HI, I'M Okba ALLAOUA!

I'm an Infrastructure, Computer Systems and Software Engineer with a background spanning CyberSecurity, DevSecOps, Cloud Computing, and Networking, creating dynamic, user-centric digital experiences. With a blend of creativity and technical prowess, I turn concepts into functional, secure, and visually engaging solutions.

DOWNLOAD CV

Okba Allaoua, Full Stack Software Engineer portrait

WHAT CAN I DO FOR YOU

I MASTER PIXELS AND MAKE THEM COUNT

Here is a list of services I can provide. Rest assured, I will do my best in order to deliver the best possible service to ensure client satisfaction.

Solution Engineering
Turn ideas into working solutions. From brainstorming and concept design to picking the right architecture and stack, I shape the path from problem to product before a single line of code.
Full Stack Development
Merge frontend and backend expertise for seamless solutions. Unify user interfaces with powerful server-side technologies, optimizing performance and scalability.
Cloud & DevSecOps
Design and run reliable, secure infrastructure on AWS, GCP and VPS setups. Automated CI/CD pipelines with security baked in, so your product ships fast and stays online.

MORE SERVICES

SERVICE

DEVELOPMENT

CREATIVITY

SERVICE

DEVELOPMENT

CREATIVITY

SERVICE

DEVELOPMENT

CREATIVITY

SERVICE

DEVELOPMENT

CREATIVITY

MY WORK

DevSecOps engineering of a microservice platform, final year project at LIRMM (CNRS)

Proximity Platform

Proximity is my final year end of studies project at ESI Algiers, a smart city marketplace that connects people with the merchants around them. I did it as a research internship at LIRMM (CNRS) and defended it for both my Engineer and Master degrees. I approached it as a DevSecOps project. The platform is an API gateway and 14 Node.js business microservices with Kafka, MongoDB and Redis underneath, and four Flutter apps on top. I received it as a research prototype, run by hand with npm start. I then ran a full quality audit myself: nobody handed me or told me its quality state, I measured it. It carried 25 vulnerabilities, zero measured test coverage and no working container images, CI/CD, orchestration or observability. The work went in three parts: quality audit, operations, and functional evolution. For the audit I scanned every service with SonarCloud and ran eight risk ordered remediation campaigns, the first closing the 25 vulnerabilities, from an authentication bypass to NoSQL injection. The test suite went from zero to 1,303 Jest tests by the end of the audit and 3,618 by delivery, at 94.5% average statement coverage on the 14 services with business logic. A custom quality gate now blocks the Docker build, and all 15 services sit at A ratings. I built operations from zero: a six stage GitHub Actions pipeline on all 15 service repositories, non-root Docker images, Docker Compose on a 6 vCPU, 12 GB development server, and a single node k3s production cluster on 12 vCPU and 48 GB with five namespaces, autoscaling and zero downtime rollouts, where changes reach production only through a reviewed pull request. OpenTelemetry traces in Tempo, trace correlated logs in Loki and Prometheus metrics come together in one Grafana, with 29 alert rules routed to Slack and email and k6 load tests on both environments. The production node showed about 20 weeks of uptime. The functional evolution was large: I delivered six capabilities, payments with six payment rails, subscriptions, a promotions engine, recommendations, business intelligence and a social media layer, completed the partial services, and evolved four Flutter apps from early states into working apps. The full story is in my blog post linked here, with the two theses behind it.

LEARN MORE

Private Security Services Website, Paris

Hey'u

Hey'u is a private security company in Paris that I worked with directly on a freelance engagement, building their public website from the ground up and shipping it in about a week. The frontend is a full Next.js 18 site translated into French, English, Arabic, German and Spanish, walking visitors through Hey'u's CNAPS-certified security agents across guarding, event security, close protection and remote surveillance, with a quote simulator that sizes up a mission before a visitor ever talks to an advisor. Every page ships in both a dark and a light theme through a single header toggle, and I wired Intercom into both so the chat widget never clashes with either look. I also set up Google Tag Manager and the Meta Pixel for analytics and ad tracking, and handled the SEO end to end, metadata, Open Graph tags, canonical links, a sitemap and robots.txt, so the site indexes cleanly in every language it ships in. On the backend I built a Laravel API that plugs straight into Hey'u's internal back office, the system their team already uses to dispatch agents and run missions, so the site pulls live numbers such as the active agent count directly from it instead of showing static figures. Designing, building, translating and wiring the whole thing to their back office within a week was the real constraint on this one.

