Software engineer, fullstack and DevSecOps. I design, secure and deploy web products end to end, from the business need to production under monitoring.

AvailablePermanent role, freelance, collaboration

Abidjan AttécoubéOn site or remote

View projects Discuss a project

Mouhamed SAVANE

Software Engineer Full-Stack Developer DevOps Engineer

About

Mouhamed SAVANE, software engineer. Software Engineer driven by a constant demand for precision, quality, and excellence in designing digital solutions.

Software Engineer
Full-Stack Developer
DevOps Engineer

Experience: 4 years
Based in: Abidjan Attécoubé
Languages: French, English

Download CV LinkedIn GitHub GitLab

+
Design
+
Build
+
Secure
+
Deploy
+

I like systems that keep their promises: a readable architecture, reviewed code, automated delivery and security built in from the design stage, from the first workshop with the business to monitoring in production.

My professional path has been built through mission-critical, high-stakes projects ranging from banking and electoral systems to multi-tenant SaaS platforms and IoT solutions. These experiences have allowed me to develop a comprehensive vision of software engineering, where architecture, robustness, data security, and system longevity are central. Specialized in solving complex technical challenges, I strive to design reliable, elegant, and highly scalable architectures built to meet current demands while being engineered for the future.

02Approach

From need to production

Eight steps, a single loop: the one in the monogram. Each step points to what proves it on this site.

01
Understand

Analyse the business need and its constraints, then restate it as verifiable requirements.
See the proof
02
Design

Model the data, split the architecture into modules, justify every technical choice.
See the proof
03
Build

From secure APIs to responsive interfaces: Django, NestJS, React, Flutter.
See the proof
04
Test

Use tests to lock down access control and every regression already encountered.
See the proof
05
Secure

Authentication, role-based access control, rate limiting, secrets out of the code.
See the proof
06
Automate

CI/CD pipelines: checks, image build and deployment with no manual step.
See the proof
07
Deploy

Docker containers, Kubernetes orchestration, GitOps deployment with ArgoCD.
See the proof
08
Operate

Health checks, actionable logs and continuous maintenance in production.
See the proof

03Expertise

From code to infrastructure

A cross-cutting skill set: designing the application, industrialising it and securing it, with a single point of contact.

01
Conception & Architecture

Designing robust, scalable software architectures tailored to the business and technical requirements of complex projects.
02
Systems & Platforms

Creating platforms capable of handling complex needs, managing business processes, and scaling alongside organizational requirements.
03
Optimization & Evolution

Analyzing and improving existing systems to enhance performance, stability, maintainability, and scalability.
04
Security & Reliability

Designing systems that integrate security, access control, performance, and resilience requirements from the very first stages of development.
05
Full-Stack Development

Designing and developing end-to-end digital solutions, from business logic to user interfaces, with a strong focus on quality and maintainability.
06
DevOps & Cloud

Setting up automated and reliable deployment environments, with an approach focused on availability, reproducibility, and operational efficiency.

Tools I master

List kept up to date from the dashboard; it also feeds the CV.

Databases

MySQL
PostgreSQL
MangoDB

Framework

NextJs
NestJs
Django
ExpressJS
Spring boot
Laravel
NodeJs
ReactJs
Angular

Infrastructure

1panel
AWS
MinIO

Software Development

HTML
Java
CSS
PHP
JavaScript

Web application deployment

Registry Gitlab
Sonarqube
Docker
Kubernetes
ArgoCD
GitLab CI
GitHub Actions
Jenkins

Développement informatique

Python

04DevSecOps

Security is a stage, not a final audit.

13 stages, from the first line of code to monitoring. For each: the practice and where I actually applied it.

Stage 01 of 13

Source code

Readable, well-structured, reviewed code is the first barrier against bugs and vulnerabilities alike.

What I do

Modules with clear responsibilities, explicit naming
Strict server-side input validation
Code review and mentoring

Proof15

Python 4 sources

Django 4 sources

TypeScript 3 sources

NestJS 3 sources

JavaScript 4 sources

React 4 sources

Java 1 source

Declared skill

C++ 1 source

Atos ACADEMY · VoteSmart

Flutter / Dart 2 sources

PHP 1 source

Declared skill

Laravel 2 sources

Node.js 4 sources

Express.js 2 sources

Vehicle Fleet Management
Declared skill

Next.js 2 sources

Vehicle Fleet Management
Declared skill

Angular 1 source

Declared skill

On this siteDjango code organised into services, selectors and views; validation and permissions enforced server-side.

