Benson is available for hire
Hire BensonBenson Thuo
Verified Expert in Engineering
Support Specialist Developer
Nairobi, Nairobi County, Kenya
Toptal member since January 12, 2023
Bio
Benson is an AI automation engineer who builds production workflows on Claude for finance and enterprise operations: agents that verify ERP purchase orders, three-way-match invoices, and audit SAP access. His 15 years in enterprise systems, including SAP security across 71 companies, shapes how he builds AI: validated outputs, human review for low-confidence results, and full audit trails. Via Toptal, he delivered a 10,000-line C#/.NET QuickBooks integration with about 100 tests.
Portfolio
FAR Experts LLC
QuickBooks Desktop, SDKs, Intuit QuickBooks, Desktop App, C#, VB.NET...
Kenya Tea Development Agency
SAP, SAP Security, ABAP, Agile, Linux, SQL, SAP HANA, C#, IT Support...
Kenya Tea Development Agency
Linux, Access Control, Windows Server, C#, SAP, SAP HANA, IT Support...
Experience
- Workflow Automation - 10 years
- Identity & Access Management (IAM) - 9 years
- SAP Security - 8 years
- C# - 7 years
- Python - 6 years
- AI Agents - 3 years
- LLM Integration - 2 years
- Claude API - 2 years
Work Experience
Software Engineer
2026 - 2026
FAR Experts LLC
- Built a C#/.NET desktop application that uploads Excel-based financial transactions into QuickBooks Desktop through the QuickBooks SDK and qbXML, reducing manual data entry.
- Supported checks, deposits, and journal entries with batched uploads.
- Engineered duplicate detection, company-file safeguards, and balance validation to protect financial data integrity.
- Designed a rules engine that maps Excel data to QuickBooks accounts, vendors, and customers.
- Delivered the solution through client testing and handoff against the client's accounting requirements.
- Developed support for multiple financial transaction types, including checks, deposits, and journal entries, through the QuickBooks Desktop SDK.
- Implemented company-file safeguards and balance-validation controls to ensure transactions were uploaded to the intended QuickBooks company and maintained financial data integrity.
Technologies: QuickBooks Desktop, SDKs, Intuit QuickBooks, Desktop App, C#, VB.NET, Data Integration, Debugging, Microsoft Excel, qbXML, .NET, QuickBooks Online, Data Mapping, Software Development, Python, CSS3, UX Design, UI Design, QuickBooks API, Google Drive API, Gmail, Artificial Intelligence (AI), OpenAI, Windows Presentation Foundation (WPF), Data Validation, API Integration, Relational Data Mapping, Data Retention, Workflow Automation Design, AI Architecture, AI Engineering, Accounting, Desktop, C++
SAP Security Architect
2017 - 2026
Kenya Tea Development Agency
- Architected SAP security and identity access across 71+ companies, covering role-based access, authorization models, and segregation-of-duties controls.
- Redesigned SAP controlling-module authorizations, reducing unauthorized-access incidents by 30% within six months.
- Achieved zero compliance findings following a major sales and marketing division rollout.
- Reduced system vulnerabilities by 25% through assessments and remediation, and cut incident resolution time by 20% by automating response workflows.
- Built AI-assisted automation with the Claude API to analyze access logs and flag anomalous permission changes.
- Designed and implemented integrations across SAP, cloud services, APIs, databases, and enterprise applications.
- Built AI-assisted automation using the Claude API to analyze access logs and identify anomalous permission changes, extending traditional manual security reviews with automated monitoring.
- Deployed comprehensive security protocols to bolster data protection, integrating advanced monitoring, detection, and prevention strategies for heightened cybersecurity resilience.
- Led technical teams and collaborated with business, security, infrastructure, and application stakeholders to deliver enterprise systems and security initiatives.
- Led SAP security enhancement project, achieving a 30% reduction in unauthorized access incidents in six months.
Technologies: SAP, SAP Security, ABAP, Agile, Linux, SQL, SAP HANA, C#, IT Support, IT Security, Security, System Administration, Cybersecurity, Network Security, SAP ERP, Networking, Technical Documentation, SAP S/4HANA, Enterprise Resource Planning (ERP), Microsoft Excel, SAP Integration, SAP Implementation, Information Security, Microsoft 365, Solution Architecture, IT Automation, Technical Leadership, Requirements Analysis, APIs, SAP S/4HANA Cloud, Network Administration, SAP Architecture, Identity & Access Management (IAM), Role-based Access Control (RBAC), DevOps, Data Engineering, SaaS, System Design, Virtualization, Data Security, API Integration, Project Management, HRIS, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Consulting, Deployment, Team Leadership, Data Migration, Accounting Systems, Inventory Tracking, Adobe, Endpoint Security, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Network Topology, Systems Design, API Connectors, Error Handling, Job Schedulers, Workflow Design, User Permissions, Security Audits, System Integration, Cloud Computing, Ticketing Systems, User Onboarding, Compliance, Grafana, Infrastructure as Code (IaC), Cloud Architecture, Data Loss Prevention (DLP), System Architecture, Data Governance, Cloud Infrastructure, Code Review, Database Optimization, Microsoft SQL Server, Multi-tenant Architecture, Prometheus, API Gateways, Python, Asset Management, IT Asset Management (ITAM), Process Automation, Google API, Stakeholder Engagement, Test Documentation, Data Centers, Technical Architecture, IT Consulting, SharePoint, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, Google Cloud Platform (GCP), Claude, Claude API, ITIL 4, XML, Data Retention, Dashboards, Workflow Automation Design, TypeScript
System and Network Administrator
2016 - 2026
Kenya Tea Development Agency
- Crafted network specifications by carefully examining user requirements, workflow, access, and security prerequisites, ensuring optimal performance and functionality.
