I'm a systems engineer in Nairobi. I write software close to the kernel's networking stack, run production servers, and administer live ISP networks on MikroTik. I hold the Linux Foundation Certified System Administrator (LFCS) certification and I'm looking for a Linux sysadmin or systems engineering role.
WireGuard-based tunneling for customers stuck behind CGNAT
- I designed and built the whole system: a Spring Boot control plane, a C++ agent on each node that connects outbound over gRPC with mutual TLS, and a React and TypeScript customer portal.
- State is declarative. The control plane describes what should exist and the agent reconciles each server to match.
- I wrote the C++ libraries it runs on:
wgpp for WireGuard over netlink, nftpp for nftables through libmnl and libnftnl, and traefikpp for generating Traefik configuration.
- Writing about it at blog.tunlkit.com.
Billing and subscriber management for small ISPs in Kenya
- Multi-tenant platform that integrates with MikroTik routers and takes payments through M-Pesa (Safaricom Daraja) and Pesapal. Three ISPs pay for it today.
- Handles hotspot captive portals with DNS interception, a walled garden and STK Push payments, plus bulk import of PPPoE subscribers.
- Runs on Hetzner with Docker Compose, Nginx and Traefik.
Duty Allocator
Duty scheduling for a school
- A C++17, Qt6 and SQLite desktop application, in daily use at Utumishi Boys Academy.
Teacher and Laboratory Technician, Utumishi Boys Academy
July 2025 to present
I teach Physics and ICT and run the school's laboratory.
Research Assistant, Kenya National Highways Authority
June 2023 to October 2023
Worked on detecting road pavement defects with AI-based object detection.
Certification and education
Linux Foundation Certified System Administrator (LFCS), 2026.
BSc Civil Engineering, University of Nairobi, 2023.