
Benson Thuo
Verified Expert in Engineering
Support Specialist Developer
Nairobi, Nairobi County, Kenya
Toptal member since January 12, 2023
Benson is a senior software and automation engineer with 17+ years of experience building, securing, integrating, and modernizing enterprise systems. He combines full-stack development, cloud platforms, APIs, workflow automation, AI, and enterprise security to turn complex manual processes into reliable software. Leading initiatives across enterprise and professional environments, including SAP, cloud and infrastructure modernization, system integrations, and AI-powered workflow automation.
Portfolio
Experience
- System Administration - 17 years
- Google Workspace - 13 years
- IT Administration - 11 years
- SAP Security - 8 years
- Microsoft 365 - 8 years
- SAP ERP - 8 years
- Network Security - 7 years
- SAP S/4HANA Cloud - 1 year
Preferred Environment
AI Automation, Integrations, Full-stack Development, Software Architecture, Workflow Automation, API Development, Cloud Engineering, Python, DevOps, C#.NET
The most amazing...
...achievement was turning a manual, error-prone ERP purchase-order review into an AI agent that verifies POs automatically, end to end.
Work Experience
Software Engineer
FAR Experts LLC
- Developed a deployment-ready desktop application that automated the upload of Excel-based financial transactions into QuickBooks Desktop using the QuickBooks Desktop SDK and qbXML.
- Implemented the core QuickBooks integration engine, including SDK connectivity, company-file interaction, transaction processing, and batched uploads.
- Built automated Excel ingestion and validation workflows that transformed spreadsheet-based financial data into structured QuickBooks transactions.
- Integrated QuickBooks chart-of-accounts querying and caching to improve account lookup performance and support reliable transaction mapping.
- Implemented automated vendor and payee lookup and creation, reducing manual account and master data setup during transaction uploads.
- Developed support for multiple financial transaction types, including checks, deposits, and journal entries, through the QuickBooks Desktop SDK.
- Engineered duplicate-detection and data-integrity mechanisms to prevent erroneous or repeated financial transactions from being uploaded into QuickBooks.
- Designed mapping and rules-engine capabilities to automatically match incoming Excel data with QuickBooks accounts, vendors, customers, and other financial entities.
- Implemented company-file safeguards and balance-validation controls to ensure transactions were uploaded to the intended QuickBooks company and maintained financial data integrity.
- Delivered the solution through client testing and handoff, successfully demonstrating the completed workflow and validating the application against the client's accounting requirements.
SAP Security Architect
Kenya Tea Development Agency
- Architect and administer SAP security and identity access across 71+ companies, designing role-based access controls, authorization models, and segregation-of-duties controls for enterprise environments.
- Led SAP security implementations and modernization initiatives, achieving zero compliance findings following a major sales and marketing division rollout.
- Redesigned SAP controlling-module authorization structures, reducing unauthorized-access incidents by 30% within six months.
- Reduced system vulnerabilities by 25% through security assessments, remediation programs, monitoring, and preventative controls.
- Automated and standardized incident-response workflows, reducing resolution time by 20%.
- Designed and implemented integrations across SAP, cloud services, APIs, databases, and enterprise applications.
- Built AI-assisted automation using the Claude API to analyze access logs and identify anomalous permission changes, extending traditional manual security reviews with automated monitoring.
- Deployed comprehensive security protocols to bolster data protection, integrating advanced monitoring, detection, and prevention strategies for heightened cybersecurity resilience.
- Led technical teams and collaborated with business, security, infrastructure, and application stakeholders to deliver enterprise systems and security initiatives.
- Led SAP security enhancement project, achieving a 30% reduction in unauthorized access incidents in six months.
System and Network Administrator
Kenya Tea Development Agency
- Crafted network specifications by carefully examining user requirements, workflow, access, and security prerequisites, ensuring optimal performance and functionality.
- Designed, configured, and analyzed requirements for deploying various applications, managing over 60 servers at the head office.
- Ran continuous IDS monitoring and threat mitigation across a nationwide WAN, closing vulnerabilities before they were exploited.
- Set and enforced networking standards adopted organization-wide, reducing ad hoc, inconsistent configurations across regional sites.
