Mohamed Amine Khemiri
Software Engineer - Full-Stack Development & DevSecOps
Software Engineer experienced in designing, developing, and delivering scalable, maintainable, and secure applications. Skilled across the full stack : React, Angular, Spring Boot, .NET, Django, and in modern DevOps practices including CI/CD automation, Kubernetes, Infrastructure as Code, and cloud-native deployments.
About
Software Engineer focused on building scalable, maintainable, and secure full-stack applications from frontend and backend services to the pipelines and infrastructure that ship them.
Comfortable across the stack: designing REST APIs and services, and building the CI/CD, containerization, and monitoring layers that keep them running reliably in production.
Eager to contribute to impactful projects, grow technical expertise, and collaborate with teams to build reliable software solutions.
- ArabicNative
- EnglishB2
- FrenchB2
Experience
- Refactored an internal Express.js and React application's security architecture and deployment process, aligning it with ISO 27001 controls.
- Designed and built secure CI/CD pipelines with Jenkins, SonarQube, Trivy, Docker, Kubernetes, and ArgoCD, embedding static analysis and vulnerability scanning into every release.
- Stood up monitoring and observability across 10+ services using Prometheus, Grafana, and Loki, cutting incident detection time.
- Deployed Falco-based runtime threat detection to strengthen Kubernetes security monitoring.
- Centralized and secured 30+ application and infrastructure secrets in HashiCorp Vault, removing hardcoded credentials from codebases.
- Built a trainee management platform (Angular, Spring Boot) with real-time features via WebSockets, replacing a manual tracking process.
- Set up Jenkins-based CI/CD pipelines with deployment to AKS (Azure Kubernetes Service), cutting manual release steps and deployment time.
- Built a desktop intern-management application (Java, JavaFX) that automated tracking and administrative workflows, significantly reducing manual paperwork.
- Developed a facial-recognition attendance system (Python, TensorFlow, Angular, Raspberry Pi) achieving 95% recognition accuracy and 98% mask-detection accuracy.
- Enabled fully automated attendance tracking, removing manual sign-in for employee monitoring.
- Participated in the monitoring and maintenance of the infrastructure network, including updating components and periodically checking stability and security.
Projects
Production Intervention Management System
Full-stack platform for maintenance, quality, and logistics operations in a manufacturing environment. REST APIs and role-based workflows, real-time notifications via Server-Sent Events, deployed on an Azure VM behind NGINX.
AI Legal Intake Assistant
AI-powered legal intake assistant that captures and transcribes Tunisian Arabic (Derja) calls, extracts structured case information using LLMs, and delivers automated Arabic case summaries, streamlining lawyers' case intake and workflow.
E-Commerce Deployment Automation on Kubernetes
Multi-node Kubernetes cluster provisioned with Vagrant and Ansible. CI/CD and GitOps workflows with Jenkins and ArgoCD, Prometheus/Grafana monitoring. Improved deployment reliability and availability by 80%.
Restaurant Management System
Web platform for reservations, orders, menus, and inventory with real-time updates via SignalR. Reduced operational errors through workflow automation and centralized management.
Predictive Maintenance System
Python-based simulator generating IoT vehicle sensor data (engine temperature, tire pressure, fuel flow, energy consumption, oil level), feeding a full-stack ReactJS/Spring Boot app that surfaces predictive maintenance insights through a real-time dashboard.
Job Board Platform
Job board where recruiters publish job offers and candidates browse listings, apply, and track their applications.
Transport & Carpooling Decision Support
Smart trip-planning solution helping users combine public transit and carpooling options, built on a microservices architecture with machine learning components for route and matching decisions.
AKS Terraform Project
Modular Terraform project provisioning an Azure Kubernetes Service (AKS) cluster, with separate modules for the resource group, networking, Azure Container Registry, and the AKS cluster itself.
Simple eBPF Firewall with XDP
Lightweight firewall built with eBPF and XDP that drops inbound packets from blocked IP addresses at the earliest point in the Linux networking stack, with a Python/BCC loader for dynamic IP blocking and real-time drop logging.
Single-Node Kubernetes Cluster with Ansible
Ansible playbooks that fully automate deploying a single-node Kubernetes cluster on CentOS Stream 9 - installing kubeadm, kubelet and containerd, configuring the Calico CNI, a local StorageClass, and an NGINX Ingress Controller, with a sample app deployable via kubectl or Terraform.
Air Conditioner Repair Service Management
C desktop application for managing an air-conditioner repair service - handling repair requests, diagnostics, repair teams, and a request queue, with data persisted to local files.
E-Library
Node.js e-library web app (MVC architecture) where users add books to a shared catalog and lend or share them with friends.