Emmanuel Sigei
IT Operations & Cybersecurity Lead · Software Engineer
Professional profile
IT operations and cybersecurity lead with more than six years of progressive experience across hospitality, technology, retail and the public sector. I currently lead technology operations at Nairobi Club and serve as its Data Protection Officer, with responsibility across infrastructure, security, enterprise systems, vendors, resilience and systems modernisation. I remain hands-on as a software engineer, designing and shipping full-stack business applications in TypeScript, React, Next.js, PostgreSQL and Prisma.
Core expertise
Professional experience
Scope, responsibilities and deliveryTeam Lead – Information Technology Operations · Data Protection Officer
Nairobi Club
Lead ICT operations for Nairobi Club, a multi-department private members' and hospitality organisation, with responsibility spanning infrastructure, cybersecurity, business systems, service continuity, vendors and data protection.
- Lead day-to-day technology operations across Windows Server and Active Directory, Microsoft 365, LAN/Wi-Fi, endpoints, access control, user support and the core systems used by Finance, Membership, Procurement, Food & Beverage, Front Office and Administration.
- Set priorities across incidents, service requests and improvement work; coordinate internal technical resources, department users and external vendors so urgent operational issues are resolved without losing momentum on longer-term projects.
- Own cybersecurity improvement and audit-remediation work, including Check Point firewall controls, Kaspersky Security Center, endpoint hardening, access reviews, vulnerability follow-up, evidence collection and closure of internal-audit actions.
- Lead resilience work around backups, disaster recovery, business-continuity planning and redundant connectivity, including the Club's secondary internet-link programme.
- Serve as the designated Data Protection Officer, coordinating privacy and compliance work, reviewing data-handling risks and ensuring new systems and vendor arrangements consider data-protection requirements.
- Prepare technical and commercial papers for CFO, CEO, ICT Subcommittee and Board decisions, translating infrastructure, telephony, security, systems and vendor proposals into clear options, risks and recommendations.
- Lead the architecture and delivery of ClubOne, the Club's in-house ERP, including shared identity, role-based permissions, maker-checker controls, audit trails and modules across procurement, HR, finance, membership, POS, inventory, hospitality and reporting.
- Review technology contracts, support arrangements and SLAs, and manage relationships with connectivity, security, printing, telephony, access-control and business-system vendors.
Tech Lead & Enterprise Systems Engineer
EkvatorSnus Ltd
Lead enterprise systems and infrastructure work for EkvatorSnus, combining hands-on software engineering with responsibility for the Microsoft environment supporting the Kenya and Sweden teams.
- Architect and develop the company's operational platform for manufacturing, inventory, purchasing, sales orders, pricing, trade documents, tax workflows, reporting and field activity.
- Design business rules around production batches, inventory movements, order processing and financial-sensitive workflows so stock and commercial records remain internally consistent.
- Strengthen application security through request-integrity checks, permission enforcement, rate limiting, guarded write paths, auditability and safer handling of cross-market pricing and inventory references.
- Implement database-transaction and concurrency controls for multi-step manufacturing and sales operations, including safe batch creation, cancellation boundaries and integrity constraints.
- Manage application releases and production changes across Next.js, Prisma, PostgreSQL/Neon and Vercel, with testing and migration checks before changes reach users.
- Administer Windows Server, Microsoft 365, Exchange Online, Active Directory, Group Policy, DNS and DHCP, and troubleshoot issues that cross the boundary between infrastructure and application services.
- Coordinate technical changes between the Kenya and Sweden teams so user access, infrastructure changes and application releases stay aligned with operational needs.
IT Systems Administrator
Nairobi Club
Administered the Club's Microsoft environment, network services, endpoints and business applications, providing the hands-on operational foundation that later grew into my current team-lead remit.
- Administered Active Directory, Microsoft 365 and Windows environments, including user lifecycle, access permissions, workstation configuration and Group Policy-related administration.
- Maintained LAN and Wi-Fi services, DNS, DHCP, TCP/IP connectivity and secure access across Club offices, receptions and operational areas.
- Managed workstation deployment, endpoint troubleshooting, hardware lifecycle, printers and day-to-day user support for staff across multiple departments.
- Supported the ERP/POS and departmental applications used by Finance, Membership, Procurement, Food & Beverage, Administration, Front Office and accommodation operations.
