Kevin Gitau
About

Production operations experience across enterprise infrastructure, regulated fintech, and IoT at scale. Security built on real systems knowledge, not lab theory.

Background spanning network operations (NOC), IT support, and application support across enterprise ISP infrastructure, regulated fintech trading platforms, and large-scale IoT deployments. Operational fluency: distributed log analysis, Grafana and Prometheus dashboards, API fault diagnosis, SQL root-cause investigation, Linux administration, and ITSM workflows in ServiceNow, Jira, and Confluence. Technical documentation produced to engineer and stakeholder standard across all environments.

Security track running in parallel: Wazuh SIEM deployment and custom detection engineering, web application and API penetration testing against OWASP Top 10 and API Security Top 10, Active Directory attack-path enumeration and hardening, container vulnerability scanning. All lab work documented to professional report standard with MITRE ATT&CK mapping, CVSS scoring, and remediation guidance.

Independent product development alongside the engineering track: financial tooling for the Kenyan mobile-money market, family engagement applications, and debt management platforms for the East African market. B.Sc. Business Information Technology, JKUAT (Second Class Upper).

Operations & Support

Network operations, IT support, and application support across enterprise ISP, regulated fintech, and large-scale IoT. Incident ownership, root-cause analysis via distributed log and SQL investigation, monitoring automation, and stakeholder communication under pressure.

Security

SIEM deployment and custom detection engineering, web application and API penetration testing, Active Directory attack-path enumeration and hardening, container vulnerability scanning. Lab findings documented to professional report standard with MITRE ATT&CK mapping and CVSS scoring.

Building

Independent product development alongside the engineering track: financial tooling, mobile applications, and automation platforms from conception through production deployment.

Support & Operations
AzureEntra IDGrafanaPrometheusLinuxPythonDockerKubernetesSQLPostmanJiraServiceNowConfluence
Security & Ethical Hacking
WazuhBurp SuiteOWASP ZAPBloodHoundImpackethashcatHydraZeekpfSenseSysmonnmapMetasploit