Skip to content
View kiongosss's full-sized avatar
🏠
Working from home
🏠
Working from home

Block or report kiongosss

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
kiongosss/README.md

Hey, I'm Moka 👋

Full-Stack Engineer · Security-Minded Builder · QA & Automation · Cloud & Infrastructure

I build, test, secure, automate, and ship production software across the full technology stack — from frontend interfaces and APIs to databases, Windows/Linux infrastructure, cloud environments, networking, backups, CI/CD pipelines, and application security.

My experience spans JavaScript/TypeScript, Node.js, React, Next.js, PostgreSQL, MySQL, MSSQL, MongoDB, Docker, Linux, Windows Server, Azure, Git, cloud platforms, automated testing, scripting, networking, and security engineering.

I enjoy working close to the infrastructure and understanding what happens beyond the application layer: how services communicate, how databases perform under load, how backups recover after failure, how authentication can be abused, how systems behave inside containers, and how automation can reduce repetitive operational work.

I'm particularly interested in software quality, database reliability, cloud infrastructure, systems administration, cybersecurity, DevOps, test automation, and using AI/LLMs to solve real engineering problems.


What I Work With

Software Engineering

  • TypeScript / JavaScript
  • React / Next.js
  • Node.js / Express
  • REST APIs / GraphQL
  • PHP / Laravel
  • Python
  • Bash / Shell scripting
  • PowerShell

Databases & SQL

  • PostgreSQL
  • MySQL
  • MSSQL / SQL Server
  • MongoDB
  • Supabase
  • Firebase
  • SQL querying and database design
  • Relational data modeling
  • Indexing and query optimization
  • Transactions and constraints
  • Database migrations
  • Data integrity and validation
  • Performance troubleshooting
  • Database testing and test data management

I enjoy going beyond basic CRUD and understanding query performance, execution behavior, indexing, concurrency, transactions, schema design, backup/recovery, and failure scenarios.


Systems & Infrastructure

Windows & Microsoft Infrastructure

  • Windows Server
  • Active Directory fundamentals
  • Azure infrastructure
  • Microsoft cloud technologies
  • Server administration
  • System configuration and troubleshooting
  • User and access management
  • PowerShell automation
  • Windows-based application environments

Linux

  • Linux administration
  • Bash / Shell scripting
  • Service management
  • Permissions and users
  • Networking and connectivity troubleshooting
  • Process and resource monitoring
  • Application troubleshooting
  • Server automation

Cloud & DevOps

  • Microsoft Azure
  • AWS
  • Docker
  • Kubernetes
  • Vercel
  • Terraform
  • Containerized application environments
  • Environment configuration
  • Infrastructure troubleshooting
  • Deployment automation
  • Git / GitHub
  • Infrastructure as Code
  • Cloud application architecture

I'm comfortable working across application, infrastructure, database, networking, and cloud layers and troubleshooting issues that cross those boundaries.


RMM, PSA & MSP Technologies

I'm familiar with the tooling and operational workflows used to manage distributed IT environments and MSP infrastructure.

RMM

  • ConnectWise Automate
  • Remote monitoring and management
  • Endpoint monitoring
  • Remote troubleshooting
  • Automated maintenance
  • Scripting and task automation
  • Alerting and remediation

PSA

  • ConnectWise Manage
  • Ticket and service management
  • Incident tracking
  • Workflow automation
  • Documentation and operational processes
  • Integration between PSA and RMM platforms

MDM

  • Microsoft Intune
  • Addigy
  • Device management
  • Endpoint configuration
  • Policy enforcement
  • Application deployment
  • Device security and compliance

I'm interested in how RMM, PSA, MDM, monitoring, automation, and security tools integrate into a complete IT operations workflow.


Networking

I have experience working with networking concepts, infrastructure, troubleshooting, and enterprise networking environments involving:

  • Cisco
  • HPE
  • Dell
  • SonicWall
  • FortiGate
  • TCP/IP
  • DNS
  • DHCP
  • VPNs
  • Firewalls
  • Routing and switching fundamentals
  • Network troubleshooting
  • Connectivity diagnostics
  • Firewall and access-control concepts

I approach network troubleshooting systematically by working from connectivity → DNS → routing → firewall rules → service availability → application behavior.


Backup & Disaster Recovery

Backup infrastructure and recoverability are critical parts of reliable systems.

Veeam

  • Veeam Backup & Replication
  • Backup infrastructure architecture
  • Backup deployment
  • Backup job configuration
  • Backup monitoring
  • Backup verification
  • Restore testing
  • Troubleshooting failed backup jobs
  • Investigating backup errors
  • Recovery workflows
  • Backup integrity and reliability

I believe a backup isn't truly useful until its restore process has been verified.

My approach is:

Backup → Monitor → Verify → Test Restore → Recover


Testing & Quality Engineering

  • Automated testing
  • API testing
  • Integration testing
  • End-to-end testing
  • Regression testing
  • Database testing
  • Test data generation
  • Test automation with JavaScript/TypeScript and Python
  • Negative-path and failure testing
  • Authentication and authorization testing
  • API validation
  • Performance and reliability testing
  • Infrastructure testing
  • Backup verification
  • Defect investigation
  • Root-cause analysis

My approach to testing is not just:

"Does it work?"

but:

"What happens when it doesn't?"

I test edge cases, invalid inputs, authorization boundaries, database failures, API errors, infrastructure failures, race conditions, unexpected state, backup failures, and other scenarios that can expose production issues.