- Designed, configured, and analyzed requirements for deploying various applications, managing over 60 servers at the head office.
- Managed over 60 head-office servers and ran intrusion-detection monitoring across a nationwide WAN, setting organization-wide networking standards.
- Set and enforced organization-wide networking standards, reducing ad hoc, inconsistent configurations across regional sites.
- Coordinated with 4+ internal stakeholder teams (ICT services, business systems, security) to keep a nationwide network available through equipment failures, expansions, and security incidents.
- Achieved successful guidance on networking standards and specifications to address diverse networking requirements while effectively evaluating and deploying cutting-edge technologies to enhance performance.
- Managed and executed networking projects within the organization, ensuring strict adherence to established standards and procedures.
- Identified potential network infrastructure system threats, diligently monitored and analyzed the intrusion detection system (IDS), and effectively implemented mitigation measures.
- Achieved the preservation of network, system, and application integrity and security through the technical enforcement of organizational security policies.
- Collaborated with key stakeholders, including ICT services, ICT Business Systems, RICTCs, FSAs, and a security administrator, to guarantee network availability and seamless server system resource management.
Technologies: Linux, Access Control, Windows Server, C#, SAP, SAP HANA, IT Support, IT Security, Security, System Administration, Cybersecurity, Network Security, SQL, SAP ERP, Amazon Web Services (AWS), Networking, Technical Documentation, Microsoft Excel, Information Security, Microsoft 365, Solution Architecture, Microsoft Exchange, IT Automation, Technical Leadership, Requirements Analysis, Network Administration, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Role-based Access Control (RBAC), DevOps, Data Engineering, SaaS, System Design, Active Directory (AD), Virtualization, Office 365, Data Security, VoIP Administration, APIs, API Integration, Project Management, HRIS, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Advisory, Consulting, Deployment, Team Leadership, Data Migration, Accounting Systems, Inventory Tracking, Adobe, Endpoint Security, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, API Connectors, Error Handling, Job Schedulers, Workflow Design, User Permissions, Security Audits, System Integration, Enterprise Resource Planning (ERP), Microsoft Azure, Cloud Computing, Ticketing Systems, User Onboarding, Compliance, Grafana, Infrastructure as Code (IaC), Cloud Architecture, Data Loss Prevention (DLP), System Architecture, Cloud Infrastructure, Code Review, Database Optimization, Microsoft SQL Server, Multi-tenant Architecture, Prometheus, API Gateways, Python, Asset Management, IT Asset Management (ITAM), SAP Security, Process Automation, Google API, Stakeholder Engagement, Test Documentation, Data Centers, Technical Architecture, IT Consulting, SharePoint, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, Google Cloud Platform (GCP), Claude, Claude API, ITIL 4, XML, Data Retention, Dashboards, .NET, Workflow Automation Design, TypeScript, Wireless Systems
Microsoft 365 Expert
2024 - 2025
Lock23
- Led the migration of two organizations from Bluehost email to Microsoft 365 with zero data loss, preserving folder structure, permissions, and history.
- Migrated Dropbox data to OneDrive under strict access-control and segregation-of-duties requirements.
- Designed multi-account Outlook access for staff working across both organizations.
- Trained staff to independent adoption and provided post-migration support.
- Provided ongoing post-migration support, quickly resolving user issues and fine-tuning configurations to ensure a seamless transition, resulting in high user satisfaction and confidence in the new system.
- Identified and addressed potential migration risks early, adhering strictly to the project timeline and ensuring a smooth transition without impacting business continuity.
Technologies: Office 365, Microsoft 365, Microsoft Exchange, System Administration, Azure, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Role-based Access Control (RBAC), DevOps, SaaS, Solution Architecture, System Design, Microsoft Entra ID, Data Security, SharePoint, APIs, API Integration, Project Management, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Advisory, Consulting, Deployment, Team Leadership, Data Migration, Technical Support, Microsoft Intune, CompTIA, Patch Management, Networking, Systems Design, SharePoint Online, Microsoft Power Platform, API Connectors, Error Handling, Job Schedulers, Webhooks, Workflow Design, Email Migration, User Permissions, Security Audits, Microsoft Azure, System Integration, Enterprise Resource Planning (ERP), Cloud Computing, Compliance, Infrastructure as Code (IaC), Cloud Architecture, Azure Administrator, Data Loss Prevention (DLP), System Architecture, Cloud Infrastructure, Multi-tenant Architecture, Asset Management, IT Asset Management (ITAM), Slack API, SharePoint Migration, Stakeholder Engagement, Technical Architecture, IT Consulting, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, IT Operations Management (ITOM), Full-stack Development, Data Retention, Microsoft Lists, .NET, Workflow Automation Design, Email
IT Support and Security Specialist
2023 - 2025
Pachama
- Revamped onboarding workflows, ensuring seamless, efficient, and secure processes. Enforced rigorous security protocols and compliance standards, minimizing risks and enhancing integrity.
