Hesbon Osoro: Software & Platform Engineer

Hi ,

🚀 Software Engineer | Platform & DevOps | Full-Stack Developer | AI & Cybersecurity Enthusiast

🛠️ New: Repository Management Tools - Automatically clone and manage all portfolio projects

👨‍💻 About Me

As a Software Engineer with 3+ years in the field, I thrive on the process of transforming complex problems into impactful, scalable solutions. My experience spans delivering production-grade web applications (featured in Sample Projects), building the cloud platforms they run on, and contributing to cutting-edge AI model training and data enhancement.

I view every project as a new challenge and a chance to evolve. I collaborate closely with diverse stakeholders to deliver efficient results, always staying updated on the latest trends and sharing my refined solutions with the wider community.

🌐 Delivered 30+ production-ready projects (React, Next.js, Node.js, GraphQL, PostgreSQL, MongoDB).
☸️ Design containerised services for Kubernetes with Terraform-managed AWS infrastructure and GitHub Actions CI/CD (see the showcase).
🤖 Contributed to AI model training & dataset validation for research and academic projects.
🔐 Self-driven in CompTIA Ethical Hacking and HackTheBox labs.
🎓 Background in mathematics, data modeling, and content evaluation: available for MATLAB, R, Tableau and data-analysis work.

🛠️ Tech Stack

Languages: Go, TypeScript, JavaScript, Rust, Python, SQL, Bash
Frontend & APIs: React, Next.js, Node.js, GraphQL, REST
Cloud & Platform: AWS (EKS, ECR, IAM, VPC), Docker, Kubernetes, Kustomize, Terraform
DevOps & SRE: GitHub Actions (OIDC), Prometheus, SLOs & error budgets, Nginx, Linux, Git
Databases: PostgreSQL, MongoDB, MySQL, Firebase
Math & Data: MATLAB, R, Tableau, Python (NumPy, pandas), Excel, statistics, numerical methods
Security: Ethical Hacking (CompTIA), HackTheBox, least-privilege IAM, Pod Security Standards
Other: Academic writing, research, data annotation

Go, Rust, TypeScript, JavaScript, Python, React, Next.js, Node.js, GraphQL, HTML, CSS
Docker, Kubernetes, Terraform, AWS, GitHub Actions, Prometheus, Nginx, Linux, Bash, Git
PostgreSQL, MongoDB, MySQL, Firebase, R, MATLAB

🧰 Platform Engineering Showcase

Production-style reference code in showcase/, linted, tested, and validated on every push by CI.

Area	What it demonstrates	Code
☸️ Kubernetes	Kustomize base + staging/production overlays, zero-downtime rollouts, HPA, PDB, NetworkPolicy, restricted Pod Security, IRSA	deploy/k8s
🐳 Docker	Multi-arch, cache-mounted build producing an ~8 MB distroless, non-root image with a built-in healthcheck	Dockerfile
🏗️ Terraform	AWS VPC + EKS (KMS-encrypted secrets, IMDSv2, access entries), ECR lifecycle rules, keyless GitHub OIDC deploy role	infra/terraform
🐹 Go	Orders API with graceful drain for K8s, idempotency keys, Prometheus RED metrics, structured logs, race-tested	orders-api
🦀 Rust	Thread-safe keyed token-bucket rate limiter with a deterministic test clock, clippy-pedantic clean	edge-ratelimit
🟦 TypeScript	Retry with full-jitter exponential backoff, abort support, and a half-open circuit breaker	resilience-ts
📈 SRE	Multi-window burn-rate SLO alerts and a Python error-budget release gate	observability · slo_budget.py
🚀 CI/CD	GitHub Actions: gofmt/vet/race, clippy, tsc, kubeconform, terraform validate, shellcheck, buildx	ci.yml
🐚 Bash	Digest-pinned deploy with server-side dry run, smoke test and automatic rollback	deploy.sh

Peek at the code

Kubernetes: never drop capacity during a rollout, and run locked down

strategy:
  rollingUpdate:
    maxSurge: 25%
    maxUnavailable: 0
template:
  spec:
    securityContext:
      runAsNonRoot: true
      seccompProfile: { type: RuntimeDefault }
    containers:
      - name: orders-api
        readinessProbe: { httpGet: { path: /readyz, port: http } }
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          capabilities: { drop: ['ALL'] }

Go: drain before shutdown so Kubernetes stops routing traffic first

<-ctx.Done()                  // SIGTERM from the kubelet
app.ready.Store(false)        // /readyz -> 503, pod leaves Service endpoints
time.Sleep(cfg.DrainDelay)    // let kube-proxy / ingress catch up
return srv.Shutdown(shutdownCtx) // finish in-flight requests

Terraform: CI deploys to AWS with short-lived OIDC tokens, no stored keys

condition {
  test     = "StringLike"
  variable = "token.actions.githubusercontent.com:sub"
  values = [
    "repo:${var.github_repository}:ref:refs/heads/main",
    "repo:${var.github_repository}:ref:refs/tags/v*",
  ]
}

Docker: distroless, non-root, self-checking

FROM gcr.io/distroless/static-debian12:nonroot
COPY --from=build /out/orders-api /orders-api
USER nonroot:nonroot
HEALTHCHECK CMD ["/orders-api", "healthcheck"]
ENTRYPOINT ["/orders-api"]

📊 Monthly development breakdown

From: 10 September 2026 - To: 10 October 2026

Markdown     19 hrs 8 mins         ████████▓░░░░░░░░░░░░░░░░   34.52 %
Python       18 hrs 8 mins         ████████▒░░░░░░░░░░░░░░░░   32.70 %
TypeScript   6 hrs                 ██▓░░░░░░░░░░░░░░░░░░░░░░   10.84 %
Other        4 hrs 27 mins         ██░░░░░░░░░░░░░░░░░░░░░░░   08.03 %
HTML         3 hrs 2 mins          █▒░░░░░░░░░░░░░░░░░░░░░░░   05.50 %

📂 Featured Projects

Show 27 live projects: click a screenshot to open the app, or the GitHub icon for its source

Restaurant E-commerce site	Tourism Hampi
Video App	Chat App
Dating Site	Salad site
Agency Site	Sample Portfolio
Recipes Homemade	Messaging App
Shoppy Dashboard	Simple Multi-step form
Alarm Clock	Snake Game
React Chess	Sort Visualizer
Shopping Cart	Custom Pagination
Custom Select	Drag and Drop
CK 5 Editor	Tic Tac Toe
Face Auth	Dynamic Next/Previous buttons
Video Stream	Cengage \| MindTap (69 projects)
Follow For Follow Back
CLICK ON THE ICON TO VIEW THE PROJECT'S REPOSITORY
CLICK ON THE PROJECT IMAGE OR THE BLUE LINK TO VISIT THE HOSTED PROJECT