Status: AVAILABLE FOR PFE (FEB 2027)

Focus: DevOps & Backend Systems

Stack: Spring Boot / FastAPI / GitLab CI/CD

Location: Rabat / Casablanca, MOROCCO

System: v2.0.0_Stable

Ref: Portfolio_2026

Hi, my name is Salah and I'm a

SOFTWARE & DEVOPS
ENGINEER

Architecting resilient backend systems and automated CI/CD security pipelines.

VIEW ARCHITECTURES →RESUME / CV ↗GET IN TOUCH →

SOFTWARE & DEVOPS ENGINEER

ABOUT ME

Bridging the gap between robust backend engineering and zero-trust DevOps infrastructure.

Final-year Software Engineering student at EMSI Rabat specializing in Digital Development and Information Systems. My engineering practice focuses on designing modular, resilient backend services and automating cloud-native delivery pipelines.

I approach software engineering with a dual focus on server-side architecture and operational security. On the application layer, I design structured APIs and data processing workflows using Spring Boot and FastAPI, prioritizing relational integrity and asynchronous event handling. On the delivery layer, I implement automated CI/CD pipelines embedded with shift-left security practices—integrating static application testing and container vulnerability scanning to guarantee predictable, zero-downtime rollouts.

Certified as an Oracle Certified Java SE 17 Developer, OCI DevOps Professional, and OCI Architect Professional, I balance clean architectural patterns with reproducible cloud infrastructure.

Currently seeking a 4 to 6-month End-of-Studies (PFE) internship starting February 2027.

// PRODUCTION PLATFORMS

ENGINEERED SYSTEMS

High-throughput backend microservices, automated CI/CD delivery pipelines, and intelligent retrieval platforms engineered for resilience and scale.

[ SYSTEM SCHEMATIC: TicketHub ]

SPRING BOOT 3NEXT.JS (APP ROUTER)POSTGRESQL/MYSQLSPRING DATA JPASERVER-SENT EVENTS (SSE)GITHUB ACTIONS CI

01..ENTERPRISE IT INCIDENT MANAGEMENT & SERVICE DESK

TicketHub

TicketHub provides structured incident resolution for IT support operations. Decoupled Spring Boot 3 and Next.js architecture replacing client polling with an asynchronous HTTP/1.1 Server-Sent Events (SSE) notification stream, maintaining persistent single-connection updates per client. Features an automated SlaMonitoringService running scheduled cron sweeps against strict priority-based resolution deadlines, paired with multi-tier RBAC (Client, Technician, Admin) guarded by stateless JWT authentication and Spring Security filters.

Async Server-Sent Events (SSE) stream eliminating redundant HTTP polling overhead
Scheduled background cron workers for automated SLA breach tracking and escalation
Role-Based Access Control (Admin/Tech/Client) backed by Spring Security & JWT

[ SYSTEM SCHEMATIC: BibloNova ]

SPRING BOOT 3JAVA 17REACT (VITE)MYSQLSPRING SECURITYDOCKERNGINXGOOGLE GEMINI API

02..DIGITAL LIBRARY & AI READING ASSISTANT

BibloNova

BibloNova pairs enterprise Java services with interactive AI capabilities via a decoupled React monorepo and Spring Boot REST API. Features a containerized 3-tier topology (Spring Boot, MySQL 8, Nginx reverse proxy) isolated in dedicated Docker Compose bridge networks. Integrates Google Gemini API constrained by token-bounded context windows and sanitized payload schemas for semantic query answering, secured by stateless JWT authentication separating admin inventory and reader catalog privileges.

Gemini-powered semantic querying constrained to bounded token contexts
3-tier containerized deployment (Spring Boot / MySQL / Nginx) on isolated Docker bridge networks
Strict JWT stateless auth with separated admin inventory and reader catalog privileges

// TECHNICAL DOMAINS

CORE CAPABILITIES

Specializing in resilient server architectures, automated deployment workflows, and contextual data pipelines.

01.

Backend Architecture

Designing modular monorepos, stateless REST APIs, microservices, and asynchronous event streams engineered for data consistency and fault-tolerance.

Explore Capability →

02.

DevOps & Cloud Delivery

Building automated CI/CD pipelines with integrated shift-left security (SAST, secret detection, container auditing) and zero-downtime container rollouts.

Explore Capability →

03.

Full-Stack Integration

Connecting enterprise backend engines to high-performance reactive web interfaces, real-time dashboards, and applied AI/RAG APIs.

Explore Capability →

SYSTEM SPECS & FAQ

DEEP DIVE INQUIRIES

I am available starting February 2027 for a full-time end-of-studies (PFE) internship (4 to 6 months), open to opportunities across Morocco (Casablanca, Rabat) and abroad.

My core specialization is Backend Development (Java/Spring Boot, Python/FastAPI) and DevOps Automation (GitLab CI/CD, Docker, Kubernetes, and Shift-Left security tooling).

I hold 3 active Oracle credentials: OCI DevOps Professional (1Z0-1109-26), OCI Architect Professional (1Z0-997-26), and Java SE 17 Developer (1Z0-829).

I treat security as a continuous, automated process rather than an afterthought. By embedding shift-left security gates directly into the CI/CD pipeline—using Gitleaks for secret detection, Semgrep for static analysis (SAST), and Trivy for container auditing—I ensure vulnerabilities are resolved before they ever hit production.

Phase 01: Connection

Get In Touch

Ready to discuss an engineering challenge or a 2027 PFE opportunity? Send a message directly or connect via the channels below.

Send a Message

Contact Details

salah.khadir@outlook.com

Morocco (GMT)

Current Status

AVAILABLE FOR PFE (FEB 2027)

Chat on WhatsApp

Connect

Follow my work or send me a message on social platforms.

GitHub LinkedIn Email

SYSTEM // LOADING

STATUS: ACTIVE

>Initializing system modules···

>Loading interface components···

>Establishing data pipelines···

Resolving route...

REF: STREAM_PENDING // SALAHKHADIR.CODES

TicketHub

Async Server-Sent Events (SSE) stream eliminating redundant HTTP polling overhead

Scheduled background cron workers for automated SLA breach tracking and escalation

Role-Based Access Control (Admin/Tech/Client) backed by Spring Security & JWT

BibloNova

Gemini-powered semantic querying constrained to bounded token contexts

3-tier containerized deployment (Spring Boot / MySQL / Nginx) on isolated Docker bridge networks

Strict JWT stateless auth with separated admin inventory and reader catalog privileges

SOFTWARE & DEVOPSENGINEER

ABOUT ME

ENGINEERED SYSTEMS

TicketHub

BibloNova

CORE CAPABILITIES

Backend Architecture

DevOps & Cloud Delivery

Full-Stack Integration

SYSTEM SPECS & FAQ

Get In Touch

Send a Message

Contact Details

Connect

SOFTWARE & DEVOPSENGINEER

ABOUT ME

ENGINEERED SYSTEMS

TicketHub

BibloNova

CORE CAPABILITIES

Backend Architecture

DevOps & Cloud Delivery

Full-Stack Integration

SYSTEM SPECS & FAQ

Get In Touch

Send a Message

Contact Details

Connect

SOFTWARE & DEVOPS
ENGINEER

SOFTWARE & DEVOPS
ENGINEER