- Built real-time device-provisioning visibility for a distributed workforce using Rippling, Apple Business Manager, and NordLayer VPN.
- Crafted a visionary ICT policy to navigate dynamic tech trends, synchronizing IT endeavors with organizational objectives.
- Hardened security for a workforce spread across multiple countries and time zones by enforcing device compliance through Rippling MDM, requiring VPN access via NordLayer, and running recurring Google Cloud Platform security audits.
- Reduced onboarding time by 20% by revamping onboarding workflows and device administration.
- Authored the company's ICT policy from scratch and audited Google Cloud Platform to close compliance and security gaps.
- Maintained a 99% help-desk satisfaction rating and a 90% first-contact resolution rate.
- Demonstrated technical leadership in IT operations through requirements analysis, system administration, and automation. Configured DNS and mail servers, integrated tools like Slack, Zoom, and Notion, and ensured platform compatibility.
- Performed comprehensive system audits on the Google Cloud Platform. Identified and addressed compliance and security gaps, ensuring robust data integrity, optimized system performance, and adherence to organizational policies.
Technologies: IT Support, Google Cloud, IT Security, Security, Office 365, Google Workspace, Gmail, Azure Active Directory, IT Automation, Technical Leadership, Requirements Analysis, APIs, System Administration, Microsoft 365, Jira, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Role-based Access Control (RBAC), DevOps, Google Sheets, Data Engineering, SaaS, Solution Architecture, System Design, Microsoft Entra ID, Azure, Data Security, SharePoint, Microsoft Excel, API Integration, Project Management, Microsoft Power Automate, Large Language Models (LLMs), HRIS, Microsoft Copilot Studio, Microsoft Power Platform, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Artificial Intelligence (AI), Advisory, Consulting, Deployment, Team Leadership, Data Migration, Accounting Systems, Inventory Tracking, Jamf, Jamf Pro, Google Cloud Platform (GCP), Adobe, Endpoint Security, Technical Support, IT Service Management (ITSM), Microsoft Intune, CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Networking, Network Design, Network Topology, Systems Design, Microsoft Power Apps, API Connectors, Error Handling, Job Schedulers, Webhooks, Workflow Design, User Permissions, Security Audits, Microsoft Azure, Zapier, System Integration, Enterprise Resource Planning (ERP), Cloud Computing, Ticketing Systems, User Onboarding, Compliance, Infrastructure as Code (IaC), Cloud Architecture, Azure Administrator, Data Loss Prevention (DLP), System Architecture, Data Governance, Cloud Infrastructure, Code Review, Database Optimization, Microsoft SQL Server, Multi-tenant Architecture, API Gateways, Python, Asset Management, IT Asset Management (ITAM), Google API, Slack API, SharePoint Migration, Stakeholder Engagement, Test Documentation, Technical Architecture, IT Consulting, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, IT Operations Management (ITOM), Learning Management Systems (LMS), SCORM, Full-stack Development, Data Retention, Dashboards, Rippling, Workflow Automation Design
Systems Developer
2023 - 2024
Real Estate Company (via Toptal)
- Delivered three connected systems: cross-platform email integration, a privacy-first video hosting platform, and a real-time email tracking and analytics system.
- Built content-authenticity safeguards into the video platform to protect the client from tampering and disputed-authenticity risk.
- Developed an advanced email tracking system, providing real-time analytics for enhanced decision-making and communication strategy optimization via seamless integration.
- Provided real-time email analytics that the client used to change its communication strategy.
Technologies: HubSpot CRM, HubSpot, Google Workspace, Gmail, IT Automation, Technical Leadership, Requirements Analysis, APIs, System Administration, Role-based Access Control (RBAC), DevOps, SaaS, System Design, Solution Architecture, Data Security, API Integration, Project Management, Content Migration, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Advisory, Consulting, Deployment, Data Migration, Google Cloud Platform (GCP), Technical Support, CompTIA, Patch Management, Networking, Network Topology, Systems Design, API Connectors, Error Handling, Job Schedulers, Webhooks, Workflow Design, Email Migration, User Permissions, System Integration, Cloud Computing, System Architecture, Cloud Infrastructure, Code Review, Multi-tenant Architecture, API Gateways, Python, Google API, Stakeholder Engagement, Technical Architecture, IT Consulting, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, IT Operations Management (ITOM), XML, Data Retention, Workflow Automation Design, Node.js, Microservices
Chief Technology Officer
2015 - 2023
Sunflower Events
- Built the company's entire tech function from scratch, digitizing operations end to end.
- Digitized accounting and payroll, eliminating manual reporting.
- Stood up remote-work infrastructure in weeks during COVID-19, keeping 80+ staff operational.
- Owned all software, network, and security decisions as the sole technical lead.