CI/CD & Automation

I build and work with automated development, testing, and deployment workflows involving:

  • GitHub Actions
  • Jenkins
  • Automated test execution
  • Build pipelines
  • Deployment pipelines
  • Environment-specific configuration
  • Database migration workflows
  • Linting and static checks
  • Regression testing
  • Release validation
  • Infrastructure automation
  • PowerShell automation
  • Bash automation
  • Python scripting

The goal is simple:

commit → test → validate → build → deploy

with as little manual intervention as practical.


Security Engineering

Security is something I consider throughout the development and infrastructure lifecycle rather than as an afterthought.

Application Security

  • OAuth2 / JWT authentication
  • Role-based access control
  • Secure session management
  • API security
  • Input validation
  • Rate limiting
  • Secure password handling
  • Encryption
  • TLS / HTTPS
  • Secrets management
  • Authorization testing
  • Secure database access
  • OWASP principles
  • Threat modeling
  • Security-focused testing

Infrastructure Security

  • Windows Server security
  • Linux security fundamentals
  • Firewall configuration concepts
  • Endpoint security
  • Identity and access management
  • Secure remote access
  • Network segmentation concepts
  • Backup security
  • Recovery planning
  • Security monitoring
  • Least-privilege principles

I'm particularly interested in finding vulnerabilities through both code review and adversarial testing, while building systems that are secure by default.


AI & LLM Engineering

I actively experiment with AI/LLM tooling to solve practical engineering problems, rather than treating AI as just a chatbot.

Areas I've explored include:

  • LLM-powered developer tools
  • AI-assisted code generation and refactoring
  • Automated test generation
  • Debugging and root-cause analysis
  • AI-powered SaaS products
  • API integrations with LLM providers
  • Prompt engineering
  • Structured LLM outputs
  • AI agents and workflow automation
  • Using LLMs to analyze logs, code, and application behavior
  • AI-assisted infrastructure troubleshooting
  • AI-powered automation workflows

I'm particularly interested in the intersection of:

AI + Software Engineering + Infrastructure + Security + Automation


Engineering Philosophy

I care about systems that are:

Correct → Tested → Secure → Observable → Recoverable → Maintainable → Fast

I don't just want an application or infrastructure environment to work on the happy path.

I want to understand:

  • What happens with bad input?
  • What happens when the database is slow?
  • What happens when a server goes down?
  • What happens when a backup fails?
  • Can the system be restored?
  • Can a user access something they shouldn't?
  • What happens under concurrent requests?
  • Can the deployment be reproduced?
  • Can infrastructure changes be automated?
  • Can the failure be detected automatically?
  • Can the issue be reproduced with a test?
  • Can the system recover safely?

That's where I find engineering gets interesting.


Core Technical Skills

Languages & Scripting

TypeScriptJavaScriptPythonBashPowerShellPHPSQL

Frontend

ReactNext.jsTailwind CSSMaterial UI

Backend

Node.jsExpressLaravelRESTGraphQL

Databases

PostgreSQLMySQLMSSQLMongoDBSupabaseFirebase

Operating Systems

Windows ServerLinux

Cloud

Microsoft AzureAWSVercel

Containers & Infrastructure

DockerKubernetesTerraform

RMM / PSA / MDM

ConnectWise AutomateConnectWise ManageMicrosoft IntuneAddigy

Networking

CiscoHPEDellSonicWallFortiGateTCP/IPDNSDHCPVPN

Backup & Recovery

VeeamBackup InfrastructureRestore TestingDisaster Recovery

Testing

API TestingIntegration TestingE2E TestingDatabase TestingTest AutomationInfrastructure Testing

CI/CD

GitHub ActionsJenkinsAutomated TestingDeployment Pipelines

Security

OAuth2JWTTLSEncryptionOWASPThreat ModelingSecure API Design

AI

LLMsAI AgentsPrompt EngineeringAI AutomationLLM APIs

Version Control

GitGitHub


Selected Projects

  • TesaDeal — E-commerce platform built from the ground up with a focus on scalable application architecture and user experience.

  • CopysAI — AI-powered SaaS platform integrating LLM capabilities into a production web application.

  • Confessa — Privacy-focused anonymous messaging application built around secure communication and privacy-conscious architecture.

  • Webuildaa Hunt — Community-driven product discovery platform for indie hackers and builders.

  • More projects — Additional engineering, SaaS, automation, infrastructure, security, and product work.


Currently Interested In

  • Software quality engineering and test automation
  • Database reliability and performance
  • PostgreSQL / MySQL / MSSQL optimization
  • Windows Server and Linux infrastructure
  • Microsoft Azure and cloud infrastructure
  • Kubernetes and containerized environments
  • RMM / PSA / MDM automation
  • CI/CD and developer tooling
  • Networking and infrastructure security
  • Backup, recovery, and disaster resilience
  • Application and API security
  • Offensive security and secure-by-default architecture
  • AI-assisted engineering workflows
  • Building reliable SaaS and IT infrastructure
  • Solving real engineering problems with LLMs

Let's Connect

GitHub Contribution Snake

Build it. Break it. Test it. Secure it. Back it up. Recover it. Ship it. 🚀

Pinned Loading

  1. changaSentechangaSentePublic

    ChangaSente is a digital crowdfunding and online fundraising platform built for Uganda, Kenya, and the wider East African community.

    HTML