Docker & Docker ComposeCI/CD Pipelines (GitHub Actions.cpanel.yml Git hooks)rsync automationFAISS Vector SearchdaloRADIUSSystemd service unit management.
03. Experience & Production Deployments
Systems & Network Support Engineer (Field Deployments & Infrastructure)
2026
Commercial Hotel & Enterprise Field Projects — Kisii / Nairobi, Kenya
Terminated, tested, and certified Cat6 structured cabling, punching down 15+ T568B Keystone wall jacks across a multi-story commercial facility.
Self-hosted the UniFi Network Controller on Linux; configured Layer 2/3 parameters and provisioned enterprise access points via SSH (set-inform).
Deployed automated CI/CD staging pipelines via GitHub Actions and .cpanel.yml deployment hooks, eliminating manual file uploads and maintaining zero downtime during releases.
Repurposed salvaged network hardware (including XPON terminal units) into bridge-mode wireless access points to expand local coverage.
Full-Stack Infrastructure & Application Developer
2024 – Present
Freelance & Campus Deployments — Kisii, Kenya
Architected, deployed, and maintained 22 distinct web applications and microservices running on Ubuntu/Debian VPS and cPanel hosts.
Managed 365+ MB of transactional production relational databases (MySQL/MariaDB), engineering CLI migration runners and asynchronous JSON cache buffers to eliminate database row locking under mass concurrency.
Enforced strict directory isolation via enterprise public document root patterns (public/index.php), decoupling application cores, sensitive configurations, and credentials from the public web.
04. Practical Projects & Systems Dossier
High-Concurrency Validation Engine & Barcode Verification API (KSA GWR)
⚡ PHP, JavaScript, LiteSpeed, MySQL
Built a high-throughput barcode/QR wristband verification REST API delivering sub-50ms scan-to-acknowledgement round-trip latency under mass gate ingress.
Engineered an asynchronous JSON caching layer (cache_stats.json) that bypassed MySQL row locks during high-traffic writes, accompanied by a real-time synchronized monitor dashboard.
Designed an anonymous reporting backend utilizing 9-character cryptographic tracking tokens and ephemeral tokenized sessions with zero collection of user IPs or identities.
Implemented multi-stage transactional incident state machines across 14 normalized tables, refactoring polling endpoints to reduce idle server CPU/memory load by 45%.
Dual-Factor Geofenced Attendance & Access Engine
⚡ PHP, MySQL, HTML5 Geolocation
Developed a physical check-in security engine combining dynamic rotating TOTP QR codes (5-minute expiration) with dual-device GPS geofencing (<60m radius) and campus CIDR block validation to eliminate proxy attendance.
Integrated server-side rate limiting, brute-force IP lockout policies, and air-gapped local QR libraries to prevent CDN supply chain interception.
Containerized Jasiri RAG AI Knowledge Base Microservice
⚡ Python, Flask, FAISS, Docker, Ollama
Built and containerized a Retrieval-Augmented Generation (RAG) service with Docker Compose, ingesting dense documentation into FAISS vector indices using E5 sentence embeddings for sub-second similarity retrieval.
Integrated local LLM inference (Phi-3 Mini via Ollama) with Google Gemini SDK fallbacks, decoupling API keys via strict environment injection.
Isolated Virtual Cybersecurity Lab & Network Arsenal
⚡ Kali Linux, VirtualBox, Python, Scapy
Configured an isolated dual-node hypervisor network (10.0.0.0/24 NATNetwork) pairing Kali Linux with vulnerable target VMs, leveraging immutable disk snapshots for rapid sandbox rollback.
Authored custom multithreaded network recon tools in Python (raw TCP socket port scanners, banner grabbers, and Scapy packet inspection harnesses).
Deployed a Debian-based FreeRADIUS server integrated with MySQL to enforce 802.1X enterprise network security using EAP-TTLS and MSCHAPv2 protocols.
Integrated daloRADIUS for web-based AAA management, user provisioning, real-time logging, and session accounting.
05. Achievements & Education
Technical Initiatives & CTF
Self-Managed Homelab: Maintain an on-premise Debian server running local DNS, automated backup daemons via rsync, and development microservices.
Cybersecurity Challenges: Active participant in OverTheWire challenges (Bandit, Leviathan) and independent CTF labs to continuously refine Linux CLI privilege escalation and network traffic analysis.
Computer Vision Sign Translation Server: Engineered a dual-model sign language translation pipeline (MediaPipe + PyTorch LSTM/CTC) streamed via Flask generators with 94%+ classification accuracy.