✦ Abdelrahman Abou-Kandil · Engineering Team Leader · Cairo

In Arabic, Kandil means lantern.I keep the lights on.

Ten years building enterprise systems that can't go dark — government platforms, payments, healthcare, energy. .NET, Java Spring Boot, and Angular at the core; RAG pipelines, local LLMs, and ML anomaly detection lighting what's next.

See the work Get in touch
✦ About

Systems that hold under real-world pressure.

I'm Abdelrahman Abou-Kandil — a software engineering leader who has spent over a decade at the intersection of enterprise architecture, team leadership, and emerging technology. I don't just write code; I own outcomes, drive teams, and build systems that hold up at scale.

Currently leading engineering at NTG Clarity, I design and deliver full-stack enterprise platforms with ASP.NET Core, Java Spring Boot, Angular, Oracle DB, and SQL Server — multi-module backends orchestrated with Camunda workflow engines, Redis-backed distributed coordination, and Docker/OCI deployments running through Azure DevOps pipelines across production, staging, DR, and simulation environments. I define the technical vision, run the architecture reviews, and stay in the code alongside my team — including hands-on migrations of legacy .NET services into modern Spring Boot microservices.

What's changed most recently: I've gone deep into AI engineering. I build RAG systems — vector databases, local embedding models, and language-model inference wired into enterprise applications — run local, data-private LLM deployments, and ship production ML: unsupervised anomaly detection over live financial transaction streams with human-in-the-loop feedback and retraining. AI from prototype to production, inside real business constraints.

My MSc thesis at Cairo University (2022) tackled a problem neither academia nor industry had formally solved: defending encrypted storage against attacks from privileged system accounts and trusted user-space processes. The hybrid RSA+AES framework I designed — with its custom key-management scheme — sharpened my instinct for thinking about systems adversarially.

I've built and managed engineering teams at multiple companies. 95% on-time delivery isn't a lucky streak — it's disciplined planning, clear ownership, and a culture where problems surface early instead of on demo day.

Years in production engineering10+
On-time delivery across projects95%
Enterprise systems shipped8+
MSc Software EngineeringCairo Univ.
✦ Skills

The toolkit, end to end.

Backend & APIs

ASP.NET Core / .NET 8 · C# · Entity Framework Core · Java · Spring Boot · Microservices · Camunda BPMN · Redis · REST API · OpenFeign · MVC · SSIS · SSRS

AI & Data

Python · Machine Learning · ML.NET · Anomaly Detection · NLP · RAG Pipelines · Local LLMs · Vector Databases (Qdrant) · MCP Servers · LangChain · Ollama · Embeddings · Data Warehousing · Tableau · SQL Server · Oracle DB

Frontend

Angular · TypeScript · JavaScript · HTML5 · CSS3 · Automated Testing (Selenium)

DevOps & Delivery

Git · Azure DevOps · Docker · CI/CD · RPA · ITIL · Agile / Scrum

Leadership

Team Building · Code Review · Mentoring · Business Analysis · Technical Analysis · Roadmapping · Stakeholder Communication

Security

Web Application Security · RSA / AES Encryption · SDL · Key Management · Threat Modeling

✦ Experience

A decade in production.

Sep 2023 — present

NTG Clarity · Cairo

Team Leader · Full Stack & AI Engineer

NTG Clarity (TSXV: NCI) — Canadian digital-transformation & IT solutions provider, 1,300+ engineers, delivery centers in Cairo and Riyadh, serving telecom and finance across MENA. ntgclarity.com

  • Architect and deliver government-scale platforms with ASP.NET Core, Java Spring Boot, Angular, Oracle DB, and SQL Server — full stack, from database schema to UI.
  • Lead the modernization of a large metadata-driven enterprise workspace across Next.js web, Flutter mobile, and a Fastify BFF — unifying dynamic forms, dashboards, tasks, approvals, notifications, social collaboration, monitoring, and tenant-aware configuration while reducing legacy API round trips.
  • Architect and build a governed AI engineering platform spanning desktop and IDE clients, model routing, context retrieval, MCP/ACP integrations, and multi-agent orchestration — with RBAC/ABAC policy enforcement, isolated Git worktrees and sandboxes, immutable audit and usage records, approval gates, and provider-independent deployment.
  • Leading the ground-up build of the company's modular telecom BSS/OSS suite — fifteen Spring Boot microservices with one PostgreSQL schema per module, Kafka event-driven audit, per-tenant module licensing, and two Angular 22 frontends (staff console and customer self-service portal), aligned with TM Forum Open APIs.
  • Design multi-module Spring Boot backends with Camunda workflow orchestration, Redis-backed distributed locking and pub/sub, and OpenFeign integrations against external government and payment APIs.
  • Led migration of legacy .NET services into Spring Boot microservices — including a multi-language translation platform serving seven languages with bulk-upload tooling and full audit trails.
  • Building ML-driven anomaly detection for a national payment portal: unsupervised models over transaction and wallet activity, tiered flag/hold actions, live Redis-published alerts, and analyst feedback looped into nightly retraining.
  • Introduced local LLMs and RAG pipelines into existing enterprise workflows — plus internal AI tooling like a semantic code-search engine over company repositories.
  • Built and maintain Azure DevOps CI/CD pipelines with Docker and OCI-based deployments across production, staging, DR, and simulation environments.
  • Lead a multi-disciplinary team across frontend, backend, QA, and DevOps — sprint goals, design reviews, zero-defect releases — and drive technical roadmapping with business stakeholders.
May 2021 — Sep 2023

