Wael Mansour

Software Engineer — Platform & Cloud Architecture

United States

 Website
 LinkedIn
 GitHub
 Blog

Print / PDF

About Me

Software engineer with 18+ years designing, shipping, and operating secure cloud-native platforms on AWS and Azure. I own architecture across team boundaries: setting technical direction for multi-tenant SaaS and microservices, leading root-cause analysis on production incidents that have resisted diagnosis elsewhere, and multiplying team output by converting individual expertise into reusable platform tooling. Deepest domain experience in access control and mobile credentials, energy/IoT at grid scale, and the modernization of legacy systems into observable, containerized architectures.

Selected Impact

  • Traced 6+ production incidents to true root cause after the owning teams had exhausted their own diagnosis — including one canary deploy that broke three microservices simultaneously via two independent root causes.
  • Converted API contract drift from a production defect into a pull-request-time CI failure by building an automated reconciliation system that moves detection from production back to PR time.
  • Shifted 68 GWh of energy demand out of peak in a single summer through Demand/Response architecture spanning utilities, device fleets, and event systems.

    • Employment

    Lead Software Engineer

    Allegion, Golden CO
  • Architectural ownership across the platform team — set technical direction and design standards for the credentials platform, serving as the escalation point for cross-service problems and raising the team's design bar through design reviews, shared documentation, and reusable domain tooling.
  • Root-cause authority across service boundaries — led cross-team incident response and RCA for 6+ production incidents that had resisted diagnosis by their owning teams, including a canary deploy that broke three microservices at once via two independent root causes (a corrupted build cache and a missing infrastructure permission), a TLS handshake failure, and a managed-identity authentication failure — establishing tracing symptoms to true root cause as team practice over shipping surface fixes.
  • Moved a defect class from production to CI — designed and built an automated API-contract drift-detection system that reconciles OpenAPI specs against shipped code and Jira via GitHub Actions with a phase-aware severity model, converting contract drift from a bug discovered in production into a CI failure caught at PR time.
  • De-risked live production cutovers — built a cross-platform credential-data migration tool with single-integration scoping and API-first writes, enabling safe migrations against live production and surfacing multiple production-blocking bugs before rollout.
  • Multiplied team delivery velocity — built a reusable library of agentic-AI skills, agents, and commands codifying hard-won domain knowledge (protocol internals, Apple/Google Wallet APIs, interface-spec and backlog generation), converting expertise that lived in individual heads into on-demand tooling for the whole team.
  • Owned the external technical interface — represent engineering with platform partners, customers, and integrators, routinely reconciling partners' real-world API behavior against published contracts to keep integrations correct, while aligning product, QA, and cross-team engineering internally to deliver features end to end.
  • Built a full-stack CI/CD visibility tool (Node.js/TypeScript/Express + Vue 3) integrating Azure DevOps Pipelines and Work Items, giving the team at-a-glance delivery status.

    • Software Technical Lead

    Alarm.com, Centennial CO
  • Architected Demand/Response integrations at grid scale — connecting utility companies, device fleets, and event-management systems into a single automated flow, and partnering with utilities to shift 68 GWh out of peak demand in summer 2023, advancing virtual power plant (VPP) capability and grid reliability.
  • Migrated billions of records to a separate database server in preparation for a microservices architecture.
  • Drove a sustained quality inflection — led refactoring for readability and testability backed by comprehensive unit and integration tests, increasing code coverage by over 50%.
  • Set the engineering bar for a team of four — mentored engineers and established shared practices that outlasted individual projects.

    • Software Engineer III

    ZOLL Data, Broomfield CO
  • Cut CI/CD pipeline time by 80% (from 2+ hours to 10 minutes) and standardized branching and artifact-management patterns across teams, reducing release overhead by ~90%.
  • Hardened platform security by replacing the in-house authentication framework with Okta, streamlining user management across the platform.
  • Designed a distributed tracing framework spanning frontend to backend services, and replaced a legacy WCF service with modern APIs plus database optimization — improving observability, latency, and throughput.
  • Led the frontend modernization from ASP.NET MVC to Vue.js, delivering a more responsive, maintainable UI on reactive components.

    • Software Engineer

    Microsoft (vendor), Redmond WA
  • Improved Dynamics CRM/365 reporting performance — profiled bottlenecks, added telemetry, and optimized query execution time, surfacing results through monitoring dashboards.

    • Lead Software Engineer

    ITWorx, Cairo - Egypt
  • Led teams of up to 6 through the full development lifecycle for US and Middle East clients, and contributed to the company achieving CMMI Level 3.

    • Software Engineer

    Sure Technology & Consultant, Cairo - Egypt
  • Delivered 7+ major SharePoint portals for government and university clients across the Middle East, and trained new developers on the platform.

    • Senior Software Engineer

    Muddyboots (Salis-IT Services), Cairo - Egypt
  • Developed and maintained cloud and on-premises services, built custom ERP reporting, and owned packaging and on-site deployment.

    • Skills

    Architecture Multi-tenant SaaS, Microservices, Event-driven systems, API contract governance, Legacy modernization & Distributed tracing & observability design

    Languages & Frameworks C# / .NET (Core, Aspire), TypeScript / JavaScript (Node.js), ASP.NET Core, Vue, Angular & Entity Framework / Dapper

    Cloud & Infrastructure AWS (EC2, S3, CloudFront, Lambda, API Gateway, ECS/Fargate, ECR, SQS/SNS), Azure (AKS, App Services, Key Vault, ACR, Event Hub, App Insights), Kubernetes (AKS, EKS, k3s), Docker, Terraform & Ansible

    APIs & Messaging Web API / Minimal API, gRPC, OpenAPI / Swagger, WebSockets, Kafka & RabbitMQ

    Data Azure Cosmos DB (NoSQL), MS SQL / Azure SQL, PostgreSQL, MySQL, DynamoDB, Redis & Couchbase

    CI/CD & Observability GitHub Actions, Azure DevOps, ArgoCD, Application Insights, Prometheus / Grafana, Elastic / Kibana, Splunk, AWS CloudWatch & Serilog / NLog

    Testing & Quality xUnit / NUnit / MSTest, Reqnroll (SpecFlow), Moq / AutoFixture, Selenium, SonarQube & Black Duck

    Open source projects

    Nanuq

    A self-hostable, full-stack tool that gives developers a single UI to manage and inspect Kafka topics and Redis instances — removing the friction of juggling multiple CLIs and dashboards during local development and debugging.

    Technologies used: C#, .NET Aspire, WebAPI (FastEndpoints), Vue 3, EF Core, SQLite, Docker, Kafka & Redis

    Certificates

    AWS Certified Developer – Associate

    Badge

    AWS Certified Solutions Architect – Associate

    Badge

    Education

    Master's Degree in Computer Science

    MIU
    Iowa, USA

    Bachelor degree in Pure Mathematics and Computer Science

    Faculty of Science - Ain Shams University
    Cairo, Egypt

    Industry Experience

    Access Control & Mobile Credentials, Energy & Virtual Power Plants, Medical Devices, IoT, Home Automation, Enterprise Resource Planning (ERP) & Customer Relationship Management (CRM)