- Coordinated with 4+ internal stakeholder teams (ICT services, business systems, security) to keep a nationwide network available through equipment failures, expansions, and security incidents.
- Achieved successful guidance on networking standards and specifications to address diverse networking requirements while effectively evaluating and deploying cutting-edge technologies to enhance performance.
- Managed and executed networking projects within the organization, ensuring strict adherence to established standards and procedures.
- Identified potential network infrastructure system threats, diligently monitored and analyzed the intrusion detection system (IDS), and effectively implemented mitigation measures.
- Achieved the preservation of network, system, and application integrity and security through the technical enforcement of organizational security policies.
- Collaborated with key stakeholders, including ICT services, ICT Business Systems, RICTCs, FSAs, and a security administrator, to guarantee network availability and seamless server system resource management.
Microsoft 365 Expert
Lock23
- Led a zero-data-loss migration of two organizations from legacy Bluehost email to Microsoft 365, including full folder structure, permissions, and history preservation — then trained both staffs to full independent adoption.
- Delivered the migration with zero data loss across all accounts, a common failure point in email platform migrations.
- Designed multi-account Outlook access for staff working across both organizations post-merger/partnership.
- Designed and delivered training sessions tailored to staff’s needs, ensuring rapid adoption of Microsoft 365, Outlook, and integrated tools and significantly reducing the learning curve.
- Delivered targeted training sessions on Microsoft 365, Outlook, and integrated tools, enabling teams to adopt new systems efficiently and independently.
- Provided ongoing post-migration support, quickly resolving user issues and fine-tuning configurations to ensure a seamless transition, resulting in high user satisfaction and confidence in the new system.
- Identified and addressed potential migration risks early, adhering strictly to the project timeline and ensuring a smooth transition without impacting business continuity.
- Migrated legacy Dropbox data to OneDrive under strict access-control and segregation-of-duties requirements — the same SoD discipline from your SAP work, applied to a different platform.
IT Support and Security Specialist
Pachama
- Revamped onboarding workflows, ensuring seamless, efficient, and secure processes. Enforced rigorous security protocols and compliance standards, minimizing risks and enhancing integrity.
- Developed insightful reports for mobile device management, enhancing efficiency in overseeing diverse devices across countries and time zones. Provided real-time visibility on device setup progress for international users.
- Crafted a visionary ICT policy to navigate dynamic tech trends, synchronizing IT endeavors with organizational objectives.
- Cut cybersecurity incidents 30% in 6 months for a climate-tech company operating across multiple countries and time zones, while simultaneously reducing onboarding time 20%.
- Built real-time device-provisioning visibility for a distributed, international workforce (Rippling, Apple Business Manager, NordLayer VPN).
- Coordinated onboarding procedures and optimized device administration, resulting in a 20% reduction in onboarding duration.
- Authored the company's ICT policy from scratch, aligning IT strategy with business objectives as the organization scaled.
- Maintained a 99% help-desk satisfaction rating and 90% first-contact resolution rate while handling this at global scale — proof you can run high-volume support without sacrificing quality.
- Demonstrated technical leadership in IT operations through requirements analysis, system administration, and automation. Configured DNS and mail servers, integrated tools like Slack, Zoom, and Notion, and ensured platform compatibility.
- Performed comprehensive system audits on the Google Cloud Platform. Identified and addressed compliance and security gaps, ensuring robust data integrity, optimized system performance, and adherence to organizational policies.
Systems Developer
Real Estate Company (via Toptal)
- Delivered three connected systems for a real estate client through Toptal: cross-platform email integration, a privacy-first video hosting platform with anti-tampering safeguards, and a real-time email tracking/analytics system.
- Built content-authenticity safeguards into the video platform, protecting the client from tampering and disputed-authenticity risk.
- Developed an advanced email tracking system, providing real-time analytics for enhanced decision-making and communication strategy optimization via seamless integration.
- Delivered real-time analytics that directly changed the client's communication strategy.
Chief Technology Officer
Sunflower Events
- Built an events company's entire tech function from scratch, digitizing operations end to end.
- Digitized accounting and payroll, eliminating manual reporting processes entirely.