Xceed · Cairo

Application Development Team Leader

  • Owned the end-to-end development lifecycle for multiple concurrent enterprise projects — planning, estimation, resourcing, and delivery across cross-functional teams — holding a 95% on-time delivery rate.
  • Delivered high-concurrency .NET Core applications serving heavy simultaneous user loads — connection pooling, caching, and async patterns tuned for sustained throughput.
  • Built RPA solutions automating repetitive back-office and operations workflows, and applied NLP with Python to process and classify unstructured text at scale.
  • Architected enterprise reporting and data-warehousing platforms — SSIS ETL pipelines feeding dimensional warehouses, with SSRS and dashboard layers consumed daily across the business.
  • Delivered deep Microsoft-stack integrations — Azure services, Active Directory, and Office ecosystem — connecting internal platforms into one coherent workflow.
  • Shipped a "ViewAs" feature letting admins see exact client perspectives without extra configuration, and automated the report-access approval workflow — eliminating 50% of backlog requests.
  • Built a custom Azure Git integration that analyzed developer activity, detected anomalies, and dispatched daily alerts to engineering managers.
  • Doubled as business analyst on key engagements — requirements elicitation, functional specifications, and gap analysis straight from client conversations to engineering backlog.
  • Established automated testing practice — Selenium regression suites wired into release cycles, catching defects before they reached production.
  • Ran the full hiring pipeline — technical interviews, onboarding, culture of ownership — and led client-facing demos and technical negotiations.
Jan 2016 — May 2021

Xceed · Cairo

Senior Application Developer

  • Architected reusable components and domain subsystems in ASP.NET MVC, C#, and SQL Server — foundational patterns adopted across product lines.
  • Built and maintained the application powering a national electricity holding company — customer data at national scale.
  • Produced formal data-flow diagrams, technical specifications, and architecture documents guiding development and QA validation.
  • Implemented SSIS packages for complex ETL pipelines and SSRS dashboards consumed daily by leadership.
  • Applied web-security best practice across all applications — input validation, authentication hardening, OWASP compliance — as a Microsoft-certified SDL practitioner.
  • Established unit and integration testing strategies that sharply reduced regression defects per release.
  • Mentored junior developers on design patterns and clean code, accelerating their growth into independent contributors.
✦ Projects

Eleven systems, still burning.

Metadata-Driven Enterprise Workspace web + mobile

Modernized a large enterprise workflow and employee-experience platform across web, mobile, and integration layers. A metadata-driven UI engine renders forms, dashboards, grids, charts, and business objects at runtime, while a typed Backend-for-Frontend collapses legacy round trips into task-focused APIs. The platform also brings together approvals, notifications, social collaboration, monitoring, exports, tenant-aware configuration, and secure enterprise sign-in in one responsive product.

Next.js · React · TypeScript · Fastify · Flutter · BFF · Multi-tenant

Governed AI Engineering Platform agentic systems

Designed and built an enterprise control plane for AI-assisted software delivery — spanning desktop and IDE clients, model routing, context retrieval, MCP integrations, multi-agent orchestration, and isolated execution. Security and governance sit outside the model: RBAC/ABAC policy evaluation, per-task Git worktrees and sandboxes, immutable audit trails, quotas, usage accounting, and approval gates keep autonomous work reviewable. Provider-independent contracts support cloud, private-cloud, and air-gapped deployments without locking the platform to one model or runtime.

Java 25 · Spring Boot · TypeScript · React · PostgreSQL · Redis · MCP / ACP · Docker

Telecom BSS/OSS Suite

Ground-up modernization of a legacy telecom BSS/OSS platform into a modular, TM Forum-aligned suite — customers license and run only the modules they need: catalog, CRM, orders, billing, warehouse, network inventory, trouble tickets, projects, reporting, integrations. A platform core (auth, gateway, logs, notifications, self-care BFF) plus independently deployable business modules — fifteen Spring Boot services, one PostgreSQL schema per module, event-driven audit over Kafka via transactional outboxes, per-tenant module entitlements enforced at the gateway, an Angular 22 staff console plus a customer self-service portal on an isolated identity realm, and AI-assisted insights in every module.

