Gerald Michael Musumba

Developed and enforced a custom roles and permissions system for multi-tenant management, implementing granular access control across React front-end pages and Django REST backend APIs. Implemented multiple 2FA methods including email, SMS, authenticator apps, and passkeys; currently leading SSO implementation (SAML/OIDC) for enterprise customers. Automated CI/CD pipelines with GitHub Actions, including SAST, DAST, secret scanning, and container and infrastructure scans. Built secure infrastructure-as-code deployments with Terraform and standardized development environments with Docker, Kubernetes, Helm, and EKS. Deployed observability and logging stacks with Grafana and Prometheus to monitor server logs and detect security anomalies. Led incident response efforts, significantly reducing mean-time-to-resolution through proactive log analysis and automated alerts.

Developed and enforced a granular roles and permissions system for multi-tenant management using React frontend and Django REST backend APIs. Integrated multiple 2FA methods and led SSO implementation for enterprise customers. Automated CI/CD pipelines with GitHub Actions including tests, container and infrastructure scanning. Built secure infrastructure-as-code deployments with Terraform and standardized environments using Docker, Kubernetes, Helm, Argo Rollouts, EKS, Grafana, and Prometheus. Deployed observability stacks and led incident response efforts, reducing mean-time-to-resolution through proactive log analysis and automated alerts.

Collaborated as a member of an 8-person team at UC Berkeley to innovate AI-driven cybersecurity defenses. Developed cyber reasoning systems using LangChain, litellm, ChatGPT, anthropic, GCP, Azure, Gemini, Lama, RabbitMQ, and other technologies, aimed at automatically remediating vulnerabilities in open-source code.