- Designed and deployed Keycloak IAM from the ground up, including identity federation, role-based access control, and user lifecycle management.
- Integrated internal applications and third-party services with centralized authentication using SAML 2.0 and OpenID Connect.
- Implemented identity policies across Okta, AWS IAM, and Azure AD, including MFA, conditional access, group provisioning, and least-privilege access.
- Correlated security telemetry with Splunk, Wazuh, and Security Onion to investigate unauthorized access, persistence, and lateral movement indicators.
- Supported incident containment through policy hardening, identity control changes, and access restrictions.
HI, I’M YAFET.
I build websites, apps, and AI tools that help you get things done. I keep them simple to use and handle the tricky stuff behind the scenes.
02 / SELECTED WORK
4 of 11 projects shown
03 / THE PERSON BEHIND THE CODECURIOUS BY DEFAULT
An engineer’s mind.
A maker’s heart.
I’m Yafet, an AI Engineer with a background in software development and cybersecurity. I build AI-powered products and practical automation, with a focus on useful experiences and secure, maintainable systems.
My work spans AI audio, marketing, and construction platforms. For my B.Sc. thesis, I developed an AI-assisted penetration testing and information-gathering framework, awarded A+ (94/100). I bring that same curiosity to turning complex ideas into tools people can use.
Find me on GitHubTHE TOOLS I BUILD WITH
PythonAI Product EngineeringAI-assisted Security TestingNext.jsReactTypeScriptNode.jsPostgreSQLMongoDBGraphQLGolangTailwind CSSGitWeb Security
04 / EXPERIENCE
A little context.
A lot of building.
From full stack development to cloud security,
each role adds another perspective.
EDUCATION
B.Sc. in Electrical and Computer Engineering
Addis Ababa University
Sep 2019 — Jul 2024Graduated with Distinction; CGPA: 3.49/4.0.
- Supported production backend development through debugging, fixes, deployments, and reliability improvements.
- Managed security telemetry pipelines and Elasticsearch indexing and querying to support investigations.
- Built dashboards, filters, and saved searches for incident triage and pattern analysis.
- Built internal security tooling, including a password manager, and trained users on phishing, MFA, and credential hygiene.
- Assessed IAM, access control, and data protection against PCI DSS and ISO 27001, documenting gaps and actionable remediation roadmaps.
- Administered Microsoft 365 and Azure AD security: conditional access, MFA, identity policies, onboarding/offboarding, and role-based access control.
05 / KIND WORDS
What clients say
GOOD WORK STARTS WITH GOOD PEOPLEHe consistently delivered high-quality frontend work, asked smart clarifying questions, and stayed organized throughout the project. I’ve already re-hired him for the next phase and would absolutely recommend him to others.
SarahFounder, ShopLatte
01 / 03
06 / HAVE SOMETHING IN MIND?LET’S MAKE IT HAPPEN
Let’s build something.
A new idea, a tricky problem, or a project ready for its next chapter. I’d love to hear about it.