Engineering expertise

Authentication & application security

Secure authentication, authorization & application security

I prefer the backend to remain the central source of identity and authorization truth. On mobile, sensitive tokens belong in secure storage while non-sensitive state can use ordinary local persistence. For higher-risk products, I design around permissions, isolation, verification, auditability, and explicit revocation rather than trusting the client.

What this looks like in practice

  • Google/Apple authentication, secure token storage, biometrics, and account-lifecycle controls in mobile apps.
  • Facility- and role-scoped clinical access in CliviQue HMIS.
  • Financial-account verification, KYC/KYB-oriented onboarding, and payment controls in RentPayor workflows.
  • Idempotency, callback verification, and explicit authorization boundaries around payment state.

Core technologies

OAuthGoogle Sign-InApple Sign-InJWTAccess tokensRefresh tokensExpo SecureStoreBiometricsPassword hashingRBACKYC/KYB

Project evidence

Products that demonstrate this capability

Each project below links to a deeper case study covering product scope, engineering ownership, supporting systems, and production evidence.

SaaS · Case study

JournPad: Voice Journal

Voice-first journaling app that preserves the original recording, transcribes spoken entries, and uses AI to generate useful titles, summaries, and categories. Entries can be searched and revisited by date, linked to goals, supported by reminders and prompts, and protected with account, deletion, and optional biometric controls.

Read case study

Enterprise · Case study

RentPayor

Rent collection and reconciliation software for landlords and property managers. RentPayor connects iOS and Android apps with a web management dashboard for landlords and property managers. It handles properties, leases, rent invoicing, M-Pesa collections, partial payments, automatic reconciliation, receipts, credits and reporting.

Read case study

Enterprise · Case study

CliviQue HMIS

Hospital management information system connecting patient registration, OPD, emergency, inpatient care, orders, referrals, theatre, billing, ambulance, mortuary, duty coverage, patient movement, documents, and facility operations. It includes facility-bound Tuma M-Pesa patient billing and reconciliation, alongside SaaS subscription billing infrastructure.

Read case study

SaaS · Case study

AI Stylist

Mobile wardrobe-management and outfit-recommendation product. Users create wardrobes, upload clothing photos for AI-assisted category, tag, and description analysis, and generate one-time, daily, or weekly outfit suggestions that can use precise local weather; recommendation history is stored locally in SQLite and designed to sync with the cloud.

Read case study

Let's build something that lasts

Have a software challenge? Let's turn it into a working product.

Talk directly with the engineer responsible for your project. Joeltech Geek Systems works with businesses and founders in Kenya and across the world.