Systems that stay up,
and the person who keeps them that way.

I build backend systems and the infrastructure underneath them, then keep both running. Seven years across backend, cloud infrastructure, and applied security; I now lead engineering at CodeX Technologies, after leading the backend behind a 250,000+ user app.

Cairo, Egypt. Open to software roles and consulting work.
Portrait of Kerolos Gad
99.9%
uptime on load-balanced infra
250K+
users on a shipped product
40%
reduction in security incidents
7 yrs
building & operating production systems

About

I'm a software engineer and infrastructure lead based in Cairo, Egypt, with a B.Sc. in Computer Science and Information Technology (Computer Networks & Cybersecurity) from the Egypt–Japan University of Science and Technology (2021–2026).

I started writing production code and administering servers in 2019, before most of my formal coursework, so my background runs in parallel tracks: backend development (Node.js, Express, REST APIs, relational and document databases), infrastructure (AWS, Docker, Kubernetes, Linux systems administration), and applied security (threat intelligence, secure architecture, incident response).

Most recently I led backend and infrastructure at OBM Education, and I now co-run CodeX Technologies, where I lead a team of ten building web, mobile, and cloud products for startups and enterprise clients. I also work part-time as a Senior Software Engineer at Hatching Ducks, focused on backend and API engineering. I still care most about the unglamorous part of the job: the system staying up, the alert firing correctly, the incident getting caught before a customer does.

Experience

Paid engineering roles, most recent first, followed by compact community and program roles.

2025-11 → presentactive
Co-Founder & Managing Director
CodeX TechnologiesCairo, Egypt · Full-time
Grew a freelance practice running since 2019 into a full-service web, mobile & cloud agency serving clients across the region.
  • Lead a team of 10 engineers and designers shipping full-stack web and mobile products (Next.js, Node.js, Flutter, React Native) across 50+ client sites and applications
  • Own cloud architecture end to end on AWS, Docker, and Kubernetes, right-sizing and automating deployments to cut client operating costs ~20%
  • Drive business development and client relationships from first pitch through delivery and retainer
  • Set engineering standards company-wide: code review, CI/CD, pipelines, and security baselines every project ships against
2024-10 → presentactive
Senior Software Engineer
Hatching DucksRemote · Part-time
Part-time senior engineering role focused on backend and API engineering.
  • Own backend and API engineering across the company's product portfolio, from architecture and data modeling through delivery
  • Design and build scalable, secure REST APIs and services consumed by web and mobile clients
  • Work closely with frontend, mobile, and product counterparts to scope features, set technical direction, and ship against release milestones
2023-03 → 2025-10resolved
Tech Lead / Software Engineer
OBM EducationCairo, Egypt · Hybrid
Owned backend delivery and infrastructure for the Taleb App and OBM Education's internal systems.
  • Led backend development on the Taleb App, scaling it to 250,000+ users and lifting product engagement ~30%
  • Architected and operated load-balanced AWS infrastructure at 99.9% uptime, owning monitoring, on-call, and incident response end to end
  • Built out security processes and hardening practices that reduced incidents 40% year over year
  • Managed the internal engineering team on web projects, providing technical direction and mentorship to align execution with business goals
  • Coordinated Taleb App delivery with an external software provider, managing integration, scope, and quality against business requirements
2021-10 → 2023-02resolved
Software Engineer
FreelanceRemote
Independent engineering work for startup and small-business clients: the practice that later became CodeX Technologies.
  • Delivered custom websites and web applications, owning requirements, development, deployment, and hosting end to end
  • Built backend APIs and databases with Node.js, Express.js, and PHP on MySQL and PostgreSQL, deployed on Linux servers with Docker
  • Grew the client base and delivery practices that later became CodeX Technologies
2019-12 → 2021-09resolved
Full Stack Engineer
MIRUSCairo, Egypt · Part-time
Built full-stack product features and maintained the server infrastructure behind them.
  • Designed and developed full-stack features, managing both front-end interfaces and back-end APIs to deliver cohesive user experiences
  • Built and maintained server infrastructure, implementing automated deployment pipelines and ensuring system reliability and performance
  • Optimized application architecture across the stack, improving code quality, scalability, and security through development and DevOps best practices
2019-08 → 2019-11resolved
Frontend Developer
PlebitsCairo, Egypt · Part-time
Built production-ready front-end interfaces for web products.
  • Built responsive user interfaces using modern frameworks and component-based architecture, ensuring cross-browser compatibility and performance
  • Developed interactive front-end components with a focus on user experience, accessibility, and design system consistency
  • Collaborated with designers and back-end developers to translate mockups and requirements into polished, production-ready interfaces
IT Infrastructure VolunteerSTEM High School for Boys - 6th of October2018-10 → 2021-07
Software Developer InternAndela BuildforSDG2020-08 → 2020-12
Community AmbassadorOWASP Cairo Chapter2019-08 → 2020-08
Student AmbassadorCyberTalents2019-10 → 2023-10
3rd PlaceCrisis HackX Hackathon2020

Projects

Selected product work where backend architecture, infrastructure, and security decisions had direct user impact.

