate to help South African businesses check their POPIA compliance, from privacy policy to breach response.
The method
How I work
The same three steps on a landing page or a six-month platform build.
Understand
I start with the goal, the users and the constraints. Most rework comes from a brief nobody questioned, so I ask early.
Build
Small, reviewable changes in Git. Typed interfaces, readable components, and integrations that fail loudly instead of quietly.
Refine
Speed, accessibility, security patches and the small details. Then a handover and a CHANGELOG the next developer can follow.
Quick answers
Questions recruiters ask
What does Nathan Mabasa do?
Nathan Mabasa is a senior software engineer in Johannesburg, South Africa. He builds React, Next.js and TypeScript web applications, along with the APIs, payment integrations and security behind them. He is currently Senior Lead Software Engineer at Medinox.
Is Nathan open to new roles?
Yes. Nathan is open to senior engineering and security-focused roles, remote, hybrid or on-site.
Where is Nathan based?
Johannesburg, South Africa, within commuting distance of Sandton.
What is Nathan's tech stack?
React, Next.js 15 with the App Router, TypeScript, Tailwind CSS and GSAP on the frontend; Node.js with Fastify, Supabase, REST APIs, PHP and MySQL behind it; Claude Code, LLM chat features and RAG for AI work.
Does Nathan have security experience?
Yes. He holds the Google Cybersecurity Professional Certificate (October 2024), applies OWASP-aware secure coding and role-based access control, and founded ComplyMate, a POPIA compliance product for South African businesses.
Which payment gateways has Nathan integrated?
Peach Payments, Payfast, Transaction Junction and Kazang mobile money for MTN, Airtel and Zamtel, across South Africa and Zambia.
How do I contact or hire Nathan?
Email hello@nathanmabasa.com, connect on LinkedIn, or download his CV from this site.
Step right up
Let's talk about your next role
Email is the quickest way to reach me. I'm open to senior engineering and security-focused roles, remote, hybrid or on-site.
