Bridging enterprise infrastructure management, secure-by-design architecture, and robust automation.
I am a precision-driven Systems Administrator, Cybersecurity Specialist, and DevOps Engineer with a strong foundation in enterprise infrastructure, cloud environments, and automated operations. My technical approach combines rigorous risk management with a "Secure-by-Design" philosophy—specializing in Active Directory/IAM controls, network defense, and scalable infrastructure deployments.
Whether hardening server environments, building custom Go-based IaaS platforms, or automating operational workflows, I ensure high availability, compliance, and absolute system resilience.
- Systems Administration: Comprehensive management of Windows/Linux server environments, Active Directory, Group Policy, DNS/DHCP, and endpoint security.
- Cybersecurity & NetSec: Open-source security tool development (
nids), vulnerability assessments, SIEM integration, and least-privilege IAM/RBAC access control. - Cloud, IaaS & DevOps: Building and orchestrating multi-tenant platforms using Go, AWS, Docker, Kubernetes, and Nginx.
- Scripting & Automation: Eliminating manual overhead and configuration errors through advanced Python, Bash, and PowerShell scripting.
- Google Cybersecurity Professional – Threat detection, risk mitigation, and automated security response.
- Junior Cybersecurity Analyst (CISCO) – Security monitoring, endpoint protection, and network defense.
- Ethical Hacker (CISCO) – Penetration testing fundamentals and vulnerability analysis.
- CompTIA Security+ – In Progress
Bachelor of Science in Information Technology (BSc IT) * Focus: Systems Security ,Software Development, Data Structures * Jomo Kenyatta University of Agriculture and Technology (JKUAT)
| Category | Stack (Core Expertise) |
|---|---|
| Systems & Cloud | |
| Scripting & Tools | |
| Security & NetSec |
- Architected an infrastructure-as-a-service platform featuring multi-tenant organizations, compute resource management, API key authentication, rate limiting, and usage-based billing.
- Tech: Go, Multi-Tenancy, Cloud Architecture, REST APIs.
- Developed an open-source cybersecurity SOC tool utilizing network monitoring, custom protocol playbooks, and deep packet analysis.
- Tech: TypeScript, Wireshark, Tshark, Network Security,Wazuh.
- Built automated financial tracking, secure invoice generation, and payroll/bookkeeping management platforms.
- Tech: TypeScript, Next.js, Python, Database Management.
- Engineered a robust data utility tool for efficient file manipulation, format conversion, and automated data analysis pipelines.
- Tech: HTML, JavaScript, Data Utilities, File Processing.
- Engineered a robust, open-source VPN utility focused on secure tunnel routing, protocol validation, and data protection.
- Tech: HTML, Network Infrastructure, Security Protocols, Wireguard.
- Created an AI-assisted browser extension and security scanner designed for automated vulnerability detection and threat mitigation.
- Tech: TypeScript, Chrome Extensions, AI-driven Scanning.
- Developed a Learning management system/mobile phone application supporting offline learning on the go, with certificates.
- Tech Stack: TypeScript, React Native, Expo, Offline Data Sync, REST APIs
"My objective is to build digital infrastructure that mirrors operational excellence: secure by default, automated for efficiency, and engineered for absolute high availability."