Technologies: System Administration, IT Support, Access Control, Cybersecurity, Network Security, Windows Server, Networking, Microsoft Excel, Information Security, Microsoft 365, Google Cloud Platform (GCP), Solution Architecture, Microsoft Exchange, Google Workspace, Gmail, IT Automation, Technical Leadership, Requirements Analysis, Network Administration, Role-based Access Control (RBAC), Fractional CTO, Intuit QuickBooks, Data Engineering, QuickBooks Desktop, SaaS, System Design, Office 365, Data Security, Google Sheets, VoIP Administration, APIs, API Integration, Project Management, HRIS, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Advisory, Consulting, Deployment, Team Leadership, QuickBooks Online, Data Migration, Accounting Systems, Inventory Tracking, Endpoint Security, Technical Support, CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, API Connectors, Error Handling, Workflow Design, Email Migration, User Permissions, Security Audits, System Integration, Enterprise Resource Planning (ERP), Cloud Computing, User Onboarding, Compliance, Data Loss Prevention (DLP), System Architecture, Database Optimization, Multi-tenant Architecture, API Gateways, Asset Management, IT Asset Management (ITAM), Process Automation, Google API, Stakeholder Engagement, Test Documentation, Technical Architecture, IT Consulting, SharePoint API, Integration, SharePoint Administration, Third-party APIs, Third-party Integration, IT Operations Management (ITOM), Full-stack Development, XML, Data Retention, .NET
IT Solutions Architect
2015 - 2016
Safaricom
- Designed enterprise information systems at Kenya's largest telecom, working directly with board-level stakeholders to align technical architecture with business strategy (TOGAF methodology).
- Assessed a broad range of information solutions and products, particularly document management, collaboration, and content management.
- Translated deep technical architecture into language board members could act on.
- Evaluated document management, collaboration, and content management solutions at telecom scale.
Technologies: IT Support, Google Cloud, IT Security, Security, Cybersecurity, Windows Server, Networking, Technical Documentation, Architecture, Microsoft Excel, Information Security, Solution Architecture, Microsoft Exchange, IT Automation, Requirements Analysis, SaaS, System Design, VoIP Administration, Project Management, Advisory, Deployment, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, Error Handling, Workflow Design, Cloud Architecture, Cloud Infrastructure, Stakeholder Engagement, Data Centers, Technical Architecture, IT Consulting, Integration, SharePoint Administration, Third-party APIs, Third-party Integration
ICT Officer
2011 - 2012
Nexus Networx
- Offered technical support on-site, via phone, or by email.
- Configured computer networks and structured cabling.
- Installed hardware and software systems and maintained or repaired equipment.
- Provided technical support services and closed-circuit television installation.
Technologies: IT Support, Google Cloud, IT Security, Security, System Administration, Cybersecurity, Windows Server, Networking, Microsoft Excel, Information Security, Microsoft Exchange, Requirements Analysis, VoIP Administration, Project Management, Debugging, Deployment, Endpoint Security, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, Error Handling, Workflow Design, User Permissions, Asset Management, IT Asset Management (ITAM), Third-party Integration, IT Operations Management (ITOM), Data Retention
Project History
AI Agent for ERP Purchase Order Verification
I designed and built a LangGraph-based AI agent that automates purchase order verification, replacing a manual back-office review. The agent runs as a state machine and uses Claude's vision API to extract data directly from scanned purchase orders and invoices. It then applies fuzzy vendor matching with RapidFuzz against master vendor records to catch discrepancies, and posts verified results to Odoo through an XML-RPC integration. A SAP integration path is scoped as a follow-on extension.
LedgerLink: Invoice-to-Portal Finance Automation with Three-way Matching
https://github.com/bthuo/ledgerlinkLedgerLink is a working proof of concept for finance automation that takes an invoice from issuance to a customer portal verdict. It connects to an accounting system, a field-operations system and customer AP portals over OAuth 2.0, with delta sync using watermarks, cursor paging, retries with jittered backoff and idempotent writes. Every timesheet, field ticket and sign-off goes to a Python FastAPI extraction service that uses Claude's multimodal API to return structured fields with a confidence score per field, including handwritten tickets. A three-way match of invoice, work order and evidence runs ten rules, each producing a readable pass or fail, a weighted score and typed exceptions, and nothing is approved silently. Invoices are then mapped to each customer portal's format and submitted idempotently, with problems caught before submission and rejections recorded. The Node.js and TypeScript API persists to PostgreSQL, a React web app shows the pipeline, exception queue and workflow runs, and the matching engine is a pure function covered rule by rule in tests.
QuickBooks Desktop Transaction Automation
I designed and developed a QuickBooks Desktop automation in C#/.NET 10, with a WPF desktop application, a CLI, and a shared service layer integrated with the QuickBooks QBFC17 SDK. It imports bank transaction spreadsheets as checks, deposits, and journal entries, validating each batch against the chart of accounts, class list, and name list before upload. I added duplicate detection, batch reconciliation, balance validation, and an Undo Upload feature that safely reverses posted batches while handling locked records and closed accounting periods. A configurable JSON rules engine maps accounts and classes automatically. I delivered about 10,000 lines of C# with about 100 xUnit tests, packaged as a WiX/MSI installer with deployment documentation.
