Software
Engineer.
Software Engineer specializing in Zero-Trust architectures, automated GRC platforms, and secure, high-performance full-stack solutions
SHADRACH
ARONI
The Architect Who Improvises
THE ENGINEER
“I specialize in transforming theoretical zero-trust principles and rigid GRC frameworks into high-performance, automated validation infrastructure.”
THE MUSICIAN
“I infuse technical precision with a unique creative perspective forged through years of musical theory and performance.”
Shadrach Aroni
Software Engineer // Systems Specialist
Designing secure, full-stack digital ecosystems where security is woven into the architecture.
The Architect Who Improvises
Education
Strathmore University
BSc. Informatics and Computer Science
The Nairobi School
KCSE
Work Experience
Software Developer @ Cloudora Ltd
February, 2026 – Current · Nairobi, Kenya
Cloudora is a community of Kenyan developers and designers building real products. Born from a vision to simplify business processes across Africa, we create accessible, affordable, and powerful automation solutions that help businesses of all sizes grow.
- Develop scalable applications using modern full-stack technologies.›
- Designing and Developing Software Applications - Writing, testing, and maintaining code for web, mobile, or desktop applications based on client or company requirements.›
- Collaborating with Development Teams - Working closely with other developers, UI/UX designers, project managers, and QA testers to build and improve software products efficiently.›
- Debugging and Troubleshooting - Identifying software bugs, fixing performance issues, and ensuring applications run smoothly and securely.›
- Participating in System Analysis and Planning - Helping analyze user needs, designing system architecture, and contributing ideas during project planning and development meetings.›
ICT Intern @ I&M Bank (One Park Parklands Branch)
January, 2025 – May, 2025 · Nairobi, Kenya
- ›System Monitoring Using SolarWinds and Vynamic, you tracked network health, server performance, and system alerts, analyzing reports and identifying issues in real time.
- ›Networking - assisted in troubleshooting network issues, configuring routers and switches, implementing firewall rules, and ensuring optimal connectivity across the bank's infrastructure.
- ›Endpoints Management – I installed and configured user devices, resolved software and hardware issues, managed OS installations and user account setups, and maintained security updates.
- ›Service Management - I handled IT support tickets, responded to technical queries from bank employees, documented solutions, and ensured compliance with Service Level Agreements (SLAs).
WorksandProjects
QuantMind
QuantMind is a premium, high-fidelity risk intelligence platform designed to bridge the gap between retail intuition and institutional-grade quantitative analysis through a sovereign, AI-driven architecture. Built as a high-performance monorepo utilizing Next.js, FastAPI, and Supabase, the ecosystem orchestrates complex stochastic modeling—including 10,000-scenario Monte Carlo simulations—visualized through a real-time, high-interaction HTML5 Canvas interface. Beyond its computational core, the platform integrates GraphRAG-enhanced AI diagnostics and a neural risk synthesis engine to identify structural vulnerabilities, all while maintaining institutional-grade security through PGP encryption, Row-Level Security, and forensic audit logging. It serves as a comprehensive suite for risk intelligence, combining cutting-edge full-stack engineering with sophisticated financial modeling to deliver elite-level market insights.
SecureBankGRC
Architected an enterprise-grade financial cybersecurity Governance, Risk, and Compliance (GRC) management workspace engineered using Python (FastAPI), Next.js 14, TypeScript, PostgreSQL, and Redis Implemented a Zero-Trust, Dual-Gate Multi-Tenant Isolation Strategy leveraging JWT token extraction at the application level and PostgreSQL Row-Level Security (RLS) at the database level to programmatically eliminate cross-tenant data leakage. Hardened the backend application tier against the OWASP Top 10 utilizing strict Pydantic schemas (extra='forbid'), parameterized SQLAlchemy CRUD operations, Redis-backed rate limiting (SlowAPI), and single-use refresh token rotation. Designed a dynamic Continuous Compliance Automation Layer executing background daemons (mfa_checker.py, compliance_validator.py) to monitor infrastructure security postures and automatically generate SLA-bound Corrective and Preventive Actions (CAPA) via an automated workflow engine Formulated a quantitative 5x5 Likelihood vs. Impact Risk Scoring Engine aligned with Basel III capital buffer metrics, alongside a weighted third-party vendor assessment pipeline (vendor_scorer.py) mapping technical dependencies directly to regulatory controls like SOC 2, ISO 27001, PCI-DSS, and SOX 404
FreshFindsWebApplication
FreshFinds is a full-stack e-commerce web application built to support the online retail of large-scale groceries. The frontend was developed using React.js to deliver a dynamic and fully responsive user experience, while the backend is powered by Node.js with Mongoose and MongoDB for efficient, scalable data management. The platform integrates the Pesapal API to enable secure and seamless payment processing, and follows a RESTful architectural pattern to ensure clean, maintainable communication between services. The entire application is designed to be fully responsive and accessible across all devices and screen sizes.
