Orwa Diraneyya

AI-tooling & platform engineer — security-first, distributed-systems backend

Almere (Netherlands), Europe

Platform engineer who takes ambiguous, compliance-critical problems from a blank page to a live production system, largely solo: event-driven backends, Kubernetes/GitOps deployment, fail-closed security and IAM — and a layer deeper than most on AI-agent tooling, which I build, test, publish and harden as production infrastructure rather than merely use.

Work Experience

Uber

Application Developer II — Enterprise Applications (Collaboration & AI Integration)

2026
(8 months)
Sole engineer, design through production, of an enterprise Slack integration-governance platform: risk-scores every app-install request by OAuth scope, routes approvals, keeps an append-only audit trail and runs a human-in-the-loop deprovisioning workflow across a large multi-workspace Slack estate with over 1,000 integrations. Built as an event-sourced system on Google Apps Script and Node.js, deployed to Kubernetes via GitOps and operated without direct cluster access. Alongside it: security/IAM investigations, cloud and VM-fleet operations, data engineering, and authoring and hardening the team's AI-agent tooling.
- Designed, built and shipped to production, almost single-handedly in about three and a half months, the platform above: ~24,000 lines across three runtimes, a ~289-assertion test suite kept continuously green, a layered unit/smoke/end-to-end strategy for a system with irreversible live side effects, and a self-verifying deploy pipeline.
- Engineered an event-sourced decision model with pure-fold state derivation so approvals are genuinely reversible; added policy-snapshot consistency, per-request locking and two-layer deduplication for exactly-once processing across concurrent live and fallback paths.
- Made the security-first architecture call to remove broad token-minting power from the internet-facing component — the harder design over the faster one — to shrink the blast radius of a compromise; fail-closed boot-time scope checks, a single guard on the one destructive operation, disarmed-by-default production.
- Migrated the always-on services to Kubernetes via GitOps and operated them with no kubectl access, assembling a metrics/logs/GitOps observability toolkit; root-caused a production incident that was silently dropping about half of all live events.
- Reduced per-event processing latency by ~35% through profiling-driven optimisation and event batching; moved all credentials into an enterprise secret manager with per-workload least-privilege scoping and validate-in-place diagnostics that never expose a secret.
- Hardened the AI tooling layer itself: an asyncio socket-multiplexing daemon that fixed a real connection-exhaustion bug in a shared internal AI gateway, an auto-reapplying source patch to a vendor binary, and a ~16,000-line unit-tested automation library. Redesigned an internal GitHub-onboarding skill from a command wrapper into an interactive flow for non-programmers — "put this on GitHub" → guided organisation choice, naming conventions, and a branch layout that keeps history rewritable under org protections — and published it company-wide.
- Root-cause discipline across the surround: ended a data-duplication bug that had survived three fixes over four months (racing background jobs → one locked job); diagnosed and documented from scratch a two-layer authentication model nobody had explained, delivering a confidence-graded report with owner-assigned recommendations.
- Data engineering: owned a licence-and-budget dashboard as a live product on SQL threshold models over a daily-refreshed warehouse; reproduced a vendor's official totals to the digit to disprove a false alarm while quantifying the one real anomaly; processed tens-of-millions-of-row datasets for a storage-platform migration.
OrwaTech (Almere)

Founder — unpaid side activity alongside Uber 👨🏼 Independent

2026
(6 months)
A registered sole proprietorship (KVK 42029128) under which I run self-hosted infrastructure and independent software, currently all unpaid: the website and booking/messaging stack of my father's surgical practice in Jordan, and a Telegram-integrated family photo archive on my own server in Almere. Disclosed to my employer as a side activity.
Vennre

Lead Developer / Software Architect

2025
(4 months)
Owned the PostgreSQL/Supabase backend and two front-ends (Remix/React employee portal, Ionic mobile app) of a financial application; built a logged, multi-layer-secured HubSpot synchronisation system deployable as a script or an edge function.
- Schema migrations, triggers and stored procedures across production, staging and local environments; tooling to migrate data between SaaS and local Supabase instances.
- Architecture decisions made for long-term maintainability and sound abstractions in a security-sensitive codebase.
Autohaus Twardowski GmbH (Wegberg)

Open-Source Advocacy Consultant 👨🏼 Independent

2024
(3 months)

Scoped and planned an ERP solution on Frappe/ERPNext for a car dealership, including a hardware integration to check vehicles in automatically over OBD-II.
Reboot Mobility GmbH (Cologne)

Open-Source Advocacy Consultant 👨🏼 Independent

2024
(6 months)

Built a business-intelligence dashboard on PostgreSQL and Apache Superset, writing and optimising the SQL behind each chart with the account managers.
Wild Code School (Berlin)

Full-Stack Instructor

2022 - 2023
(1 year)
Taught full-stack web development to two consecutive cohorts; led an industry collaboration with the REMONDIS group that produced a professional app prototype designed and built by the students.
- Built teaching tools on the Babel JS compiler (inlining/unwinding transformations) to make functions and loops visible.
RWTH University Aachen