Java Spring Boot · Angular · PostgreSQL · Kafka · Microservices · TM Forum APIs · Docker

✦ Read the full case study

Enterprise Gateway Platform

Government-scale pilgrim management gateway serving thousands of users. Multi-module Spring Boot backend with Camunda workflow orchestration, Redis distributed coordination, and OpenFeign integrations with external government and payment systems — Angular SPA on top, JWT-secured REST contracts, role-based access control. Docker/OCI deployments through Azure DevOps across production, staging, DR, and simulation. Led a team of 5 through multiple release cycles.

Spring Boot · Camunda · Angular · Redis · Oracle DB · Azure DevOps · Docker / OCI

Healthcare Management Portal

End-to-end hospital management system — patient records, scheduling, clinical workflows. Angular frontend on RESTful APIs, Firebase real-time notifications, OCI-based Docker deployment on Azure. Simulation and production pipeline variants with automated validation stages: zero-downtime deployments for a critical healthcare environment.

Angular · REST · Firebase · Docker · Azure · OCI

Payment Anomaly Detection production ML

Unsupervised anomaly detection over a national payment portal's transaction and wallet streams — ML.NET models trained on historical Oracle data, scored in scheduled batches outside the live payment path. Tiered responses (dashboard flag, account flag, auto-hold), live alerts over Redis Pub/Sub across pods, and analyst decisions fed back into nightly retraining under distributed locks. Models versioned and stored in-database.

.NET 8 · ML.NET · EF Core · Oracle DB · Redis · Human-in-the-loop

✦ Read the full case study

Semantic Code Search Engine AI tooling

MCP server giving AI coding agents semantic search across enterprise repositories — code chunked and indexed into a Qdrant vector database using local Ollama embeddings, fully on-prem and data-private. Exposes semantic search, keyword search, and file-structure tools so agents retrieve exactly the code they need instead of reading whole files — cutting token usage dramatically.

Python · MCP · Qdrant · Ollama · Embeddings · Docker

✦ Read the full case study

BI Analytics Portal

Enterprise BI platform delivering real-time KPI dashboards, custom reporting, and drill-down for executive and operational teams. Java Spring Boot REST backend over Oracle and SQL Server warehouses, with dynamic filtering, Tableau-embedded views, and scheduled report exports consumed across business units.

Java · Spring Boot · Oracle DB · Tableau · SQL Server

Hybrid Encryption System MSc research

Cairo University thesis — formalized a general threat model for storage security, exposing attack vectors existing systems missed. Designed a hybrid RSA+AES scheme with an advanced key-management layer, transparent to users at enterprise-grade strength. Novel contribution: defense against superuser and privileged user-space attacks — a threat class previously unsolved.

RSA / AES · Python · Key Management · Threat Modeling

Approval Automation Engine

Replaced a fully manual report-access approval process with an ASP.NET Core solution: automated workflow routing, role-based escalation, and scheduled email reminders from background jobs. Cut outstanding approval requests by 50% within weeks of launch, freeing analysts for high-value work.

ASP.NET Core · C# · Workflow Automation · SQL Server

AI Activity Analyzer

Developer-intelligence tool integrating with Azure Git APIs — commit history, PR activity, review participation, code churn. ML-based anomaly detection surfaces at-risk contributors and abnormal merge patterns, with daily digest alerts giving managers data-driven visibility without manual status reports.

Azure Git API · Python · ML / Anomaly Detection · .NET

✦ Education & Certifications

Where the foundations were laid.

Cairo University

MSc — Software Engineering

2017 – 2022

Thesis: hybrid RSA+AES encryption for storage security — formal threat models, advanced key management, and novel defenses against privileged-user attacks.

Cairo University

Diploma — Computer Software Engineering

2015 – 2016

Advanced software engineering principles, design patterns, and applied computer science fundamentals.

Sadat Academy for Management Sciences

BSc — Computer & Information Systems

2011 – 2015

Foundation in computer science, information systems, software development, and database management.

Security Development Lifecycle & Web App SecurityMicrosoft✦ view SQL Server 2014: Performance Tuning & OptimizationMicrosoft · 2016✦ view Programming in C#Microsoft✦ view
Programming in HTML5 with JavaScript and CSS3Microsoft
Developing ASP.NET MVC 4 Web ApplicationsMicrosoft
Authorized Certification Engineer for AndroidOESF · 2014✦ view Database Design and Programming with SQLOracle Academy · 2011✦ view Summer Training: SQL Server Database Design & Web DevelopmentMCIT Egypt · 2013✦ view Intel Ideation WorkshopIntel & TIEC · 2014✦ view Enactus Egypt National CompetitionEnactus Egypt✦ view Certificate of Appreciation — Recruitment Forum 2014Sadat Academy · 2014✦ view
✦ Contact

The lamp is lit. Say hello.

Open to senior engineering roles, team leadership positions, and AI/ML consulting.

[email protected] LinkedIn
✦ Ask the lantern — chat with a local AI about Abdelrahman. No cloud, runs on my own server.