Camarero: Multi-tenant AI Virtual Waiter with POS and Kitchen Integration
I designed and prototyped Camarero, a multi-tenant AI waiter that lets restaurant guests order from their table in English or Spanish. The conversation engine is hybrid: deterministic rules handle the menu first, with synonym lists, quantity parsing and Levenshtein fuzzy matching for typos, and an LLM is called only as a fallback for open questions, through a gateway that caches repeat prompts, routes to Claude Haiku in an EU region and enforces a per-tenant cost ceiling. Allergen and dietary detection runs on every message, blocks unsafe items and suggests safe alternatives, with an explicit guest override. Confirmed orders are pushed to the POS through the Square Orders API with idempotency keys, then split into kitchen and bar tickets on a kitchen display whose status changes stream back to the table over server-sent events. Each venue has its own menu, branding and isolated data. The backend is scaffolded as a .NET worker service, and the prototype was built to validate the full guest-to-kitchen flow with a pilot venue.
Healthcare Charge Capture & Billing Reconciliation MVP
Architected and built an MVP for a healthcare charge capture and billing reconciliation workflow, taking it from problem definition to a working system. The application captures billable encounters, normalises charge data arriving in several different source formats, and reconciles captured charges against what was actually billed and remitted. It surfaces the gaps that quietly cost providers revenue: missed charges, mismatched line items, and encounters that were never billed at all. I owned the architecture end to end: the data model for encounters, charges and reconciliation runs; the ingestion and validation layer; the matching logic; and the exception-review workflow billing staff use to resolve mismatches. Scope was deliberately kept tight so the core reconciliation loop could be proven against real data early, while leaving the structure in place to extend toward fuller revenue-cycle coverage. Built in C# on an ASP.NET Core minimal API with Entity Framework Core, running on SQLite for zero-setup development and PostgreSQL in production, containerised with Docker, and documented for deployment to Azure Container Apps with Azure Database for PostgreSQL or to Google Cloud.
Python Agent for SAP Segregation-of-Duties Conflict Detection
I built a Python agent that automates segregation-of-duties conflict detection for SAP, a control most organizations still run as a slow manual audit. It ingests AGR_USERS and AGR_TCODES exports, applies activity-level (ACTVT) filtering from SUIM extracts, and evaluates each user and role combination against a conflict rule matrix covering procure-to-pay, financial posting, user and role administration, and treasury. Findings are classified as confirmed match, confirmed non-match, or unverified, so reviewers can triage by confidence. I also identified the minimum table set (AGR_1251, AGR_USERS, AGR_DEFINE, AGR_AGRS, USR02) that keeps exports complete without hitting row-truncation limits.
AI-driven Back-office Workflow Automation
Designed and built AI-driven automation that removes manual effort from back-office operations. The system ingests unstructured and semi-structured inputs (documents, spreadsheets and exported reports) and uses the Claude API to classify, extract and normalise that content into structured records downstream systems can consume directly. I built the orchestration around the model rather than relying on the model alone: deterministic pre-processing, schema validation on every extracted field, prompt templates versioned per document type, retry and fallback handling for low-confidence results, and a human review queue for anything failing a confidence or validation check. Every run is logged end to end, so any output can be traced back to its source input. The result is a repeatable pipeline that turns hours of manual data entry and reconciliation into a reviewed, auditable batch process, and a pattern I have since reused across several different document types and workflows.
Venue Rental Marketplace (Next.js, Fastify, Prisma, PostgreSQL)
I am building a venue rental marketplace where hosts list spaces and guests search, check availability and book. It is a TypeScript pnpm monorepo: a Next.js 15 and React 19 web app styled with Tailwind CSS, and a Fastify API with Zod validation, Pino logging, Helmet, CORS and rate limiting. Data lives in PostgreSQL through Prisma, with a ten-model schema covering users and sessions, host profiles, venues and photos, availability rules and exceptions, bookings with an event history, and processed webhook events so Stripe payment webhooks are handled idempotently. Authentication uses Argon2 password hashing and JOSE-signed tokens with cookie-based sessions, and availability is calculated with Luxon so time zones and exceptions are handled correctly. Shared types and the database client live in workspace packages used by both the API and the web app, and the API is tested with Vitest.
SAP Access Control Framework Across 71 Companies
https://news.sap.com/africa/2022/09/kenya-tea-development-agency-brews-perfect-technology-mix/I designed the users, roles, and authorizations for an SAP ERP rollout across 71 companies. The work covered the finance, controlling, sales and distribution, and quality assurance modules, with roles tailored to each company's responsibilities and segregation-of-duties controls built in. The framework reduced the risk of unauthorized access and data breaches across the group.
Enterprise Identity & Access Management (IAM) Governance Framework
Designed and managed an enterprise Identity and Access Management (IAM) framework focused on secure user provisioning, role-based access control (RBAC), and segregation of duties (SoD) enforcement. The project involved administering Active Directory and SAP Security environments to ensure users were granted appropriate access in accordance with defined roles and business rules.
I was responsible for designing and maintaining access control structures, managing user lifecycle processes (joiners, movers, leavers), and ensuring compliance with audit and governance requirements. I collaborated with audit and infrastructure teams to reduce access risks and strengthen identity governance across critical business systems. The framework improved visibility into access, reduced the risk of privilege escalation, and strengthened the overall security posture.
I was responsible for designing and maintaining access control structures, managing user lifecycle processes (joiners, movers, leavers), and ensuring compliance with audit and governance requirements. I collaborated with audit and infrastructure teams to reduce access risks and strengthen identity governance across critical business systems. The framework improved visibility into access, reduced the risk of privilege escalation, and strengthened the overall security posture.
