I am a Software and Cloud Security Engineer with strong hands-on experience in AWS, Azure, and Google Cloud Platform. I specialize in designing secure cloud architectures, automating security compliance, and developing full-stack applications using Python, React, and Node.js. My expertise includes vulnerability assessment, IAM, penetration testing, and DevSecOps practices.
I completed my Software Engineering course at Jenga School and Cloud & Network Security course at Cyber Shujaa. Currently enhancing my skills through AfricaHackOn's Ethical Hacking program and the JP Morgan Software Development Experience Program.
Expert in designing and implementing secure cloud infrastructures across AWS, Azure, and GCP. Proficient in automating security compliance checks, implementing IAM policies, and hardening cloud environments using industry best practices.
Experienced in integrating security into CI/CD pipelines, implementing automated security testing, and conducting code reviews to identify vulnerabilities early in the development lifecycle.
Skilled in conducting comprehensive penetration tests and vulnerability assessments on web applications and cloud infrastructure to identify and remediate security weaknesses.
Proficient in building scalable web applications using React, TypeScript, Next.js, Node.js, Django, and Python. Experienced in creating responsive, accessible interfaces with modern frameworks.
Extensive experience with Docker containerization and Kubernetes orchestration. Skilled in designing and deploying scalable, resilient containerized applications in production environments.
Proficient in using Terraform, Ansible, and CloudFormation to define and manage infrastructure configurations as code, ensuring consistency, scalability, and reliability.
Experienced in developing RESTful APIs using TypeScript, Python, and Django REST Framework. Skilled in integrating third-party APIs and ensuring secure, efficient data exchange.
Knowledgeable in implementing network security measures including VPNs, firewalls, intrusion detection systems, and secure network architectures to protect organizational assets.
Developing and maintaining user interfaces using React and TypeScript. Implementing client-side validation and error handling to improve form usability. Creating responsive, accessible web interfaces in collaboration with designers.
Developing APIs using TypeScript and Python. Implementing security testing and code review processes. Conducting penetration tests and vulnerability assessments on web systems. Hardening applications using DevSecOps principles.
Developed responsive web applications using Next.js, React.js, TypeScript, and JavaScript. Implemented modern styling with Tailwind CSS. Collaborated with cross-functional teams to deliver high-quality solutions while optimizing performance.
Delivered multiple web and mobile applications using Django, Node.js, React, and React Native. Integrated third-party APIs, managed databases (PostgreSQL, MongoDB), and utilized Git for version control.
Completed practical software engineering modules through Forage, including interfacing with a stock price data feed, using JPMorgan Chase frameworks and tools, and building visual data displays for traders.
Managed company website on WordPress. Facilitated email onboarding for new team members. Set up IP phone systems and WiFi infrastructure. Provided comprehensive desk support for technical issues.
These projects cover mobile products, internal operations platforms, secure backend systems, and infrastructure-heavy builds with integrations for payments, messaging, VPN access, and distributed deployments.
Built a student resident management platform for Hayrat Centre with invite-based registration, approval workflows, student profiles, accommodation and room assignment, attendance tracking, and broadcast communication for students and parents.
Developed an asynchronous document translation backend for curriculum content, supporting PDF, DOC, DOCX, and Excel workflows with JWT authentication, role-based access, OCR and parsing utilities, background processing, and downloadable translated outputs.
Built a mobile discovery experience for Nairobi restaurants and food events with location-aware browsing, vibe and cuisine filters, map views, event attendance, bookings, favorites, direct WhatsApp and phone contact, and real-time venue information.
Delivered a billing platform for Kenyan WiFi providers with captive portal access, phone-number login, M-Pesa STK push payments, SMS notifications, package and session management, revenue reporting, and remote MikroTik router administration.
Engineered a cybersecurity lab platform API and VPS-based infrastructure for hands-on training, including role-based access control, lab session lifecycle management, isolated Docker lab environments, certificate-based VPN access, distributed deployment, monitoring, and automated cleanup.
Real-time blockchain monitoring API that searches wallet types and automates Bitcoin blockchain data updates.
A web app to that is a drumkit and has the different sounds from drum kits.
A simple api to show how using newsletter apis.
An ecommercewebsite for buying clothes, shoes and other products for men and women
A simple implementation of using CI/CD , django rest framework, OpenID and Africas talking Api
Cyber Shujaa - Cloud and Network Security (2024)
Moringa School - Web Development (2023)
Jenga School - Software Development (2023)
J.P. Morgan Software Engineering Virtual Experience - Forage (2022)
AfricaHackOn - Ethical Hacking
Microsoft Security Certifications
I have started posting about software solutions and more security as I try to come up with new topics to talk about.
LinkedIn Articles
Cloud Security Best Practices
DevSecOps Implementation
Docker & Kubernetes
CI/CD Pipeline Optimization
Penetration Testing Techniques
Full-Stack Development
