Embedded software engineer based in Germany, working at the intersection of Linux, wireless, security, and edge AI. For most of the last decade I've shipped secure IoT and industrial-edge products close to the hardware — custom Yocto/BSP Linux, secure boot, OTA, and board bring-up — across smart grid, automotive, energy automation, retail IoT, and lighting.

Over the past year, agentic AI development has changed how I build. Rather than living in C and C++, I drive multi-agent workflows (Claude Code, Codex) with plan gates and hardware-in-the-loop verification — which is how I've gone deep on Rust, Go, TPM/OP-TEE, and edge AI in the same stretch. Most of what's here is built that way.

• rpi5-iot-gateway — A production-grade Yocto distro for Raspberry Pi 5 with A/B OTA updates, security hardening (KSPP-aligned kernel, read-only rootfs, nftables), Podman containers, and optional OpenThread Border Router.

• edge-ai-yocto + rzv2l-drpai-driver — Edge-AI platform for the Renesas RZ/V2L: a hardened, container-native Yocto distro with a signed boot chain (TF-A → OP-TEE → U-Boot → FIT) feeding DRP-AI inference and A/B OTA, plus the out-of-tree DRP-AI accelerator kernel module forward-ported to Linux 6.x.

• optee-ta-rzv2l + tpm-ops — Root-of-trust work in Rust: OP-TEE Trusted Applications (anti-rollback, model-sealing) for the secure world, and a TPM 2.0 CLI for the Infineon SLB9672.

• edge-healthd — Lightweight health-monitoring daemon for edge gateways. Modular probes feed an aggregator that writes an atomic JSON snapshot every cycle. Offline-first, ~12 ms / 3 MB footprint, systemd + D-Bus.

• simple-ota-server — Self-hosted RAUC update server: signed A/B bundles over mutual TLS with HTTP/2 streaming, fronted by a web dashboard and a per-compatible manifest API.

• Rust MCP tooling — Async stdio MCP servers that give AI coding agents safe, allowlisted access to real hardware and hosts: mcp-serial-rs (serial-console bring-up) and mcp-netdiag-rs (read-only, unprivileged network diagnostics).

• IoT edge firmware — Zephyr RTOS projects for ESP32-C6, nRF5340, and ESP32-H2 covering Thread mesh networking, BLE provisioning, wireless DFU, and embedded web dashboards. Some are public like esp-openthread-rcp-rgb.

Embedded Linux      Yocto/BitBake, KAS, custom BSP layers, kernel config,
                    U-Boot, TF-A, device tree, board bring-up

Security & RoT      TPM 2.0, OP-TEE/TrustZone, secure boot, AHAB, FIT
                    verified boot, dm-verity, anti-rollback, KSPP hardening,
                    SBOM/CVE/VEX, CRA readiness

OTA                 RAUC, SWUpdate, hawkBit, MCUboot, A/B updates & rollback

RTOS & Firmware     Zephyr, FreeRTOS, ESP-IDF, nRF Connect SDK

AI / Agentic dev    Claude Code & Codex multi-agent workflows, plan gates,
                    adversarial verification, hardware-in-the-loop, MCP tooling

Programming         C, C++, Rust, Python, Bash, Go

Wireless            OpenThread, BLE, WiFi, Matter/CHIP, 6LoWPAN,
                    802.15.4, G3-PLC

Linux Systems       Kernel drivers, systemd, D-Bus, Netlink, nftables

Edge AI             Renesas DRP-AI, model compilation & sealing,
                    container-native inference

Hardware            Raspberry Pi, ESP32, nRF5340, Renesas RZ series,
                    VisionFive2 (RISC-V), i.MX series, STM32MP1

DevOps              Docker, Podman, Ansible, Jenkins, CI/CD,
                    Azure DevOps, GitLab

Web (when needed)   React, TypeScript, Tailwind — mostly for embedded
                    dashboards and tooling UIs

• MSc in Electrical Engineering from Hochschule Darmstadt, Germany
• 9+ years in embedded systems; current focus on secure, long-lived edge platforms — CRA readiness, SBOM/CVE/VEX workflows, and AI-assisted Yocto/BSP engineering
• I speak English, German, and Urdu