Real Estate Property and Tenant Management System
I designed and developed a web-based system in PHP, JavaScript, and MySQL that manages the full rental lifecycle for property managers and landlords. It handles tenant onboarding, lease management, invoice generation, online payments, automated payment reminders, and rent tracking. Property owners get real-time dashboards and financial and occupancy reports. I owned the project end to end: architecture, database design, back end, front end, workflow automation, reporting, and deployment.
IT Automation and Security for a Global Climate-tech Workforce
As IT support and security specialist for Pachama, I supported a workforce distributed across multiple countries and time zones. I built reports on Rippling device-management agent status, device health, and computer inventory, giving IT real-time visibility into device provisioning alongside Apple Business Manager and NordLayer VPN. I set up Rippling LMS so new hires were enrolled automatically in role-specific training by department, location, and employment type. I also authored the company's ICT policy and ran regular security audits on Google Cloud Platform. Onboarding time fell 20%, help-desk satisfaction held at 99%, and 90% of tickets were resolved on first contact.
Slack, Jira, and Gmail IT Ticketing Integration
I designed and implemented an IT service workflow that unified Slack, Jira, and Gmail into one ticketing system. Slack requests and Gmail messages are converted automatically into Jira tickets with consistent categorization, prioritization, and assignment rules. Automated notifications, status updates, and escalations flow between Slack channels and Jira boards, so users and technical teams see the same incident status in real time. The integration removed manual ticket logging and improved response times.
Streamlining Onboarding Excellence
I contributed to designing and implementing a cutting-edge workflow for automating the onboarding and systems access assignment process by transforming what was once a time-consuming and error-prone task into a seamless, efficient, and secure process.
The workflow also ensured strict adherence to security protocols and compliance standards, mitigating potential risks and bolstering data integrity. Automating this critical process has freed up valuable time for HR and IT teams to focus on strategic initiatives, driving innovation and growth throughout the organization.
The workflow also ensured strict adherence to security protocols and compliance standards, mitigating potential risks and bolstering data integrity. Automating this critical process has freed up valuable time for HR and IT teams to focus on strategic initiatives, driving innovation and growth throughout the organization.
Empowering Informed Decisions with Comprehensive Reports
I designed and implemented comprehensive reports that have revolutionized how critical information is gathered and utilized within the organization. The approach to generating reports on Rippling mobile device management agent installation status, device condition, device health, and computer inventory for efficient operations. By meticulously collecting and presenting this data in a user-friendly and visually appealing manner, teams can make informed decisions with unparalleled efficiency and precision.
The reports provide real-time visibility into the status of Rippling agent installations, enabling the IT department to monitor and manage device onboarding seamlessly. This enhanced oversight has resulted in reduced set up times, ensuring that new employees can access the resources they need from the moment they join the team. The reports capture device condition, and health has proactively identified and addressed potential hardware and software issues. Maintenance teams can now optimize their workflows, minimizing downtime and maximizing productivity across the organization. The computer inventory reports have streamlined asset tracking and resource allocation.
The reports provide real-time visibility into the status of Rippling agent installations, enabling the IT department to monitor and manage device onboarding seamlessly. This enhanced oversight has resulted in reduced set up times, ensuring that new employees can access the resources they need from the moment they join the team. The reports capture device condition, and health has proactively identified and addressed potential hardware and software issues. Maintenance teams can now optimize their workflows, minimizing downtime and maximizing productivity across the organization. The computer inventory reports have streamlined asset tracking and resource allocation.
Microsoft 365 Migration for Two Companies
I led the migration of two small businesses from a fragmented setup of Bluehost POP3 email, Zoom, Skype, and Dropbox to a unified Microsoft 365 environment. I assessed the existing infrastructure, planned the migration, and moved all email accounts while preserving mailbox structures and configuring Outlook for multi-account access. I migrated company documents from Dropbox to OneDrive and SharePoint with folder structure and permissions intact, then deployed Microsoft Teams to centralize communication. I trained staff, reorganized email rules after the move, and supported users through the transition.
LMS Course Development and Integration
I designed, developed, and implemented a centralized learning management solution using Rippling LMS to streamline employee onboarding and continuous training. I created and structured engaging learning paths, built interactive courses, uploaded and organized training materials, and configured assessments to measure learner progress. I integrated the courses with automated onboarding workflows, ensuring new hires were automatically enrolled in role-specific training based on department, location, and employment type. I collaborated with cross-functional stakeholders to keep course content current, tracked completion and compliance through reporting dashboards, and optimized the learning experience by incorporating feedback and analytics. The project significantly reduced manual onboarding effort, improved training consistency across teams, and increased course completion rates through automated enrollment and progress tracking.
Enterprise ICT Infrastructure & Security Administration Platform
Designed, administered, and supported enterprise ICT infrastructure and security systems within a regulated environment. The project involved managing network, server, and identity and access management (IAM) services, including Active Directory, SAP Security (user provisioning, role design, segregation of duties), and endpoint protection systems. I was responsible for ensuring high availability of systems, enforcing cybersecurity controls, and supporting audit and compliance requirements.
