I Ship Production Systems from Nairobi.
Enterprise ERP across 20 countries by day. AI-enabled products and growth infrastructure the rest of the time.
Most AI engineering happens on fast connections with cheap compute and mature payment rails. Mine does not. That constraint makes the work better.
gibson.seepu.co.ke · LinkedIn · seepu.co.ke · Digital card · Photography · gibson@seepu.co.ke
Live, not notebooks · AI in production Anthropic Messages API powering a live order assistant with catalog, category, pricing, and checkout tools. Cloudflare Workers running an LLM visitor assistant at the edge. Content and support pipelines on GPT-4 that cut draft time by 70 percent.
20 countries · Enterprise systems at multi-country scale NetSuite ERP, Solver, Journyx, and KProcure administered across a decentralized 20-country environment for an International NGO, employed by Global HQ in New York. Access reviews, segregation of duties, month-end close support, donor compliance. Previously Tier 2 & 3 support for 2,000+ users across 12 African countries at EGPAF. Freshservice and Freshdesk Expert certified through Freshworks University in 2026, with Freshservice running the ITSM day to day.
4 country offices · Cloud and identity infrastructure Microsoft 365, Azure, Intune, Entra ID, OKTA, and Active Directory. SharePoint and Power Automate workflow automation designed, deployed, and supported across four country offices. Backed by completed Microsoft Learn coursework in Azure Administrator and Security, Compliance, and Identity Fundamentals: RBAC, Azure Policy, Entra ID governance, Purview, and Defender XDR.
40% CPL reduction · Growth engineering Technical SEO including Core Web Vitals, crawlability, and site migrations. GEO and AEO for AI-era discoverability. Meta Ads at 5K to 7K USD monthly, cost per lead down 40 percent, conversions up 50 percent.
Full-stack bakery storefront and content platform for the Kenyan market. Sanity-backed catalog with KES pricing tiers, client-side cart, and an AI order assistant built on the Anthropic Messages API with tool use for catalog lookup, pricing, and order handoff. Split datasets separate public content from private order and subscriber data. Microsoft Graph Mail for notifications, structured Bakery schema, sitemap, and analytics.
The interesting constraint: card penetration is low and cart abandonment at a payment wall is high, so checkout hands off to WhatsApp where the customer already is. M-Pesa Daraja is on the roadmap. Designing for the payment rails people actually use is the difference between a working store and a portfolio piece.
Personal portfolio for Joan K. Muthoni, executive support and customer operations for local and international teams, from Nairobi. A digital business card with save-to-contacts and one-tap call/WhatsApp/email/LinkedIn, a QR flow feeding a private analytics dashboard (QR scans vs direct visits, button taps, device, country and a recent-activity feed, with no IPs stored), and Resend-powered resume requests.
The interesting constraint: the card's whole job is handing a stranger your phone number and email, but the same one-tap
tel:/mailto:links that make it usable are exactly the shape every plaintext-scraping bot regexes for. Contact details ship as base64 and decode client-side on click, so neither the HTML nor the JS bundles contain them in plain text, and robots.txt shuts crawlers out of the card entirely. Each button also has a server-side redirect fallback so it still works before hydration and inside in-app browsers (Instagram, WhatsApp); that redirect, the vCard and the tracking beacon refuse known bots and cross-site requests. The login (5/min and 20/hr per IP), the beacon and the resume form are rate-limited, a Redis outage degrades to in-memory limits instead of locking anyone out, andnpm auditreports zero production vulnerabilities.
One partner. Complete ICT and digital growth. Static marketing site engineered for speed on constrained connections, with an AI visitor assistant running as a Cloudflare Worker at the edge. Strategy, execution, and analytics as one operating model rather than three vendors.
The card behind the QR on my business cards: tap-to-save contact, one-tap call, WhatsApp, email, LinkedIn and GitHub, and a private dashboard with all-time scans, button taps, country, city and device. A Cloudflare Worker feeds a SQLite-backed Durable Object for atomic counters, with a KV event log for the activity feed.
The interesting constraint: GitHub Pages cannot set response headers and a public tracking endpoint is an open invitation to abuse. So the dashboard uses a signed HttpOnly session cookie instead of a stored password, throttling lives in the Durable Object where it cannot be raced, every page runs a hash-based CSP with no unsafe-inline, and no IP address is ever stored.
globalthrive.africa · Global Thrive Africa Youth mentorship and parenting education initiative in Kenya. I built the platform and I mentor on it, which means every design decision was tested against people actually using it on mobile data.
africii.org · AFRICII Mission-driven NGO platform with clear program pages, resource sections, and a flexible CMS backend, so the team publishes projects and updates without a developer on call.
| AI | Anthropic Claude, Messages API, tool use, agentic pipelines, Claude Code, GPT-4 |
| Web | Next.js, React, TypeScript, Tailwind, Sanity, Cloudflare Workers, Durable Objects, Workers KV, Upstash Redis, Vercel, GitHub Pages, WordPress, Resend |
| Enterprise | NetSuite, Solver, Journyx, KProcure, Unit4, Microsoft 365, Microsoft Graph, Azure, Intune, Freshservice, Freshdesk |
| Identity | Entra ID, Azure RBAC, Azure Policy, OKTA, Active Directory |
| Automation | Python, PowerShell, ARM templates, REST APIs, Wrangler, Power Automate, SharePoint |
| Data | Power BI, SuiteAnalytics, GA4, Search Console, Looker, custom first-party analytics (Upstash Redis, Recharts) |
| Security | Microsoft Purview, Defender XDR, NIST CSF, CII/CIP, SOPHOS, access reviews, web app hardening (CSP, rate limiting, bot filtering, dependency auditing), security headers, SPF/DKIM/DMARC, CISM in progress |
Oracle NetSuite AI Foundations Associate · Oracle NetSuite BI and Reporting Associate · PMI-CPMAI Introduction · Anthropic AI Fluency and Claude 101 · Freshservice Expert Certification · Freshdesk Expert Certification · CCNA v7 · ITIL Foundation · NIST Cybersecurity Framework · Critical Infrastructure Protection (CII/CIP) · Microsoft Azure and M365 Administration · Microsoft Azure Administrator · Microsoft Security, Compliance, and Identity Fundamentals · Microsoft Azure Fundamentals · Google Workspace Admin · PMD Pro · ITU Academy Digital Public Infrastructure · CISM in progress
Full verified list on Credly →
Governance · Completed on Microsoft Learn: Microsoft Azure Administrator, Microsoft Security, Compliance, and Identity Fundamentals, and Microsoft Azure Fundamentals. 60 modules and 15 learning paths across Azure RBAC and Policy, Entra ID identity governance, Microsoft Purview data governance and compliance, and Defender XDR. Achievements on Microsoft Learn →
ITSM and support · Completed at Freshworks University, October 2026, each as a full certification path: Freshservice Expert Certification and Freshdesk Expert Certification. Freshservice is the ITSM platform already in daily use in my current role.
My documentary photography has been published by the United Nations, WHO, and EGPAF. Same instinct as the engineering work: understand the people before you build the system. Professional portfolio at kahuna.photos.
Nairobi · UTC+3
Open to conversations about AI engineering, digital transformation, and enterprise systems roles, particularly where emerging market context is an asset rather than a footnote.
gibson@seepu.co.ke · LinkedIn · seepu.co.ke · Digital card · Photography · +254 726 659 469