Stage 02 of 13

Git

History is the source of truth: every change is traceable, reviewed and reversible.

What I do

One branch per feature, merged through merge requests
Explicit commit messages
No secrets under version control

Proof2

Git 1 source

NEXORA · Médico

GitHub 4 sources

On this sitedevelop (staging) and main (production) branches: every push triggers the GitLab pipeline.

Stage 03 of 13

CI/CD

Every change goes through the same automated chain before reaching an environment.

What I do

Declarative pipelines, versioned with the code
Fail fast: checks before the build
Automatic deployment per branch

Proof4

Jenkins 4 sources

GitHub Actions 4 sources

GitLab CI 2 sources

Banking Management App
Declared skill

CI/CD 4 sources

On this siteGitLab CI pipeline: Python code checks, static file integrity, FR/EN/AR translation completeness, then deployment.

Stage 04 of 13

Build

A reproducible artefact, built once and promoted from one environment to the next.

What I do

Multi-stage images, no build tools in production
Locked dependencies
Assets compiled when the image is built

Proof1

Vite 1 source

NEXORA · Plateforme LBC/FT - SaaS Compliance

On this siteMulti-stage Docker image: translations compiled and static files collected at build time.

Stage 05 of 13

Tests

Tests lock in critical behaviour and every regression already encountered.

What I do

Access control verified on every sensitive route
Targeted regression tests
Tests run before shipping

Proof

No tool for this stage is cited in a published experience yet.

On this siteDjango test suite: dashboard access control, SEO, translations, media relay, rate limiting.

Stage 06 of 13

Static analysis

Catch early what a review lets through: errors, broken references, dangerous patterns.

What I do

Systematic syntax checks
Automated integrity checks

Proof1

SonarQube 3 sources

Vehicle Fleet Management
Weighbridge Management System & Odoo Integration
Declared skill

On this siteEvery pipeline compiles all the Python code and detects broken asset references.

Stage 07 of 13

Dependencies

Every dependency is an attack surface: it must be known, pinned and justified.

What I do

Pinned versions
A dependency is only added when it is justified
Updates reviewed before merging

Proof

No tool for this stage is cited in a published experience yet.

On this siteAll Python dependencies are pinned to an exact version.

Stage 08 of 13

Security controls

Authentication, authorisation and API endpoint protection are designed into the architecture, not added at the end.

What I do

Role-based access control and defence in depth
Rate limiting on sensitive endpoints
Encryption, audit log, secrets kept out of the code

Proof6

JWT 1 source

NEXORA · Plateforme LBC/FT - SaaS Compliance

RBAC 2 sources

Rate limiting 2 sources

Encryption 2 sources

Audit 1 source

NEXORA · Plateforme LBC/FT - SaaS Compliance

MFA 1 source

NEXORA · Médico

On this siteNonce-based Content-Security-Policy, lockout after failed logins, contact form rate limiting, HSTS, secure cookies and sanitised rich content.

Stage 09 of 13

Containerisation

The same environment, from the developer’s machine to production.

What I do

Minimal images running without root privileges
Container health checks
Secrets injected at runtime, never baked into the image

Proof1

Docker 4 sources

On this siteContainer run without root privileges, HTTP health check, no secrets in the image.

Stage 10 of 13

Registry

Images are stored, versioned and traced before any deployment.

What I do

Images tagged by version
Restricted registry access

Proof1

Registry Gitlab 3 sources

Stage 11 of 13

Deployment

Deploying should be boring: automated, repeatable and reversible.

What I do

GitOps: the desired state is versioned
Staging before production
Version-based rollback

Proof2

ArgoCD 3 sources

Nginx 1 source

NEXORA · Médico

On this siteAutomatic deployment over SSH then Docker Compose: develop to staging, main to production.

Stage 12 of 13

Orchestration

The platform guarantees service availability and scaling.