I also supported system integrations across tools such as ServiceNow (ITSM), Microsoft 365, Linux/Windows servers, and monitoring solutions like Darktrace. Additionally, I contributed to backup management, incident response, and vulnerability remediation efforts. My role included ensuring operational stability, improving access governance, and supporting secure digital transformation initiatives across the organization.
I also supported system integrations across tools such as ServiceNow (ITSM), Microsoft 365, Linux/Windows servers, and monitoring solutions like Darktrace. Additionally, I contributed to backup management, incident response, and vulnerability remediation efforts. My role included ensuring operational stability, improving access governance, and supporting secure digital transformation initiatives across the organization.
IT Service Feedback & Client Experience Collection System
Designed and structured a client feedback and requirements collection system to improve how stakeholder and user requirements are gathered for IT and digital service delivery projects. The system focused on capturing structured input around user experience, service quality, branding needs, and technical expectations.
I developed standardized questionnaires and feedback forms used to engage clients and internal stakeholders before and during project delivery. The solution ensured consistent requirement gathering, reduced ambiguity in project scope, and improved alignment between business expectations and technical implementation.
The feedback framework also supported continuous service improvement by enabling teams to identify recurring issues, measure satisfaction, and refine ICT service delivery processes. It contributed to better decision-making in solution design and improved communication between technical teams and end users.
I developed standardized questionnaires and feedback forms used to engage clients and internal stakeholders before and during project delivery. The solution ensured consistent requirement gathering, reduced ambiguity in project scope, and improved alignment between business expectations and technical implementation.
The feedback framework also supported continuous service improvement by enabling teams to identify recurring issues, measure satisfaction, and refine ICT service delivery processes. It contributed to better decision-making in solution design and improved communication between technical teams and end users.
Accounting and Payroll Automation Using Quickbooks
I automated accounting tasks such as bookkeeping, invoicing, time tracking, expense tracking, and inventory tracking with increased accuracy. This allowed businesses to easily track employee hours, set up payment schedules, and pay employees.
Enterprise Infrastructure & Systems Administration Platform
Supported and administered enterprise-grade IT infrastructure spanning Windows and Linux servers, ensuring high availability, performance, and secure service delivery across business-critical systems. The environment included Active Directory, email systems (IBM Notes), and core enterprise applications integrated within a centralized IT ecosystem.
I was responsible for server administration, system monitoring, performance optimization, and troubleshooting infrastructure issues. The role also included coordinating system upgrades, managing configuration changes, and ensuring operational stability across production environments. This work contributed to improved system uptime, reduced incidents, and more reliable service delivery across the organization.
I was responsible for server administration, system monitoring, performance optimization, and troubleshooting infrastructure issues. The role also included coordinating system upgrades, managing configuration changes, and ensuring operational stability across production environments. This work contributed to improved system uptime, reduced incidents, and more reliable service delivery across the organization.
Enterprise Cybersecurity Monitoring & Incident Response System
Supported enterprise cybersecurity operations through the deployment and management of endpoint protection, threat monitoring, and incident response systems. The environment included tools such as Symantec Endpoint Protection Manager and Darktrace for real-time threat detection and response.
I was responsible for monitoring security alerts, investigating potential threats, coordinating incident response activities, and ensuring timely remediation of vulnerabilities. The role also involved supporting backup and recovery processes, strengthening endpoint security policies, and assisting in compliance reporting. These efforts improved threat visibility, reduced response times, and strengthened the organization’s overall security posture.
I was responsible for monitoring security alerts, investigating potential threats, coordinating incident response activities, and ensuring timely remediation of vulnerabilities. The role also involved supporting backup and recovery processes, strengthening endpoint security policies, and assisting in compliance reporting. These efforts improved threat visibility, reduced response times, and strengthened the organization’s overall security posture.