- Supported endpoint and network-security improvements, including Kaspersky Security Center administration, access reviews, hardening work and follow-up on technology audit items.
- Supported HikVision-based access-control and attendance operations and coordinated technical issues with vendors where systems crossed physical-security and ICT boundaries.
- Documented recurring issues, system configurations and operational dependencies, and contributed requirements and technical context to later systems-modernisation work.
Software Developer & Systems Consultant
BiBiBiU Technologies
Delivered client web applications and business systems end to end, working directly from requirements and process discovery through implementation, deployment and post-launch support.
- Worked with clients to turn business requirements into practical application flows, data structures and delivery plans rather than beginning from a fixed technical brief.
- Built and maintained responsive web applications and business systems using modern JavaScript/TypeScript stacks, APIs and database-backed workflows where required.
- Handled deployment, hosting configuration, domains, DNS, SSL and production cutovers, including troubleshooting issues that appeared only after systems went live.
- Maintained existing applications, shipped requested changes and resolved production defects instead of treating launch as the end of the engagement.
- Explained technical trade-offs to non-technical clients and kept project scope, implementation detail and operational expectations aligned throughout delivery.
Cybersecurity Intern & Systems Analyst
Prosecution Training Institute · Government of Kenya (ODPP)
Supported systems and cybersecurity work at the Prosecution Training Institute while completing a practical internal application project for asset management.
- Assisted with security monitoring, vulnerability assessment and system reviews, documenting findings and supporting follow-up within a government technology environment.
- Supported workstation, application and connectivity troubleshooting for users and assisted with routine systems administration and technical documentation.
- Reviewed asset-tracking needs with users and built a Laravel-based asset-management system for the Institute.
- Designed the asset application's data structure and operational flows around recording, locating and maintaining equipment information more consistently than the existing manual process.
- Worked within public-sector access, documentation and change-control expectations while balancing internship learning objectives with useful production-oriented work.
Senior Systems & Solutions Engineer
Surety PR & Media
Owned technical delivery for client websites and digital platforms at a communications agency, covering the visible product as well as the hosting, domain and production work behind it.
- Gathered client requirements and translated brand, content and business objectives into websites and digital experiences that could be maintained after launch.
- Built, launched and maintained client websites and digital platforms across multiple projects, including redesigns and later production iterations.
- Managed domains, DNS, SSL, hosting environments and production deployments, and diagnosed availability or configuration issues when they occurred.
- Handled CMS administration, content changes, analytics/data work and ongoing technical support for live client properties.
- Worked directly with strategy, creative and client-facing teams so technical implementation supported the wider communications objective rather than operating as a separate workstream.
- Supported security, performance and maintenance improvements across production websites as client requirements and hosting environments changed.
Systems Support & Cybersecurity Analyst
Givewatts International
Supported staff, internal technology and public digital platforms for an international development organisation, building the broad support and systems foundation I later carried into infrastructure and security roles.
- Provided day-to-day technical support across hardware, software, user accounts and business systems for teams working across Kenya and international operations.
- Maintained and updated the Givewatts web platforms, including public campaign, impact and donor-facing content across the organisation's international and East Africa sites.
- Supported CMS administration, web publishing, website changes and data/analytics work for communications and operational teams.
- Worked on infrastructure improvements and security hardening, including account/access hygiene, domains, SSL and the operational upkeep needed to keep public services available.
- Troubleshot recurring user and system issues, documented fixes and supported staff with practical guidance rather than relying on repeated ad-hoc intervention.
- Worked across technical and non-technical teams, learning to explain technology in terms of the work it enabled rather than only the underlying tools.
Education
BSc. Information Security & Forensics
KCA University
Second Class Upper Division · 2020 – 2024
Technical environment
Microsoft 365 · Exchange Online · Windows Server · Active Directory · Group Policy · DNS / DHCP / TCP-IP · Enterprise Wi-Fi · Endpoint lifecycle · Domains & SSL
Identity & access management · Endpoint & network security · Vulnerability remediation · Risk & audit remediation · Data protection & privacy · BCP / disaster recovery · Incident & problem management · Security hardening
ERP implementation · Business applications · Workflow design · Requirements discovery · Vendor / SLA management · Technical-commercial analysis · Executive reporting · Operational support
TypeScript · JavaScript · Python · React / Next.js · Node.js · Prisma · PostgreSQL · Vercel / Neon