LEARN MORE

Swiss Booking and Appointments Platform

Zenbooking

ZenBooking is a Swiss booking and appointments platform I worked on at SwissDigiLab, built so companies, individual hosters and speakers can publish events and venues that clients discover, book and pay for online. The backend is split into eight Django services (core, auth, admin, business, client, chat, notification and AI) behind an nginx gateway that routes each service by path, all sharing a PostGIS database that powers location aware search, with Redis for caching and websocket channels; the services integrate through a shared core of Django apps and one common user model rather than a message broker, a service oriented split rather than textbook microservices. On top of that sit five Next.js apps, one per actor: a public landing and account app, a client app for exploring and booking events, a business portal with dashboards, calendars and revenue statistics, a speaker portal for managing invitations and presences, and an admin back office for plans, companies and payments. A shared token cookie signs you in once across all five, and the business portal ships an AI assistant, a LangGraph chatbot that talks the owner through a room rental listing and fills the form for them. Payments run on Stripe from both directions, businesses subscribe to monthly plans while clients pay their bookings through Stripe checkout, with TWINT, bank transfer and cash as alternatives, plus Firebase Cloud Messaging push notifications and a real time websocket chat between clients and businesses. I worked across the platform and its deployment too: Docker Compose stacks running on virtual machines, an nginx config with a virtual host for each app under the zen-booking.com domain, the gateway that fans requests out to the services, SSL through Let's Encrypt with Traefik in front, and separate GitLab CI/CD pipelines for the frontends and the backends. Getting five apps and eight services to feel like one product was the real work.

LEARN MORE

React Native Client App for the ZenBooking Platform

ZenBooking Mobile

The ZenBooking mobile app is the client side of the SwissDigiLab booking platform, built in React Native with Expo so people can carry the whole experience in their pocket. It mirrors the web client end to end: you sign in with email, Google or Facebook, then browse events, rooms and companies with real photos, category filters and a map view that plots everything across Switzerland, open an event to read its description and its program timeline, and book a session, pick a plan and pay. Payments run through Stripe's native payment sheet with both card and TWINT, the Swiss favourite, including the TWINT redirect and approval page, and every booking, room rental, gift card and discount follows you across the app. Families book together through shared groups, and members carry their own reservations. It also carries a real time chat with businesses over websockets, push notifications through Firebase Cloud Messaging, maps and Google sign in. The app ships as a dev client with native modules and talks to the same eight Django services behind the nginx gateway as the web apps, so the phone and the browser stay one product.

LEARN MORE

Geographic Information System Reports Web Application

SIG reports Platform

During my 4th-year internship at HR Technology, I developed a Geographic Information System (GIS) web application designed to improve road infrastructure management and safety. The platform, built with Laravel for the backend and ReactJS for the frontend, enables citizens to report road anomalies such as potholes, damaged roads, and missing signs by submitting GPS-tagged reports with photos. I integrated Mapbox and OpenStreetMap for interactive mapping, and implemented role-based dashboards: users can track the progress of their reports (Received, In Progress, Resolved), while administrators can manage submissions, request clarifications, and update statuses. Additionally, I incorporated dynamic analytics dashboards to visualize anomaly distribution by type, status, and user activity. This system enhances communication between citizens and local authorities, streamlining issue resolution and contributing to safer, better-maintained roads.

LEARN MORE

01 / 27

SEE ALL

STATS PROVES A LOT!

Behind every great website, there are powerful stats that prove its success.

3

Years of Experience

+50

Project Delivery

+75

Collaborative Projects

+9500

Working hours

SOME TRAININGS

Nov 19, 2025

AIESEC Babez - In-Tuition Algiers

Intro to mobile dev Workshop

Delivering the Intro to Mobile Development workshop at AIESEC Babez – In-Tuition Algiers was a fun and practical experience where we introduced participants to how mobile apps really work, from mobile operating systems and SDKs to virtual machines and core app components. After exploring the main mobile development technologies—Native, Cross-Platform, and Hybrid—we focused on React Native as our starting point for building modern multi-platform apps. We walked through its fundamentals, including components, JSX, props, and state, and then jumped straight into practice by creating our very first mobile screen together using Expo and React Native. Participants learned how to initialize a project, structure UI elements, style their screen, and run the app live on their devices, giving them a complete hands-on introduction to mobile development.

No.01

Nov 1, 2025

CSE - ESI ex. INI

React and NextJS Workshop

Delivering a workshop at the CSE Club's event, SkillBoost, held at ESI ex. INI was a great experience for sure, where we tackled the main and common frontend tasks focusing on React.js and Next.js. During the session, we explored the fundamental concepts of React.js, including its component-based architecture, state management, and hooks, providing attendees with a solid foundation for building dynamic and interactive UIs. We then transitioned to Next.js, showcasing its powerful server-side rendering (SSR), static site generation (SSG), Incremental static regeneration (ISR), and API route capabilities, emphasizing how it enhances the React ecosystem for modern web development. The workshop culminated in the creation of a comprehensive project that demonstrated Next.js's build and rendering techniques, giving participants practical experience with its versatility and performance optimizations, and it was a great experience really with the amount of participants who cared and attended.