Scientific Employee

2019 - 2022
(3 years)
Led the development of a UHF RFID tracking system contracted by PORR and three other construction companies; designed and taught two Master-level courses (GitLab, containers, unpackaged software); ran the institute's IT infrastructure (ZFS migration, Active Directory, CI/CD).
- Drafted the innovation strategy for the Construction Robotics Masters, adopted by the institute; wrote embedded C++ controlling robotic hardware over MQTT.
Precise Trading LLC (Dubai)

Technical and Maintenance Manager

2018 - 2019
(10 months)

Led the maintenance and technical-support team for the Middle East and Africa region; rebuilt the 3D-printer training manuals and the partner ticketing process.
TechShop Inc. (Abu Dhabi)

Rapid-Prototyping Consultant

2015 - 2018
(3 years)

Taught over 200 group classes across 3D printing, laser cutting, CNC, casting, metal and woodworking and electronics; brought a long-idle 3-axis HAAS CNC mill back into paid service.
Originbase LLC (Dubai)

Community Development Manager

2015 - 2017
(2 years)

Co-founded a makerspace with two partners; taught 100+ rapid-prototyping classes and revived its lost-wax casting equipment.
International School of Applied Sciences (Dubai)

Computer Science Teacher

2013 - 2015
(2 years)

Taught the ICDL curriculum to students aged 8–18 and started an after-school electronics and robotics club.

Education

King Fahd University for Petroleum and Minerals (KFUPM), Dhahran (Saudi Arabia)

Master of Science (M.Sc.) in Computer Engineering

2007 - 2012
(5 years)

Coursework: Computer Architecture · Principles of VLSI Design · Digital System Design & Synthesis · Analogue Integrated Circuit Design · Computer Arithmetic · Computer Networks · Local & Metropolitan Area Networks · Database Design & Implementation
Al-Balqaa' Applied University (BAU), As-Salt City (Jordan)

Bachelor of Science (B.Sc.) in Computer Engineering

2002 - 2007
(5 years)

Coursework: Computer Skills C++ · Object Oriented Programming · Computer Architecture & Organization · Advanced Programming · Digital Electronics · Engineering Drawing · Data Structures and Algorithms · Microprocessor Systems · Database Systems · Design of Digital Systems · Computer Graphics · Operating Systems · Digital Signal Processing

Work Samples

Withy Voice — local push-to-talk dictation for macOS

Source: https://github.com/diraneyya/withy
- Hold a key, speak, release: text is typed into the focused app. ffmpeg capture → whisper.cpp (always local) → a deterministic corrector → an optional LLM polishing pass guarded so that no word you did not say can appear → keystroke injection.
- Stdlib-only Python plus a Hammerspoon Spoon for the hotkey and menubar; a three-way merge keeps the user's own prompt edits across updates; a shipped vocabulary directory lets a downstream fork distribute an organisation's own terms without colliding with upstream.
Pythonwhisper.cppHammerspoon / LuamacOS AccessibilityLLM post-processingthree-way mergeApache-2.0
Medical Clinic Website & Booking Platform

Demo: https://abuobaydatajjarrah.com

Source: https://github.com/mumendiraneyya/clinic_website
- Built and maintain a full-stack booking platform for a medical clinic in Amman, Jordan, serving as the sole developer and infrastructure engineer.
- The static website (Astro/Tailwind, deployed on Cloudflare Pages) features an Arabic-first RTL design with a phone-verified booking flow that integrates Cal.com, WhatsApp Business API, and an SMS gateway built from Android phones running Termux over reverse SSH tunnels.
- Engineered a self-hosted backend on n8n with custom Node.js microservices (phone validation via libphonenumber, async SMS dispatch), PostHog analytics with a full booking funnel and ad fraud detection, and Telegram notifications for clinic staff.
Astro.jsTailwind CSSCloudflare Pagesn8nCal.comWhatsApp Business APIPostHogsystemdreverse SSH tunnelsTermuxSMS gatewayArabic RTLJWTphone verification
Family photo archive on Telegram + Immich
- A self-hosted family photo system: Immich behind a direct-path reverse proxy, with a Go Telegram bot that turns each family group into a shared album — upload from a Mini App, view via Telegram-to-Immich OIDC login, archive a full-quality original by attaching it as a file in the group.
- Auto-enrolment on promoting the bot to admin; camera-tag gating so only originals (never Telegram's re-encodes) are archived; face tagging inside Immich; video routed through a browser upload path to escape the Bot API's 20 MB fetch cap.
GoTelegram Bot APIImmichOIDCCaddyProxmox LXCEXIF / ffprobe gating
Hubspot Integration with Slack Notifications
- Built a robust data synchronisation system between the Vennre platform and HubSpot, prioritising reliability and maintainability.
- The integration featured comprehensive logging, multiple security layers for both manual and automated operations, and flexible deployment options as either a standalone script or edge function.
- Designed with debugging capabilities that allowed step-through code inspection even in edge function environments, ensuring rapid troubleshooting and seamless maintenance.
robustintegrationHubspot Batch APIUpsertdata comparisonautomationcliEdge FunctionSupabaseSlack notificationsloggingerror handling
Excavator Simulator with Inverse Kinematics and Hydraulic Modelling

