Engineering secure systems. Leading them into production.
I'm Eshtaol Girma, a technology leader and hands-on engineer working across software development, platform architecture, DevSecOps, cloud infrastructure, and production operations. I turn complex requirements into systems that are secure, scalable, and built to hold up in the real world.
Engineering with an operational mindset
My work spans the full technology lifecycle: understanding requirements, designing architecture, building applications, securing infrastructure, automating delivery, and keeping systems running well in production. I work across mobile and web development, APIs and backend services, containerized infrastructure, CI/CD, cloud platforms, identity and access management, and DevSecOps.
That breadth shapes how I think about software. I don't see it as just code, it's a living system that has to stay secure, maintainable, observable, and reliable long after it ships. Beyond hands-on engineering, I lead technical delivery, coordinate production deployments, help set engineering practices, and work with teams to untangle hard application and infrastructure problems.
What draws me in particular is building digital platforms that solve real problems at the scale of an organization, or a country.
Full lifecycle
Architecture → production
Mobile + Web
Flutter, FastAPI, cloud
Secure by default
IAM, DevSecOps, audit
Core capabilities across the delivery lifecycle
Hands-on engineering from mobile and web through backend, cloud, identity, and secure production operations.
Selected systems and products
Case studies spanning DevSecOps, national-scale platforms, mobile, and applied AI across healthcare and agriculture. Sensitive systems are shared with limited detail.
Enterprise DevSecOps Environment
Integrated Software Delivery & Security Platform
Designed and integrated a centralized DevSecOps environment connecting source control, CI/CD, identity management, secrets management, code quality, container infrastructure, and production deployment workflows.
Digital Civil Registration & Vital Statistics
National-Scale Digital Service Platform
Deployment and integration of a distributed civil registration platform composed of multiple frontend, backend, authentication, gateway, storage, notification, and domain-specific services.
Certain implementation and organizational details are intentionally omitted.
Document Management System
Enterprise Digital Document Platform
A centralized document management platform designed to digitize organizational document workflows, improve information accessibility, and provide structured and controlled management of digital records.
Learn & Transcribe
AI-Powered Language Learning & Transcription
A mobile platform combining language-learning experiences with transcription capabilities to make Ethiopian language content more accessible through a user-friendly digital application.
Breast Cancer Detection
AI-Assisted Healthcare System
An applied artificial intelligence project focused on supporting breast cancer detection through machine learning and integrating predictive capabilities into a practical software solution.
Coffee Leaf Disease Detection
AI-Powered Agricultural Disease Detection
An AI-enabled application designed to identify diseases affecting coffee plants from leaf images, demonstrating the practical application of computer vision to agricultural challenges.
A career that pairs people leadership with deep execution
From recruitment and program delivery to engineering leadership—communication, coordination, and production-grade technical work.
Deputy Director, Software and Infrastructure Development Division
Ethiopian Artificial Intelligence Institute
- Deputy Director for the Software and Infrastructure Development Division, responsible for mobile application development and DevSecOps.
- Provide technical leadership across the full software lifecycle: architecture, development, security, deployment, monitoring, and production operations.
- Architect and deploy containerized applications and microservices with Docker, Kubernetes, and cloud infrastructure for scalable production environments.
- Design CI/CD and DevSecOps pipelines with automated testing, code-quality analysis, image management, and security controls across environments.
- Lead Identity and Access Management with Keycloak and FreeIPA, including SSO, OIDC, LDAP federation, and role-based access control.
- Lead production deployments and infrastructure operations across on-premises and cloud (Huawei Cloud, Kubernetes), managing 40+ projects with around 13 in production.
AI Software Developer
Ethiopian Artificial Intelligence Institute
- Developed AI-enabled mobile and web applications across the full lifecycle: requirements, design, implementation, integration, testing, and deployment.
- Built Flutter and Dart mobile apps with reusable components, maintainable architecture, and API-driven functionality; contributed to the Learn and Transcribe app.
- Developed backend services and APIs with Python, Flask, and FastAPI to support mobile, web, and AI-powered applications.
- Integrated applications with AI/ML services and translated research prototypes into usable software, including healthcare projects such as a breast cancer initiative.
- Collaborated with AI researchers and engineering teams to turn requirements and AI concepts into functional, production-minded applications.
Foundations in networking, security, cloud, and AI
Formal education paired with certifications across networking, cybersecurity, cloud virtualization, and machine learning.
Education
Addis Ababa University
Bachelor of Science in Information Technology, with Distinction
Thesis: Receipt Management System. Designed and developed a smart receipt and personal expense management application that uses OCR to extract purchase information from receipt images and automatically organize transaction data. The system analyzes spending history to generate expense summaries and uses machine learning and purchase patterns to predict likely future purchases and their probabilities. It also incorporates price comparison to help users identify better purchasing options and receipt verification functionality designed to detect potentially fraudulent receipts. The solution was designed to give users greater visibility into their spending patterns and support more informed financial decisions.
Certifications & practical learning
Certified Network Associate (CCNA)
Enterprise networking, security, and automation.
CyberOps Associate
Network Security
IT Academy: Virtualization Concepts
Cloud, network, and software-defined storage virtualization.
Introduction to Data Science
Supervised Machine Learning: Regression and Classification
Practical learning
Network security, cloud platforms, identity systems, DevSecOps, and production operations.
Let’s build something useful, secure, and lasting.
Open to senior engineering opportunities, consulting, technical partnerships, product collaborations, and conversations about mobile, cloud, identity, and DevSecOps.
Addis Ababa, Ethiopia
Open to remote & international collaboration