Skip to content
Kiragu MainaSystems workspace
Systems onlineSend a brief
Systems Architect / Full-Stack EngineerNairobi, EAT (UTC+3)

Production SaaS platforms & hardened cloud infra.

Full-stack TypeScript (NestJS, Next.js, PostgreSQL, Redis), container orchestration (Docker Compose), Linux VPS hardening, role-aware AI agent tool registries, and embedded IoT controllers.

Enterprise SaaS architecture (NestJS, Next.js, PostgreSQL, Prisma, TypeORM)Containerized deployments & Docker Compose multi-service stacksLinux VPS server hardening, automated SSL, and Nginx reverse proxy tuningRole-aware AI agent tool registries & multi-model consensus gatewaysEmbedded IoT controllers (ESP32 microcontrollers, RFID access control, sensors)High-throughput caching, background queue workers & scheduled cron jobs
Shellwire: a newsroom reordered every four hours by an ingestion cron, every card written and published with no human in the loop.Drag to spin · click to inspect · 1/5
Domain Modules
11
modular domain-driven design
API Response P99
<45ms
cached PostgreSQL & Redis
Agent Tool Latency
<250ms
role-gated execution
Deployment
100%
containerized zero-touch
01

Packaged Systems Solutions

Custom internal tools, self-hosted Linux VPS server stacks, and embedded IoT prototypes.

Package 012 to 3 weeks

Custom Internal Business Tools & Dashboards

Tailor-made full-stack SaaS applications that automate core operations.

  • Full-stack Next.js + NestJS + PostgreSQL architecture
  • Role-based access control (RBAC) & tenant isolation
  • Interactive analytics dashboards & export tooling
  • Integrated transactional email and SMS pipelines
Package 023 to 5 business days

Self-Hosted Server Stacks & Private Cloud

Hardened Linux VPS deployment with automated backups & monitoring.

  • Docker Compose multi-container stack orchestration
  • Nginx reverse proxy with automated Let's Encrypt wildcard SSL
  • UFW firewall, SSH key hardening & fail2ban brute-force protection
  • Automated PostgreSQL backup snapshots & health telemetry
Package 031 to 2 weeks

IoT & Embedded Access Control Prototypes

Custom hardware microcontrollers connected directly to cloud APIs.

  • ESP32 / ESP8266 firmware development in C++ / MicroPython
  • RFID / NFC access control card reader hardware integration
  • MQTT / HTTPS secure cloud API webhook telemetry
  • Web management dashboard for device control & logs
02

Battle-Tested Case Studies

Real multi-tenant SaaS backends, multi-model AI councils, and embedded access controllers.

Case Study 01Production Outcome

Shellwire Autonomous Publishing & AI Consensus Council

The Bottleneck

High human editing overhead and single-provider LLM outages / hallucination risks.

The Architecture

Designed a multi-provider model council combining voting and synthesis across 7 LLM providers behind an OpenAI-compatible API, orchestrated with Redis BullMQ workers and static page generators.

The Business Impact

100% autonomous daily edition publication, 80% reduction in API token costs, zero single-provider downtime.

Read the full project breakdown
Case Study 02Production Outcome

FyberPay Multi-Tenant SaaS Architecture & AI Agent

The Bottleneck

Complex multi-tenant isolation, real-time hardware state synchronization, and support overhead.

The Architecture

Built 11 domain modules with strict tenant isolation, JWT authentication, and an embedded role-aware function-calling AI copilot that diagnoses network disconnects safely.

The Business Impact

Operates autonomously in production, handling thousands of subscribers and transactions solo.

Read the full project breakdown
Immediate Action

Ready to solve the bottleneck?

Engage directly for technical audits, turn-key integrations, or high-leverage infrastructure retainers.