Education
2012 - 2015
Bachelor's Degree in Information Technology
Jomo Kenyatta University of Agriculture and Technology - Nairobi, Kenya
Certifications
APRIL 2026 - PRESENT
ERP Systems & Database Management, Development, Maintenance and Upgrade
The Computer Society of Kenya
NOVEMBER 2025 - PRESENT
Okta
Udemy
NOVEMBER 2025 - PRESENT
Power Automate - Complete Guide to Microsoft Power Automate
Udemy
OCTOBER 2025 - PRESENT
Mastering Microsoft 365 SharePoint Online: Essential Guide
Udemy
OCTOBER 2025 - PRESENT
Business Writing & Technical Writing Immersion
Udemy
APRIL 2025 - PRESENT
Generative AI, ChatGPT, Copilot & AI Agents Masterclass 2025
Udemy
FEBRUARY 2025 - PRESENT
Hacking Public Speaking
Udemy
MAY 2024 - PRESENT
Cloud Computing Azure
Proven Training & Consultancy Solutions Limited
SEPTEMBER 2022 - PRESENT
Privacy and Data Protection for Champions
The Computer Society of Kenya
FEBRUARY 2022 - PRESENT
Scrum Fundamentals Certified
Scrum.org
NOVEMBER 2019 - PRESENT
SAP ADM950: Secure System Management
SAP
NOVEMBER 2019 - PRESENT
SAP ADM940: AS ABAP Authorization Concept
SAP
NOVEMBER 2019 - PRESENT
SAP ADM: 900 System Security Fundamentals
SAP
NOVEMBER 2019 - PRESENT
Salesforce Certified Administrator in Enterprise Linux
SUSE
SEPTEMBER 2016 - PRESENT
Data Warehouse Specialist
IBM
SEPTEMBER 2010 - PRESENT
CompTia Network + Support Skills
CompTIA
Skills
Libraries/APIs
SharePoint API, Slack API, Google API, Claude API, React, OpenAI API, Square API, Zod, QuickBooks API, REST APIs, Google Drive API, API Development, Node.js, Stripe, Azure API Management
Tools
SAP Security, SAP Controlling (CO), SAP S/4HANA, Microsoft Excel, Microsoft Exchange, Google Workspace, Jira, Google Sheets, Microsoft Power Apps, Adobe, Grafana, Claude, Microsoft AI, Claude Code, Jamf Pro, Microsoft Intune, Zapier, xUnit.net, Wix Installer, Microsoft Power Pages, Google Forms, Darktrace, IBM Notes, Git, Odoo, n8n, Pytest, Prisma, Vitest, SAP Remote Function Call (RFC)
Languages
ABAP, SQL, C#, Python, XML, TypeScript, PHP, VB.NET, XAML, JavaScript, HTML5, CSS3, C#.NET, C++
Frameworks
.NET, Tailwind CSS, Windows Presentation Foundation (WPF), LangGraph, Next.js, Laravel, ASP.NET Core, Entity Framework Core, OAuth 2, Fastify
Paradigms
Agile, Requirements Analysis, Role-based Access Control (RBAC), DevOps, SCORM, Database Design, Model Context Protocol (MCP), UI Design, UX Design, Microservices
Platforms
SAP HANA, Linux, Windows Server, Amazon Web Services (AWS), Google Cloud Platform (GCP), Azure, SharePoint, Microsoft Power Automate, Microsoft Copilot Studio, Microsoft Power Platform, Desktop, Azure Functions, HubSpot, Power Automate Cloud Flow, Windows Server 2019, Docker
Storage
Google Cloud, Azure Active Directory, Microsoft Entra ID, Microsoft SQL Server, Data Centers, SAP S/4HANA Cloud, JSON, Data Integration, MySQL, Data Validation, XML-RPC, PostgreSQL, SQLite
Industry Expertise
Cybersecurity, Project Management, Accounting
Other
SAP, Data Privacy, Networking, Access Control, SAP ERP, SAP Implementation, SAP Integration, IT Support, IT Security, Security, System Administration, Network Security, Technical Documentation, Architecture, Enterprise Resource Planning (ERP), Information Security, Microsoft 365, Office 365, Intuit QuickBooks, QuickBooks Online, Mobile Device Management (MDM), IT Automation, Solution Architecture, Gmail, Technical Leadership, APIs, Network Administration, SAP Architecture, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Fractional CTO, Data Engineering, QuickBooks Desktop, SaaS, System Design, Artificial Intelligence (AI), Generative Artificial Intelligence (GenAI), Active Directory (AD), Virtualization, OpenAI, Data Modeling, Data Security, VoIP Administration, SharePoint Online, API Integration, Large Language Models (LLMs), HRIS, Okta, Integration, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Agentic AI, Advisory, Consulting, Deployment, Team Leadership, Data Migration, Accounting Systems, Inventory Tracking, AI Tools, Endpoint Security, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, API Connectors, Error Handling, Job Schedulers, Webhooks, Workflow Design, Email Migration, User Permissions, Security Audits, AI Integration, Cloud Computing, Microsoft Azure, System Integration, Ticketing Systems, User Onboarding, Compliance, Infrastructure as Code (IaC), Cloud Architecture, Azure Administrator, Data Loss Prevention (DLP), System Architecture, Data Governance, Cloud Infrastructure, Code Review, Database Optimization, Multi-tenant Architecture, IT Operations Management (ITOM), Stakeholder Engagement, Process Automation, Asset Management, IT Asset Management (ITAM), SharePoint Migration, Test Documentation, Technical Architecture, IT Consulting, SharePoint Administration, Third-party APIs, Third-party Integration, ITIL 4, Learning Management Systems (LMS), Dashboards, Full-stack Development, Data Retention, Microsoft Lists, Rippling, Workflow Automation Design, AI Architecture, AI Engineering, Wireless Systems, Email, Integrations, Anthropic, AI Agents, Business Analysis, Jamf, Prometheus, API Gateways, Retrieval-augmented Generation (RAG), LangChain, Prompt Engineering, LLM Integration, Agentic Coding, AI Agent Orchestration, Microsoft Dataverse, Back-end, HubSpot CRM, Single Sign-on (SSO), GDPR, ISO 27001, Symantec, Backups, IT Troubleshooting, Incident Response, Vulnerability Management, Enterprise Architecture, SDKs, Desktop App, qbXML, Data Mapping, Software Development, .NET 10, COM Interop, Payment Gateways, Software Architecture, Relational Data Mapping, Cloud Engineering, CSV, CSV Import, FastAPI, AI-assisted Development, Agentic AI Systems, CI/CD Pipelines, Data Extraction, Revenue Cycle Management, Data Reconciliation, BAPI, OData, SAP Open Data Protocol (OData)
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring