Systems Infrastructure, Cybersecurity & Distributed Systems Engineer
Accra, Ghana • GitHub: @Huighlet • Email: huighlet.zowonu@htu.edu.gh
Specializing in low-latency systems infrastructure, financial core transaction engines, host/network threat detection, and write-optimized distributed storage. Architecting zero-loss financial ledgers, zero-dependency streaming brokers, hardware-near deep packet inspection pipelines, and Model Context Protocol (MCP) decision systems with microsecond benchmarked performance and formal mathematical guarantees.
All 9 flagship repositories are engineered as complete, enterprise-grade platforms adhering to three foundational pillars:
- Enterprise Middleware & Observability: Thread-safe Token-Bucket Rate Limiters (
X-RateLimit-Remaining), API Key authentication (X-API-Key/ RedisAUTH), and standard Prometheus/metricsexposition. - Production Durability, Audit & Incident Recovery: Point-in-time state checkpointing and snapshots, Merkle tree proofs of solvency, EOD net settlement clearing batches, DLQ bulk redrives, dynamic IOC threat synchronization, emergency SVID revocations, and consumer lag audits.
- Idiomatic Client SDKs & Real-World Simulation Suites: Standalone Python client SDKs (
<repo>/client.py) paired with comprehensive production workload simulations (examples/simulate_*.py) modeling realistic banking flows, ATM/POS networks, attack campaigns, service meshes, and IoT fleets.
- Harvard University (CS50 AI): CS50's Introduction to Artificial Intelligence with Python (Machine Learning, Deep Neural Networks, Optimization, NLP)
| System | Specialization & Enterprise Architecture | Throughput Benchmark | Verified Tests |
|---|---|---|---|
TitanLedger-Core |
High-throughput immutable double-entry accounting ledger platform. Implements 32-byte binary WAL with CRC32 frame checksums, cryptographic SHA-256 state chain, Merkle tree proof of solvency (/v1/audit/solvency), point-in-time state checkpointing (/v1/snapshot), token-bucket rate limiter, Prometheus /metrics, idiomatic Client SDK (TitanLedgerClient), and 500-transaction real-world banking simulation harness (examples/simulate_banking_core.py). |
10,520 tx/sec (In-Memory) 8,588 tx/sec (WAL) |
28/28 Passed |
SwitchRail-8583 |
Financial switch & protocol platform implementing standard ISO 8583:1987 / ISO 20022 message packaging. Features 64/128-bit bitmap framing, LPM BIN routing, interbank EOD Net Clearing Settlement Batch (/v1/switch/settlement/eod), 0420 Store-and-Forward (SAF) reversals with DE 90 audit trail, token-bucket rate limiter, Prometheus /metrics, Client SDK (SwitchRailClient), and real-world ATM/POS network simulation (examples/simulate_atm_pos_network.py). |
21,353 pack/sec 17,833 unpack/sec |
31/31 Passed |
ReliantHook-Engine |
Zero-loss webhook dispatcher and settlement reconciler platform. Features HMAC-SHA256 signatures, replay protection, Full Jitter exponential backoff, per-destination circuit breakers, Dead-Letter Queue (DLQ) bulk redrive (/v1/dlq/redrive), 3-way reconciliation audit export (/v1/reconcile/export), token-bucket rate limiter, Prometheus /metrics, Client SDK (ReliantHookClient), and burst simulation harness (examples/simulate_webhook_burst.py). |
81,147 sig/sec 38,886 dispatch/sec |
26/26 Passed |
| System | Specialization & Enterprise Architecture | Throughput Benchmark | Verified Tests |
|---|---|---|---|
AegisFlow-DPI |
Zero-copy network Deep Packet Inspection (DPI) platform. Features RFC 1035 DNS parser, Shannon entropy tunneling detection (/v1/intel/sync), DFIR incident report exporter (/v1/forensics/export), token-bucket rate limiter, Prometheus /metrics, Client SDK (AegisFlowClient), and enterprise multi-vector attack simulation (examples/simulate_enterprise_attack.py). |
18,070 packets/sec | 26/26 Passed |
SentinelTrace-EDR |
Host Endpoint Detection & Response (EDR) telemetry platform. Tracks process lineage DAGs (PPID tracking), detects behavioral LOLBin anomalies, evaluates Sigma-style detection rules, automated host quarantine (/v1/host/quarantine), DFIR forensic snapshot exporter (/v1/forensics/snapshot), STIX 2.1 CTI bundles, token-bucket rate limiter, Prometheus /metrics, Client SDK (SentinelTraceClient), and ransomware attack campaign simulation (examples/simulate_ransomware_campaign.py). |
26,344 events/sec | 20/20 Passed |
ZeroTrust-Enclave |
Zero-Trust workload attestation control plane platform. Enforces SPIFFE RFC 3986 workload identity verification via binary SHA-256 digests, issues short-lived HMAC-signed SVID tokens from an Ephemeral CA, emergency SVID revocation (/v1/svid/revoke), ABAC microsegmentation under strict Default Deny, Merkle-hashed audit log, token-bucket rate limiter, Prometheus /metrics, Client SDK (ZeroTrustClient), and 4-tier microservice mesh attack simulation (examples/simulate_microservice_mesh.py). |
75,774 verifications/sec 197,654 policy evals/sec |
30/30 Passed |
| System | Specialization & Enterprise Architecture | Throughput Benchmark | Verified Tests |
|---|---|---|---|
PulseStream-Engine |
Partitioned event streaming broker and append-only commit log platform. Implements deterministic CRC32 partition routing, monotonic 64-bit offsets, decentralized consumer group coordinator, point-in-time topic snapshot checkpoints (/v1/topics/{topic}/snapshot), consumer group partition lag tracking (/v1/topics/{topic}/lag), token-bucket rate limiter, Prometheus /metrics, Client SDK (PulseStreamClient), and 100-device IoT telemetry stream simulation (examples/simulate_realtime_iot_telemetry.py). |
506,088 reads/sec 106,929 appends/sec |
31/31 Passed |
GeoMesh-Stream |
Real-time Ghana maritime vessel stream, zero-touch telecom LBS & collision avoidance platform. Features Discrete Uniform Spatial Grid Indexing (/v1/ais/nmea), durable SQLite WAL persistence (geomesh/storage.py), Guinea Current dead-reckoning SAR drift model for the Ghana Navy & GMA (/v1/sar/declare), GSM Timing Advance (/v1/telecom/locate), inter-beach relocation resolver (e.g. Keta to Vodza), HMAC-SHA256 carrier webhooks, one-time keypad feature phone enrollment (/v1/telecom/register), keypad SOS emergency broadcasts (*920*44# / SMS SOS), passive cell handover tripwire, mother-tongue automated IVR voice alerts (Ewe, Ga, Fante, Dangme, Nzema), Closest Point of Approach (CPA/TCPA) collision risk detection, Ghana 6NM Inshore Exclusion Zone (IEZ) enforcement (Act 625), embedded Gulf of Guinea live radar dashboard, token-bucket rate limiter, Prometheus /metrics, Client SDK (GeoMeshClient), and coastal simulation suite. |
509,862 spatial queries/sec 382,666 Haversine/sec |
49/49 Passed |
HyperQuery-LSM |
Write-optimized Log-Structured Merge-Tree storage platform & Redis-compatible server. Features SkipList MemTable, binary WAL, Bloom filter SSTables, leveled compaction, Redis RESP2 protocol server with password AUTH (requirepass), point-in-time snapshot checkpointing (SNAPSHOT / BGSAVE), telemetry metrics (METRICS / INFO), pure-Python socket Client SDK (HyperQueryClient), and 1,000-operation high-throughput KV simulation harness (examples/simulate_high_throughput_kv.py). |
156,141 Bloom lookups/sec 90,959 SkipList inserts/sec |
23/23 Passed |
GeoRisk Platform: Geospatial Risk MCP Server & DSS: Model Context Protocol (MCP) server and decision-support dashboard delivering deterministic flood vulnerability calculations, drought indexing, and RFC 7946 GeoJSON bounding-box hazard partitions aligned with the UN Sendai Framework (NASA GPM IMERG, SRTM v3, SMAP L4, MODIS).Autonomous SWE Developer Agent: Intelligent software engineering agent capable of autonomous codebase exploration, AST symbol traversal, and iterative patch synthesis with fine-tuned open weights.
- Systems & Concurrency: Multi-threading, Reentrant Locking, Ring Buffers, Zero-Copy Slicing, Monotonic Offset Addressing, Deadlock-Free Resource Graph Ordering.
- Storage & Data Structures: Log-Structured Merge-Trees (LSM), Sorted String Tables (SSTables), SkipLists, Bloom Filters, Binary Write-Ahead Logs (WAL), Spatial Grid Hash Indexes.
- Network & Protocols: ISO 8583:1987 / ISO 20022, Redis RESP2 Wire Protocol, RFC 1035 DNS, TLS JA3/JA4 Fingerprinting, RFC 3986 SPIFFE/SPIRE, STIX 2.1 CTI, Ethernet / IPv4 / TCP / UDP Framing.
- Cryptography & Security: HMAC-SHA256, Shannon Entropy ($H(X)$), Merkle-Style Chained Hash Ledgers & Proof of Solvency, Attribute-Based Access Control (ABAC), Zero-Trust Workload Attestation.
- Observability & Reliability: Prometheus Metrics Exposition, Token-Bucket Rate Limiting, Point-in-Time State Snapshots, Store-and-Forward (SAF) Reversals, Dead-Letter Queue (DLQ) Redrives.
- Languages & Tooling: Python 3.13, C/C++ Interop (ctypes), SQL/PostgreSQL, Bash, PowerShell, Git, Linux, Docker, Pytest.
- GitHub: @Huighlet
- Email: huighlet.zowonu@htu.edu.gh