Godfrey Ogembo
Software Engineer & Community Builder
Kisumu, Kenya
Actions
Cloud Engineer with experience in backend development and Cloud Infrastructure automation. Passionate about distributed collaboration, community mentorship, and solving complex problems from first principles.
Links
Badges
Area of Expertise
Topics
Secure Sandboxing on GKE with Go and MCP
As cloud ecosystems scale, platform teams face a critical challenge: giving developers frictionless access to infrastructure without compromising security, accumulating idle cloud costs, or missing the shift toward agentic workflows.
This workshop walks through building a secure, automated Internal Developer Platform on Google Kubernetes Engine — a FastAPI control plane and a Go-based provisioning engine that dynamically generates isolated Terraform workspaces.
We'll cover three pillars: zero-trust security using GKE Agent Sandbox (gVisor) for strict container isolation and network segmentation on multi-tenant, untrusted workloads; sustainable compute via GitOps, Axion (ARM-based) scheduling, and TTL-based automated teardowns; and frictionless developer experience by exposing the Go provisioning engine as a Model Context Protocol (MCP) server, so an AI agent can securely query infrastructure state.
Live demos include a 10-second onboarding flow, an attempted sandbox jailbreak (and gVisor blocking it), a zero-waste teardown, and a closing demo where an AI agent generates a live security-posture overview via MCP.
Beyond the Grid: Engineering a Fractal City Simulation in Rust
Simulating organic city growth in the browser forced me to confront a specific problem: dynamic graph mutation fights against Rust’s strict ownership model. This session walks through the engineering behind Edo Alkebulan, a procedural engine that uses fractal L-systems to generate climate-resilient infrastructure.
The hardest part wasn’t the math; it was building a deterministic event scheduler without relying on Arc Mutex T. I’ll show how I replaced lock-based coordination with arena allocation and typed indices to solve contention, and what tradeoffs that introduced. We’ll also look at the specific compiler flags and code changes required to shrink a Bevy-based Wasm binary for low-bandwidth environments. You’ll leave with practical patterns for structuring a multi-crate workspace and isolating a no_std math kernel.
Calming the Storm: Building Resilient IoT Infrastructure for Precision Agriculture in Kenya
Kenya has hundreds of smart agriculture platforms. Most of them break when it rains.
Unstable power, dropping 4G, and thousands of sensors reconnecting simultaneously after an outage are not edge cases. They are the baseline.
This session tells the story of an architecture that broke under those conditions and what it took to fix it — decision by decision, tradeoff by tradeoff. The result is a reusable pattern for any precision agriculture platform building on IoT in Kenya.
Ingestion — AWS IoT Core over MQTT protects constrained device battery life. Kinesis absorbs reconnection spikes without cascading compute failures.
The Edge Layer — ESP32-class devices buffer locally and publish on reconnection. A gateway running AWS IoT Greengrass filters data before it reaches the cloud.
Spatial Processing — Shapely inside Lambda handles spatial filtering and geofencing without dedicated GIS infrastructure.
Hot and Cold Paths — Kinesis fans out to Lambda, writing live state to RDS PostgreSQL with PostGIS, and Firehose batching records to S3 for Athena analytics.
Data Residency — AWS IoT Core is not available in af-south-1. This talk addresses what that means under the Kenya Data Protection Act and how the architecture responds.
Live Simulation — LocalStack and k6 show how synchronous ingestion collapses under a reconnection flood and how the event-driven pipeline absorbs the same load.
Godfrey Ogembo
Software Engineer & Community Builder
Kisumu, Kenya
Links
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top