Demo: https://rwth-crmasters-sose22.gitlab.io/course-material/excavator-simulator/simple.html

Source: https://gitlab.com/rwth-crmasters-sose22/course-material/excavator-simulator
- Developed a browser-based real-time simulation of a hydraulic excavator to enhance Construction Robotics Master's coursework at RWTH Aachen.
- Enabled remote MQTT control for students, featuring inverse-kinematic (XYZ) trajectory planning and precise hydraulic system modeling.
- Achieved high-fidelity simulation by compiling SIMULINK/ikfast C++ models into WebAssembly, which ran seamlessly using a webworker.
professionalprototypeSIMULINKikfastPythonURDF filesThree.jsMQTTWASMweb workeremscriptenC++roboticsDigital-TwinNode-REDeducationdemo
Student App Concept/Prototype for REMONDIS Group

Source: https://github.com/WildCodeSchool/2022-07-EN-Berlin-Remote1-Project3Planning
- Assisted students in the ideation phase of the app, including planning the user roles, the REST API, and the scoping of the application.
- Taught the students what a state machine is, and helped them model the system using a state diagram.
- Facilitated meetings with future app users, and championed their perspective by defending a todo-centered UI design, which was initially opposed by the students.
teachingindustry collabbusiness processoperationsmodellingoptimisationmobiledocumentationuser analysisuser rolesstate machineReact.jsRedux
UHF RFID Tags/Readers in Construction (R&D)
- Led the end-to-end prototyping of a construction process leveraging UHF RFID technology, delivering a functional system within a 6-month timeline.
- Researched existing technology and the market, resulting in the recommendation of an IMPINJ UHF RFID reader with an easy-to-use REST API interface.
- Developed a custom software to provide a handheld UHF RFID reader with a REST API interface using a Java-based Software Development Kit (SDK).
- Used containerisation (Docker) and open-source less-code tools (i.e. NodeRED) to implement a number of customisable workflows for registering and tracking construction materials on the construction site.
BIMR&Dresearchno-codeindustryconstructionPORRSaint-GobainUHF RFIDantennasIMPINJ readerREST APINodeREDDockerJavaSDKcustom developmentPowerShellpower system
harmony-resistance

Demo: https://harmony-of-resistance.pages.dev/

Source: https://github.com/diraneyya/harmony-of-resistance

Claude.aiClaude-CodePythonaudio processingspectral analysisfrontendactivismhumanityjournalism
mossh

Source: https://github.com/diraneyya/mossh
- The easiest way to get started with the mobile shell (Mosh)
sshroamingcellularremote workopen-source
pg_fetch_cycle

Source: https://forgejo.orwa.tech/open-source/pg_fetch_cycle

PL/pgSQLPostgreSQLpostgres extensionpg_netscraperthick databasebig dataopen-sourceMIT license
Tar Extraction Exclude-Pattern Demo

Source: https://github.com/diraneyya/bug_proxmox_6040

volunteeringProxmoxbugpatchtarballexclude patterntmuxinteractiveeducationdemo
URDF-to-WASM CI/CD Pipeline

Demo: https://diraneyya.gitlab.io/paper-wasm-ik-pipeline

Source: https://gitlab.com/diraneyya/paper-wasm-ik-pipeline

GitLab CI/CDroboticsURDF filesWASMikfastPythonC++emscripteninverse kinematics
docker2lxc

Source: https://github.com/diraneyya/docker2lxc

hobby projectDockercliProxmoxLinux Containerstarbash tricksnovel interface

Core Skills

Root-Cause Debugging
Security-First Design
Systems Architecture
Technical Writing
AI-Assisted Engineering
Excellent Communication
Teaching
Mentorship
Working Under Ambiguity
Rapid Prototyping
Interdisciplinary Collaboration
Research

Technical Skills & Deployments

Linux
Windows
MacOS X
Touch Typing
Vim
Markdown
Bash
PowerShell
C/C++
Python
Javascript
Typescript
Google Apps Script
Node.js
Swift
Go
Perl
PHP
WebAssembly
Java
Ruby
Rust
Lua
HTML5
CSS3
React.js
Astro.js
Next.js
Tailwind CSS
Three.js
Bun
Deno
Jest
Node-RED
SQL
MySQL
PostgreSQL
BigQuery
MongoDB
InfluxDB
Apache Superset
Prometheus
Grafana
HTTP/HTTPS
Networking
MQTT
Traefik
Git
GitHub Actions
GitLab CI/CD
Forgejo
Jenkins
Dockerfile
Docker Compose
Podman
Kubernetes
GitOps
Helm Charts
Ansible
Terraform
Proxmox
vast.ai
OAuth 2.0
Secret Manager
Okta / SSO
Active Directory
Slack API
Google Workspace APIs
Claude Code
MCP servers
Ollama
Langchain
n8n
immich
Hubspot API
Cal.com API
Supabase (SaaS/self-hosted)
PocketBase
Arduino
G-CODE