CALEB NGENO Designing secure infrastructure and engineering platforms for modern operations.

Engineering secure, resilient, and scalable technology platforms across infrastructure, cybersecurity, cloud, automation, and enterprise software.

My work combines systems engineering, security architecture, platform development, and operational automation to transform complex technology requirements into reliable, maintainable systems.

graph TD
    A[Infrastructure] -->|Systems • Cloud • Networks • Automation| B(Platform Engineering)
    B -->|APIs • Multi-Tenancy • Distributed Systems • Tooling| C(Cybersecurity)
    C -->|IAM/RBAC • Defense • Monitoring • Automation| D([Secure by Design • Automated • Observable])

Engineering Philosophy: Secure by design. Automated by default. Observable in operation. Built to scale.

%%{init: {'themeVariables': {'pie1': '#FF6B6B', 'pie2': '#4ECDC4', 'pie3': '#45B7D1', 'pie4': '#96CEB4', 'pie5': '#FFEAA7', 'pie6': '#DDA0DD'}}}%%
pie showData
    "Infrastructure & Systems [25]" : 25
    "Cybersecurity [20]" : 20
    "Cloud & Platform [20]" : 20
    "Automation & DevOps [15]" : 15
    "Application Engineering [10]" : 10
    "Network Engineering [10]" : 10

A curated selection of projects representing primary engineering focus across platform engineering, infrastructure automation, cybersecurity, networking, and security tooling.

A Go-based infrastructure platform designed around multi-tenant organizations, resource management, programmable compute resources, and usage-aware infrastructure services. Maintains sub-15ms API gateway routing latency under a 1,000 req/sec load test using token-bucket middleware

• Situation: Organizations needed scalable, multi-tenant infrastructure with usage-based billing

• Task: Build a programmable IaaS platform with tenant isolation and resource management

• Action: Designed multi-tenant architecture with API gateway, token bucket rate limiting, and tenant compute scheduler

• Result: Production-ready platform supporting multi-organization resource management and usage-based billing

• Tech Stack: Go, REST APIs, Cloud Architecture, SaaS

A controlled automation platform for executing and scheduling operational workloads across IT environments with access control, auditing, and operational visibility. Executes asynchronous cross-platform jobs with sub-50ms queue delay and immutable log ingestion.

• Situation: IT teams needed centralized automation with governance and audit trails

• Task: Build a controlled execution platform with RBAC and operational visibility

• Action: Implemented job scheduling, live execution logs, and audit trails with Spring Boot backend

• Result: Streamlined IT operations with controlled automation and full audit compliance

• Tech Stack: Java 17, Spring Boot, PowerShell, Python, Bash

An open-source cybersecurity platform focused on network visibility, packet analysis, protocol inspection, and structured security operations workflows. Parses and evaluates live Tshark packet captures at up to 100 Mbps with zero dropped buffers

• Situation: Networks lacked visibility into traffic patterns and security threats

• Task: Build a monitoring platform with packet analysis and security workflows

• Action: Integrated Wireshark, Tshark, and Npcap for deep packet inspection with security playbooks

• Result: Enhanced network visibility and structured security operations capabilities

• Tech Stack: TypeScript, Wireshark, Tshark, Npcap, Network Security

---]

A security-focused browser extension exploring automated vulnerability analysis and AI-assisted security assessment.

• Situation: Security assessments required manual vulnerability scanning and analysis

• Task: Build a browser-based tool for automated vulnerability detection with AI assistance

• Action: Developed a Chrome Extension implementing client-side AST analysis and parallel manifest schema generation.]

• Result: Reduced automated extension manifest validation and store payload assembly from 12.4s to 7.4s

• Tech Stack: TypeScript, Chrome Extensions, AI, Security

A WireGuard-based networking project focused on secure tunneling, network forwarding, and protected connectivity.

• Situation: Remote teams needed secure, encrypted network connectivity

• Task: Build a WireGuard-based VPN solution with tunnel architecture

• Action: Implemented secure tunneling with network forwarding and WireGuard integration

• Result: Protected connectivity solution for secure remote network access

• Tech Stack: Kotlin, WireGuard, Networking

Selected application platforms demonstrating the ability to translate operational and business requirements into production-oriented software systems.

Infrastructure: Linux, Windows Server, Active Directory, Group Policy, DNS, DHCP, Docker, Nginx

Cloud & Platform: AWS, Go, REST APIs, Multi-Tenancy, SaaS Architecture, Distributed Systems

Security: IAM, RBAC, Network Security, Wireshark, Tshark, Npcap, WireGuard

Automation & Operations: Python, Bash, PowerShell, Java, Spring Boot, CI/CD, Logging, Observability

Application Engineering: TypeScript, JavaScript, React, Next.js, Django, PostgreSQL, MongoDB, Supabase

• Lead security operations and incident response, automating perimeter blocking for 99.8% of brute-force and credential-stuffing attempts via token-bucket rate limiting.
• Implement custom Snort/Tshark detection rule sets, increasing threat identification coverage across 20+ MITRE ATT&CK techniques while keeping PCAP packet evaluation latency below 1.5ms per flow. improving detection by 30%
• Conduct vulnerability assessments and penetration testing to identify weaknesses
• Collaborat with cross-functional teams to develop security protocols and improve network safety
• Provide training to internal staff on cybersecurity best practices and policies
• Monitor and analyzed network traffic to identify security threats
• Develop incident response plans and contributed to disaster recovery operations
• Perform security audits and ensured compliance with industry standards

• Keen attention to detail
• Deadline-driven — project organized into deliverables with sprint cadence
• Quick learning and adaptation to changes and updates
• Collaborative approach across cross-functional teams

• Google Cybersecurity Professional Certificate
• Cisco Junior Cybersecurity Analyst
• Cisco Ethical Hacker
• CompTIA Security+ — In Progress

Bachelor of Science in Information Technology

Jomo Kenyatta University of Agriculture and Technology (JKUAT)

Focus Areas: Object-Oriented Analysis and Design • UML Modeling • Data Structures & Algorithms • Software Architecture

• Platform Engineering — Infrastructure platforms, multi-tenant architecture, cloud systems, distributed services, and programmable infrastructure
• Cybersecurity — Network defense, security operations, detection engineering, security tooling, and security automation
• Operational Engineering — IT automation, observability, infrastructure tooling, controlled execution, and operational resilience
• Emerging Systems — AI-assisted security, intelligent automation, and next-generation infrastructure platforms

Technology should reduce risk, increase operational leverage, and create durable capabilities.

I build systems with a long-term engineering perspective:

Secure by design. Automated by default. Observable in operation. Structured to scale.

For professional engagements, technology consulting, infrastructure engineering, cybersecurity, platform engineering, and software development:

Portfolio: Tech Gaetano GitHub: github.com/ogc16 LinkedIn: Caleb Ngeno Email: [email protected] Phone: +254 703 871 410