██████╗ ██████╗ ██╗ ██╗ ███████╗ █████╗ ███╗ ███╗███████╗ ██████╗ ███╗ ██╗
██╔══██╗██╔═══██╗╚██╗ ██╔╝ ██╔════╝██╔══██╗████╗ ████║██╔════╝██╔═══██╗████╗ ██║
██████╔╝██║ ██║ ╚████╔╝ ███████╗███████║██╔████╔██║███████╗██║ ██║██╔██╗ ██║
██╔══██╗██║ ██║ ╚██╔╝ ╚════██║██╔══██║██║╚██╔╝██║╚════██║██║ ██║██║╚██╗██║
██║ ██║╚██████╔╝ ██║ ███████║██║ ██║██║ ╚═╝ ██║███████║╚██████╔╝██║ ╚████║
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚═╝ ╚═══╝
$ cat /etc/profile.d/roy.sh
export NAME="Samson Roy Nyagwara"
export ROLE="Security Software Engineer @ Milago HR | Consultant @ Smart Mavuno"
export STACK="Python · TypeScript · React · Node · Django · FastAPI · AWS · Azure · GCP"
export CURRENTLY_BUILDING="Dhamini · PaySure · Nexus"
export CURRENTLY_LEARNING="Rust 🦀"
export INTERESTS="DevSecOps · Penetration Testing · Cloud Architecture · Civic Tech · Fintech"
export FUN_FACT="I read novels between deployments 📖"Dhamini — Automated Loan Repayment Middleware
Dhamini (Swahili: "guarantee") — A consent-based automated loan repayment platform built for the Kenyan market. Creates a trusted bridge between borrowers, lenders, and banks — enabling automatic deductions from bank accounts on agreed dates. Targets the 20–35% default rate in Kenya's digital lending market by letting lenders offer up to 40% lower interest rates in exchange for guaranteed repayments.
Architecture: 4-layer system — React/React Native frontend → Node.js microservices API gateway → Python/FastAPI middleware core → Kenyan bank integrations (Equity, KCB, Co-op, NCBA + M-Pesa Daraja + PesaLink)
Middleware Core: Mandate Engine · Deduction Scheduler · Bank Adapter Layer · AI salary prediction · Retry & Reconciliation Engine · Immutable audit logs (CBK compliance)
Python FastAPI Node.js PostgreSQL Redis Apache Kafka React Native Docker Kubernetes M-Pesa Daraja ISO 20022
PaySure — Mobile Salary Savings Platform
A mobile app that helps users build disciplined saving habits through daily M-Pesa deposits and automatic monthly salary payouts. Features a three-wallet system (Deposit · Salary · Buffer) with consistency scoring, STK Push deposits, and B2C payouts.
Stack: Node.js backend + React Native mobile app + PostgreSQL + M-Pesa Daraja API
Node.js React Native PostgreSQL M-Pesa STK Push M-Pesa B2C JWT Expo
Nexus — Digital Nervous System (AI Companion)
An ambient, cross-device AI presence — not an app you open, a layer you live inside. Nexus builds longitudinal emotional models across weeks and months, proactively reaches out, controls Spotify playback based on your emotional state, and operates a browser extension that detects behavioral signals (doom-scrolling, trigger sites, focus patterns) in real time. A lightweight device daemon enables remote task dispatch via encrypted WebSocket tunnels.
Core Features: Multi-persona AI · Long-term vector memory (pgvector/Pinecone) · Spotify emotion-aware curation · Browser extension behavioral detection · Cross-device remote control · Proactive check-in engine · Wearable (HealthKit/Google Fit) integration
React Native Node.js Python pgvector Claude API Spotify Web API Chrome Extension (MV3) WebSockets Docker
CyberWorX — Bug Bounty Platform
A community platform connecting white-hat hackers with companies for continuous security coverage. Moves beyond point-in-time pentests — all bug reports are validated by experts before reaching the client. Built during Moringa School with a full Figma prototype and Firebase backend.
HTML CSS JavaScript Firebase Figma Bootstrap
Cloud Security Framework — AWS & Azure Hardening
Security framework targeting AWS and Azure cloud infrastructure. Automated compliance checks and incident response via Python and CI/CD pipelines. Implemented VPNs, firewalls, and IDS at the network layer.
Python AWS Azure CI/CD IDS/IPS
Serikali Yangu — Kenyan Civic AI Assistant
RAG-powered chatbot that helps Kenyans navigate government services, laws, and policies. Drop a PDF in, ask a question, get cited answers. Ships with AfyaTranslate — a clinician-patient translation tool (English ↔ Swahili with medical terminology).
FastAPI Ollama ChromaDB React TypeScript Docker Python
| Cert | Issuer | Year |
|---|---|---|
| Cloud & Network Security | Cyber Shujaa | 2024 |
| Ethical Hacking | AfricaHackOn | 2025 |
| Web Development | Moringa School | 2023 |
| Software Development | Jenga School | 2023 |
| Software Dev Experience Program | JP Morgan | — |
| Startup & Entrepreneurship | Current | — |
"Security is not a product, but a process." — Bruce Schneier