Security research platform

DeltaTI: Threat Intelligence Aggregation Platform

Presented at IEEE 3SCEA 2026 and published in IEEE Xplore; developed from an E-JUST graduation project. DOI: 10.1109/3SCEA68071.2026.11602789

  • Aggregates 18+ open-source threat intelligence feeds and normalizes them into STIX/TAXII 2.1 for SOC workflows.
  • Deterministic trust-scoring engine (recency, cross-source corroboration, source reliability) that ranks indicators and serves them to firewalls, IDS, and other tooling through an API.
  • Containerized for on-premises deployment with Docker Compose, Redis caching, and Elastic SIEM integration; includes a LoRA-fine-tuned SecureBERT 2.0 classifier (macro-F1 of 0.99).
OSCTIThreat intelligenceSTIX/TAXII 2.1Indicator scoringAPI feedsSOC workflowsDockerRedisElastic SIEM
Education platform

Taleb App

Led backend delivery and production infrastructure for OBM Education's Taleb App, scaling it to 250,000+ users with 99.9% uptime, stronger engagement, and more resilient operations.

  • Owned backend APIs, database reliability, and production infrastructure for a high-traffic education platform.
  • Operated load-balanced AWS infrastructure with monitoring, on-call ownership, and incident response.
  • Improved product engagement by roughly 30% and helped reduce security incidents by 40% year over year.
Backend APIsCloud infrastructureAWSDatabase reliabilityLoad balancingMonitoringScalabilityIncident responseSecurity hardening

Skills

Backend & Platform

Node.js / Express.jsTypeScriptPHP / LaravelDjangoREST API designSystem designMicroservices architecturePostgreSQLMySQL / MariaDBMongoDBRedisAPI security

Infrastructure & DevOps

AWSDockerKubernetesCI/CDTerraformCloudflareLinuxNginx & load balancingMonitoring & observabilityGrafana

Security & Reliability

Threat intelligenceSecure architectureOWASP Top 10 & secure codingIncident responseSIEM (Elastic)STIX/TAXII 2.1

Automation & Leadership

PythonTechnical leadershipTeam mentoringBusiness development

Certifications

McKinsey Forward Program
McKinsey & Company
2024-12 · Credly
Certified Threat Intelligence Analyst
EC-Council
2024-07 · ECC6429178053
Aspire Leaders Program
Aspire Institute
2024-04 · Certificate
Google Cybersecurity Specialization
Coursera
2023-12 · CJF5Z3M9AL38
Practical Web Application Security and Testing
TCM Security
2023-05 · QTMHB0WT
Google IT Automation with Python
Coursera
2023-03 · HKEQF7AZRBM5
Practical Ethical Hacking
TCM Security
2022-09 · DRXLPFPY
Introduction to Cybersecurity Bootcamp by Trend Micro
CyberTalents
2022-09 · 207079278
Google IT Support Specialization
Coursera
2020-11 · YAWYJ55GJ6FB

FAQ

Are you available for consulting or freelance work?

Yes. I'm open to full-time software roles and available for tech consulting engagements, remote or on-site.

What technologies do you specialize in?

Node.js, Express.js, TypeScript, and PHP on the backend; PostgreSQL, MySQL, MongoDB, and Redis for data; AWS, Docker, Kubernetes, and Terraform for infrastructure; plus threat intelligence, secure architecture, and incident response.

What kind of consulting engagements do you take on?

Mostly backend architecture reviews, infrastructure and security audits, and short, focused engagements to unblock a stuck system, not just long-term retainers. If you're not sure whether your ask fits, email me and we'll figure it out.

Do you work with remote or international teams?

Yes, regularly. I'm based in Cairo (GMT+2/+3), which overlaps well with both European and Gulf working hours, and I'm set up to work fully async when needed.

What's the fastest way to reach you?

Email: contact@kerolosxgad.com. For project or consulting inquiries, a line on what you need and your timeline lets me reply with concrete next steps.

Let's talk.

Open to software roles, and available for tech consulting engagements. Based in Cairo, happy to work with remote and international teams.