CALEB NGENO Designing secure infrastructure and engineering platforms for modern operations.

Engineering secure, resilient, and scalable technology platforms across infrastructure, cybersecurity, cloud, automation, and enterprise software.

My work combines systems engineering, security architecture, platform development, and operational automation to transform complex technology requirements into reliable, maintainable systems.

graph TD
    A[Infrastructure] -->|Systems • Cloud • Networks • Automation| B(Platform Engineering)
    B -->|APIs • Multi-Tenancy • Distributed Systems • Tooling| C(Cybersecurity)
    C -->|IAM/RBAC • Defense • Monitoring • Automation| D([Secure by Design • Automated • Observable])

Engineering Philosophy: Secure by design. Automated by default. Observable in operation. Built to scale.

%%{init: {'themeVariables': {'pie1': '#FF6B6B', 'pie2': '#4ECDC4', 'pie3': '#45B7D1', 'pie4': '#96CEB4', 'pie5': '#FFEAA7', 'pie6': '#DDA0DD'}}}%%
pie showData
    "Infrastructure & Systems [25]" : 25
    "Cybersecurity [20]" : 20
    "Cloud & Platform [20]" : 20
    "Automation & DevOps [15]" : 15
    "Application Engineering [10]" : 10
    "Network Engineering [10]" : 10

A curated selection of projects representing primary engineering focus across platform engineering, infrastructure automation, cybersecurity, networking, and security tooling.

A Go-based infrastructure platform designed around multi-tenant organizations, resource management, programmable compute resources, and usage-aware infrastructure services.

• Situation: Organizations needed scalable, multi-tenant infrastructure with usage-based billing

• Task: Build a programmable IaaS platform with tenant isolation and resource management

• Action: Designed multi-tenant architecture with API gateway, token bucket rate limiting, and tenant compute scheduler

• Result: Production-ready platform supporting multi-organization resource management and usage-based billing

• Tech Stack: Go, REST APIs, Cloud Architecture, SaaS

A controlled automation platform for executing and scheduling operational workloads across IT environments with access control, auditing, and operational visibility.

• Situation: IT teams needed centralized automation with governance and audit trails

• Task: Build a controlled execution platform with RBAC and operational visibility

• Action: Implemented job scheduling, live execution logs, and audit trails with Spring Boot backend

• Result: Streamlined IT operations with controlled automation and full audit compliance

• Tech Stack: Java 17, Spring Boot, PowerShell, Python, Bash

An open-source cybersecurity platform focused on network visibility, packet analysis, protocol inspection, and structured security operations workflows.

• Situation: Networks lacked visibility into traffic patterns and security threats

• Task: Build a monitoring platform with packet analysis and security workflows

• Action: Integrated Wireshark, Tshark, and Npcap for deep packet inspection with security playbooks

• Result: Enhanced network visibility and structured security operations capabilities

• Tech Stack: TypeScript, Wireshark, Tshark, Npcap, Network Security

A security-focused browser extension exploring automated vulnerability analysis and AI-assisted security assessment.

• Situation: Security assessments required manual vulnerability scanning and analysis

• Task: Build a browser-based tool for automated vulnerability detection with AI assistance

• Action: Developed Chrome extension with AI-assisted security analysis and vulnerability scanning

• Result: Reduced extension store listing preparation times by approximately 40%

• Tech Stack: TypeScript, Chrome Extensions, AI, Security

A WireGuard-based networking project focused on secure tunneling, network forwarding, and protected connectivity.

• Situation: Remote teams needed secure, encrypted network connectivity

• Task: Build a WireGuard-based VPN solution with tunnel architecture

• Action: Implemented secure tunneling with network forwarding and WireGuard integration

• Result: Protected connectivity solution for secure remote network access

• Tech Stack: Kotlin, WireGuard, Networking

Selected application platforms demonstrating the ability to translate operational and business requirements into production-oriented software systems.

Infrastructure: Linux, Windows Server, Active Directory, Group Policy, DNS, DHCP, Docker, Nginx

Cloud & Platform: AWS, Go, REST APIs, Multi-Tenancy, SaaS Architecture, Distributed Systems

Security: IAM, RBAC, Network Security, Wireshark, Tshark, Npcap, WireGuard

Automation & Operations: Python, Bash, PowerShell, Java, Spring Boot, CI/CD, Logging, Observability

Application Engineering: TypeScript, JavaScript, React, Next.js, Django, PostgreSQL, MongoDB, Supabase

• Lead security operations and incident response, reducing cyberattack incidents by 40%
• Implemented advanced threat monitoring and response strategies, improving detection by 30%
• Conducted vulnerability assessments and penetration testing to identify weaknesses
• Collaborated with cross-functional teams to develop security protocols and improve network safety
• Provided training to internal staff on cybersecurity best practices and policies
• Monitored and analyzed network traffic to identify security threats
• Developed incident response plans and contributed to disaster recovery operations
• Performed security audits and ensured compliance with industry standards

• Keen attention to detail
• Deadline-driven — project organized into deliverables with sprint cadence
• Quick learning and adaptation to changes and updates
• Collaborative approach across cross-functional teams

• Google Cybersecurity Professional Certificate
• Cisco Junior Cybersecurity Analyst
• Cisco Ethical Hacker
• CompTIA Security+ — In Progress

Bachelor of Science in Information Technology

Jomo Kenyatta University of Agriculture and Technology (JKUAT)

Focus Areas: Object-Oriented Analysis and Design • UML Modeling • Data Structures & Algorithms • Software Architecture

• Platform Engineering — Infrastructure platforms, multi-tenant architecture, cloud systems, distributed services, and programmable infrastructure
• Cybersecurity — Network defense, security operations, detection engineering, security tooling, and security automation
• Operational Engineering — IT automation, observability, infrastructure tooling, controlled execution, and operational resilience
• Emerging Systems — AI-assisted security, intelligent automation, and next-generation infrastructure platforms

Technology should reduce risk, increase operational leverage, and create durable capabilities.

I build systems with a long-term engineering perspective:

Secure by design. Automated by default. Observable in operation. Structured to scale.

For professional engagements, technology consulting, infrastructure engineering, cybersecurity, platform engineering, and software development:

Portfolio: Tech Gaetano GitHub: github.com/ogc16 LinkedIn: Caleb Ngeno Email: softwarecaleb@gmail.com Phone: +254 703 871 410