No.02

Apr 25, 2025

GDG Kuwait - Online

Introduction to capture the flag (CTF)

It was a pleasure delivering an introductory workshop on Capture the Flag (CTF) with GDG Kuwait. The session aimed to demystify the world of CTF competitions for newcomers, highlighting their role in sharpening cybersecurity skills. We explored the fundamentals of CTF challenges, from reconnaissance and cryptography to web and binary exploitation, breaking them down into approachable concepts. Through live demonstrations and guided practice, participants had the chance to get hands-on with solving beginner-friendly tasks. The goal was to not only provide practical knowledge but also to spark curiosity and encourage continuous exploration in the field of ethical hacking and cybersecurity.

No.03

Feb 26, 2025

Nexus ESTIN - Online

Exploitation techniques in Red teaming

At Nexus ESTIN, I had the opportunity to dive deep into the fascinating world of red teaming with a workshop dedicated to exploitation techniques. The session provided participants with a structured overview of how attackers identify, analyze, and exploit vulnerabilities during simulated engagements. We covered practical exploitation methods, privilege escalation strategies, and post-exploitation tactics, emphasizing real-world scenarios and ethical applications. By blending theoretical foundations with hands-on labs, attendees gained a clearer understanding of how red teamers operate and how these insights contribute to strengthening an organization’s security posture.

No.04

Januray 17, 2023

Ingeniums - ESI SBA

Web development series

We organized a web development training series at ESI SBA, tailored for students eager to master HTML and CSS. Over the course of six weekly sessions, held every Tuesday, from zero to hero where we deep dived into the intricacies of HTML, including semantic elements, and explored CSS in depth, covering essential layout techniques like Flexbox and Grid. Each session was designed to be interactive and hands-on, allowing students to apply their learning through engaging tasks and the creation of dynamic landing pages. The series was a resounding success, with enthusiastic participation and impressive projects showcasing the skills acquired by the students.

No.14

December 06, 2022

Ingeniums - ESI SBA

Intro to web dev conference

At the Intro to Web Dev Conference held on December 6th at 13:30, I had the incredible opportunity to engage with a dynamic audience of over 30 eager individuals in the expansive amphitheater setting. The session, powered by Ingeniums Club, delved into fundamental aspects of web development, covering essential topics such as Vocab and Fundamentals, where I explored the intricacies of client/server dynamics, as well as delving into the world of IP and MAC addresses. We navigated the 'What/Why Web Dev?' territory, unraveling the significance and motivations behind venturing into the realm of web development. The discussion seamlessly transitioned into the Front/Back Combination, dissecting the symbiotic relationship between these crucial aspects. Exploring the Languages Necessary, we dissected the diverse array of coding languages pivotal in this field. Sharing insights into My Experience/Resources, I provided a personal touch, making the intricate world of web development relatable. Despite it being my inaugural experience, the vibrant attendance significantly contributed to a lively and enriching session, creating an environment conducive to exploration and learning.

No.15

November 06, 2022

Ingeniums - ESI SBA

How to install Linux workshop

The “Install Linux Workshop,” part of the annual Install Party organized by Ingeniums Club at ESI SBA, was a hands-on session designed to introduce new students to the Linux ecosystem — an essential skillset for their academic journey. During the event, participants were guided through the complete process of installing Linux using VirtualBox, ensuring they could experiment safely without affecting their main systems. The workshop covered key foundational concepts such as the role of the Linux kernel, the structure and differences between popular distributions, and crucial storage concepts like MBR and GPT partitioning. Beyond the technical setup, attendees gained an understanding of how Linux fits into software development and system administration workflows. By the end of the session, each participant had a fully functioning Linux environment and a clearer grasp of how open-source systems operate. The interactive and collaborative atmosphere made the Install Party not just an educational experience, but also a welcoming introduction to the ESI student community and its culture of exploration and learning.

No.16

01 / 16

SEE ALL

Need a successful project?

LET'S WORK TOGETHER

ESTIMATE PROJECT

Okba ALLAOUA

As always, I build and secure digital solutions, from web applications to cloud infrastructure, for individuals and businesses in need.

[email protected]+33 7 77 13 44 18

HI, I'M Okba ALLAOUA!

I MASTER PIXELS AND MAKE THEM COUNT

Solution Engineering

Full Stack Development