What I do

Declarative deployments
High availability
Separate configuration per environment

Proof1

Kubernetes 3 sources

Stage 13 of 13

Observability

You can only fix well what you can see: service health, logs, alerts.

What I do

Application health checks
Actionable logs, free of sensitive data

Proof1

1panel 4 sources

On this siteDocker health checks and application logs on standard output.

Architecture of this site

Browser Reverse proxy · TLS Gunicorn · Django PostgreSQL MinIO · private bucket

The reverse proxy handles TLS termination. Django enforces HSTS and a nonce-based CSP, and rate-limits the forms.

Media stay in a private bucket: Django streams them, with immutable caching and support for partial requests.

Every push triggers GitLab CI: it checks the code, then deploys the Docker image to the server.

On the command line

Annotated excerpts of this site’s operations. Static demonstration: nothing is executed from this page.

Scroll: the tabs follow one another.

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$ # Update the server to the pushed branch
$ ssh -p "$SERVER_PORT" "$SERVER_USER@$SERVER_IP" \
> "cd $APP_DIR && git fetch origin && git reset --hard origin/$CI_COMMIT_REF_NAME"
$ # Rebuild the image and replace the container
$ docker compose build --no-cache
$ docker compose up -d --force-recreate --remove-orphans

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$ # The container health check queries the application
$ curl -fsS http://localhost:8000/ > /dev/null && echo ok
$ # Service status and recent logs
$ docker compose ps
$ docker compose logs --since 10m django

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$ # Configuration audit before going live
$ python manage.py check --deploy
$ # Security headers actually served
$ curl -sI "$SITE_URL/fr/" | grep -iE '^(strict-transport|content-security|x-content-type)'

mouhamed@portfolio MINGW64 ~/portfolio-django (main)
$

Variables ($SERVER_IP, $APP_DIR…) are provided by the CI: no secret appears in the repository.

05Projects

Selected projects

Work presented as case studies: context, architecture, security and delivery.

All⁶ Full Stack⁵ IoT¹

Full Stack · 2025

Vehicle Fleet Management
This project is a RESTful API built with Node.js and Express, using Prisma as an ORM to communicate with a MongoDB database. It offers a centralized solution for vehicle tracking, driver…

Role Full-Stack & DevOps Engineer
- Code review / mentoring
- PostgreSQL
- MangoDB
- NextJs
- ExpressJS
- NodeJs
Read the case study View the site Source code
Full Stack · 2026

Weighbridge Management System & Odoo Integration
This project is a custom solution developed for a client. It is a modern web application for weighbridge management, designed to automate weighing processes, manage logistics flows, and…

Role Full-Stack & DevOps Developer
- PostgreSQL
- Django
- ReactJs
- 1panel
- MinIO
- CSS
Read the case study View the site Source code
Full Stack · 2026

Dekko Group website
Role Full-Stack & DevOps Engineer
- PostgreSQL
- Django
- NodeJs
- ReactJs
- 1panel
- MinIO
Read the case study View the site Source code
Full Stack · 2026

NEXORA Website
Role Full-Stack & DevOps Engineer
- PostgreSQL
- NodeJs
- ReactJs
- 1panel
- HTML
- CSS
Read the case study View the site Source code
Full Stack · 2025

Banking Management App
Development of a banking management application allowing banks to manage their clients, accounts, and transactions. The application must feature a modern and intuitive web interface for…

Role Full-Stack Developer | DevOps
- Leadership
- PostgreSQL
- Django
- HTML
- CSS
- Registry Gitlab
Read the case study Source code
IoT · 2024

Toulou
Role Full-Stack Developer | Electronics Engineer
- MySQL
- MangoDB
- Django
- NodeJs
- ReactJs
- CSS
Read the case study

06Career

Career

Each mission details the context, the responsibilities and the technologies actually used.