SmartSync
SmartSync is a comprehensive IoT home automation solution purpose-built for elderly care, combining real-time environmental monitoring, intelligent Bluetooth-based device control, and AI-powered health analytics. The system uses ESP32-powered hardware to monitor temperature, humidity, motion, and proximity sensors, feeding data into machine learning models for pattern detection and health predictions. A Flutter-based cross-platform mobile app serves as the control interface, while an SOS emergency alert system notifies caregivers in real time. The hardware is optimized for energy efficiency, and the entire architecture is designed to provide independence for elderly users while giving families peace of mind.
FPLAssistant
FPL Assistant is an end-to-end Fantasy Premier League prediction and decision-support system. It ingests live and historical FPL data, enriches it with third-party statistical sources, and trains a LightGBM ensemble model to generate accurate player performance predictions. The system incorporates a Monte-Carlo backed transfer planner, chip timing heuristics, and a rich weekly reporting engine, all served through a FastAPI backend. The result is an intelligent tool that provides managers with actionable, data-driven recommendations for every game week, covering player selection, captaincy, and squad planning.
LearningManagementSystem(LMS)
A comprehensive, role-based mobile Learning Management System built for educational institutions, developed as part of a collaborative team effort under Momentum Labs. Working alongside other developers, I contributed to a platform that delivers tailored experiences across four user roles — students can access course materials, assignments, and grades; teachers manage classes, record attendance, and handle grading; administrators oversee institution-wide analytics and settings; and parents can track student performance and communicate with staff. The app features a digital library, an intuitive dashboard, and a clean landing experience, all built with React Native, Expo Router, and NativeWind on the front end, backed by a robust Express.js and Supabase (PostgreSQL, Auth, Edge Functions) backend, with the entire codebase written in TypeScript.
EduFlow
EduFlow is an offline-first, AI-enhanced educational platform engineered specifically for the unique challenges faced by displaced learners and marginalized communities across Africa. The platform provides multi-channel learning access through smartphone applications, feature phone SMS/USSD integration, and a comprehensive NGO management dashboard. Built with privacy by design principles, EduFlow ensures that vulnerable populations can access quality education without compromising their personal data security.
Periodic Table of Tech Elements
Hover over tech elements to inspect system roles, capabilities, and stack classifications.
Core Competencies
- ›Full-Stack Web Development (React, Node.js, Laravel, JavaScript, Python, Pandas, Scikit-learn)
- ›Zero-Trust Architecture, Database Logical Tenant Isolation & PostgreSQL Row-Level Security (RLS)
- ›RESTful API Development, Cloud Integration & Third-Party Services (Google APIs, Pesapal, Paystack)
- ›Database Design & Administration (PostgreSQL, MySQL, MariaDB, MongoDB)
- ›Governance, Risk & Compliance (GRC) Framework Mapping, Risk Assessment & Compliance Workflows
- ›Continuous Compliance Automation, Audit Logging & Background Service Development
Technical Tools & Platforms
Git, GitHub Actions, Docker, Vercel, Render
VS Code, IntelliJ IDEA, WSL, Postman
React.js, Node.js, Express.js, Laravel, Flutter, Pandas, Scikit-learn, LightGBM, FastAPI, Mongoose
Google Workspace/Drive APIs, Pesapal, RESTful design
Certifications
Business Continuity Management
Professional training on banking systems business continuity planning, disaster recovery setups, emergency response mapping, and system recovery protocols under service level agreements.
Customer Service Excellence
Training in customer care protocols, communication alignment strategies, client relations, and handling banking customer service request workflows.
Data Privacy and Protection
Specialized training on financial data privacy, protection frameworks, general data protection regulations (GDPR/Kenya Data Protection Act), encryption boundaries, and prevention of credential leaks.
Introduction to Networking
Comprehensive foundational certification covering TCP/IP protocol stack, LAN/WAN topologies, router/switch configuration paradigms, subnets masking, static routes, and network infrastructure troubleshooting.
Informed Consent
Certifying compliance with international ethical standards and clinical research regulations for obtaining informed consent, safety, and rights protection of human research participants.
Research Ethics
Certifying training on research ethics, covering evaluation frameworks for clinical research proposals, investigator safety guidelines, and regulatory compliance rules.
Achievements / Awards
1st Place — National Web Developers Olympiad
- ›Secured gold medal out of 250+ elite developers nationwide in a rigorous 6-hour system-design and performance challenge.
- ›Engineered a highly optimized, fully accessible real-time data sync service achieving 99.8% Core Web Vitals score.
Open Source Contributor of the Year // DevSpace
- ›Recognized by the DevSpace Foundation for leading development of core UI frameworks used by over 50,000 repositories.
- ›Merged 120+ high-impact pull requests focused on accessible component states and performant micro-interactions.
2nd Place — Africa Forward: Humanitarian in Tech Hackathon
- ›Placed 2nd out of 18 competing regional teams as Lead Developer of EduFlow.
- ›Selected by Victoria Falls Regional Institute as a portfolio investment for immediate incubation.