Experiences

01 Jan 2026 – Aug 2026

Plateforme LBC/FT - SaaS Compliance

Fullstack | DevOps · NEXORA · Abidjan, Cocody Angré

Multi-tenant SaaS platform allowing audit firms to assess money laundering risks (AML/CFT) and generate KYC scores compliant with regulatory standards (FATF).
- Design and development of a multi-tenant SaaS platform for regulatory risk management (AML/CFT)
- Development of a modular NestJS API covering authentication, KYC, scoring, and subscription managementModeling of a risk scoring engine based on a hierarchical structure (domains → categories → factors)
- Implementation of a robust security system (global JWT, RBAC, rate limiting, strict validation, HTTP protection)
- Setup of a CI/CD pipeline (Jenkins + Docker) with automated deployment on a VPSDesign of a scalable architecture with data isolation and tenant management
- NestJS
- TypeScript
- MongoDB
- React
- Vite
- TailwindCSS
- React Query
- Redux Toolkit
- Docker
- Jenkins
- GitHub
- CI/CD
- 1panel
02 Jan 2026 – Aug 2026

EOPS - SaaS platform for Business Process Management (BPM) and Human Resources

Fullstack | DevOps · NEXORA · Abidjan, Cocody Angré

Design and implementation of a Business Process Management (BPM) SaaS platform enabling organizations to model, automate, and execute their business processes (HR, finance, administration) through configurable workflows with real-time tracking.
- Design and development of a multi-tenant SaaS platform dedicated to the digitization of organizational processes
- Implementation of a configurable workflow engine (procedures, steps, actors, triggers, instances)
- Development of a visual drag-and-drop editor for workflow modeling and dynamic formsSetup of a real-time process execution and tracking system via WebSocket
- Setup of a CI/CD pipeline (Jenkins + Docker) with automated deployment on a VPS
- NestJS
- TypeScript
- MongoDB
- React
- TailwindCSS
- React Query
- Redux Toolkit
- Docker
- GitHub
- GitHub Actions
- Postgres
- CI/CD
- 1panel
View the site
03 Jul 2025 – Nov 2025

VoteSmart

TECH LEAD · Atos ACADEMY · Abidjan Plateau

Digitization platform for the electoral process with secure voting and real-time synchronization.
- Design of a full-stack electoral management platform (registrations, voting, results)
- Development of secure APIs for electronic ballot box integrationImplementation of an embedded system (ESP32) for vote collection and transmission
- Setup of advanced security mechanisms (authentication, encryption, auditing)
- Real-time synchronization between ballot boxes and the central platform
- Deployment via Docker + Kubernetes for high availability
- Implementation of a CI/CD pipeline (GitLab, Jenkins, ArgoCD)
- Django
- C++
- ESP32
- WebSocket
- Docker
- Kubernetes
- ArgoCD
- Jenkins
- IA (LLaMA, Gemma)
- CI/CD
04 Jan 2026 – Aug 2026

Médico

Fullstack | DevOps · NEXORA · Abidjan, Cocody Angré

The main objective is to improve the continuity and quality of healthcare by enabling patients to manage their medical records, control their sharing with authorized healthcare professionals, and access healthcare services more easily, while ensuring the security and confidentiality of medical data.
- Design and develop the web and mobile modules of the platform: patient, practitioner, and pharmacy.
- Develop the electronic medical record and secure medical data-sharing mechanisms.
- Implement core business features: medical appointments, electronic prescriptions, and medication ordering.
- Implement security mechanisms: OTP/2FA, encryption, RBAC, consent management, and rate limiting.
- Deploy and maintain the solution in production, including CI/CD pipelines with GitHub Actions and Jenkins, monitoring, and backups.
- React
- React Native
- TypeScript
- Django
- PostgreSQL
- Redis
- Docker
- GitHub Actions
- Jenkins
- Nginx
- 1Panel
- Git
- Flutter
- Dart
- 1panel
View the site
05 Apr 2024 – Dec 2024

DESIGN AND IMPLEMENTATION OF A FUEL CONSUMPTION MONITORING GAUGE COUPLED WITH AN APPLICATION SYSTEM: THE CASE OF A POWER GENERATOR

Full-Stack Developer Intern · Orange Digital Center · Abidjan, Plateau

Intelligent fuel consumption monitoring for power generators.
- Design of a complete IoT system (gauge + web/mobile apps)
- Development of real-time communication APIs between the sensor and applications
- Creation of Flutter & React interfaces
- Definition of the overall system architecture
- ESP32
- Python
- Flutter
- React
- Laravel
- Django