- Stood up remote-work infrastructure in weeks during COVID-19, keeping 80+ staff operational with zero business continuity disruption.
- Acted as fractional CTO: full ownership of software, network, and security decisions with no other technical staff to rely on — the kind of end-to-end ownership global clients look for when hiring a senior solo contractor.
IT Solutions Architect
Safaricom
- Designed enterprise information systems at Kenya's largest telecom, working directly with board-level stakeholders to align technical architecture with business strategy (TOGAF methodology).
- Assessed a broad range of information solutions and products, particularly document management, collaboration, and content management.
- Translated deep technical architecture into language board members could act on.
- Evaluated document management, collaboration, and content management solutions at telecom scale.
ICT Officer
Nexus Networx
- Offered technical support on-site, via phone, or by email.
- Configured computer networks and structured cabling.
- Installed hardware and software systems and maintained or repaired equipment.
- Provided technical support services and closed-circuit television installation.
Experience
AI Agent for Automated ERP Purchase Order Verification
QuickBooks Desktop Transaction Automation Solution
SAP Security: Designed the SAP SoD Framework Securing 71+ Companies Against Fraud and Risk
https://news.sap.com/africa/2022/09/kenya-tea-development-agency-brews-perfect-technology-mix/Efficient SAP ERP implementation: seamless SAP ERP deployment. Ensuring the implementation process was smooth and aligned with each company's unique requirements.
Thorough users, roles, and authorizations management: data security and access controls meticulously defined user roles and authorizations for various personnel within each organization by tailoring the configurations to match specific roles and responsibilities, and enhanced system integrity, reducing the risk of unauthorized access and data breaches.
Cross-module expertise: Our comprehensive expertise spanned multiple modules, including finance, controlling, sales and distribution, and quality assurance. This proficiency allowed us to address each company's diverse needs and ensure the ERP's seamless integration with existing systems and processes.
Unified IT Ticketing Integration System (Slack, Jira & Gmail)
I developed structured workflows that automatically converted Gmail emails and Slack requests into Jira tickets, maintaining consistent categorization, prioritization, and assignment rules. The integration improved response times, reduced manual ticket logging, and enhanced visibility of incidents across support teams.
The system also supported automated notifications, status updates, and escalation workflows between Slack channels and Jira boards, ensuring real-time collaboration between technical teams and end users. This resulted in improved IT service efficiency, better accountability, and faster incident resolution.
Streamlining Onboarding Excellence
The workflow also ensured strict adherence to security protocols and compliance standards, mitigating potential risks and bolstering data integrity. Automating this critical process has freed up valuable time for HR and IT teams to focus on strategic initiatives, driving innovation and growth throughout the organization.
Empowering Informed Decisions with Comprehensive Reports
The reports provide real-time visibility into the status of Rippling agent installations, enabling the IT department to monitor and manage device onboarding seamlessly. This enhanced oversight has resulted in reduced set up times, ensuring that new employees can access the resources they need from the moment they join the team. The reports capture device condition, and health has proactively identified and addressed potential hardware and software issues. Maintenance teams can now optimize their workflows, minimizing downtime and maximizing productivity across the organization. The computer inventory reports have streamlined asset tracking and resource allocation.
Microsoft 365 Migration and Communication Platform Integration for Two Companies
LMS Course Development and Integration
Enterprise ICT Infrastructure & Security Administration Platform
I also supported system integrations across tools such as ServiceNow (ITSM), Microsoft 365, Linux/Windows servers, and monitoring solutions like Darktrace. Additionally, I contributed to backup management, incident response, and vulnerability remediation efforts. My role included ensuring operational stability, improving access governance, and supporting secure digital transformation initiatives across the organization.
IT Service Feedback & Client Experience Collection System
I developed standardized questionnaires and feedback forms used to engage clients and internal stakeholders before and during project delivery. The solution ensured consistent requirement gathering, reduced ambiguity in project scope, and improved alignment between business expectations and technical implementation.
The feedback framework also supported continuous service improvement by enabling teams to identify recurring issues, measure satisfaction, and refine ICT service delivery processes. It contributed to better decision-making in solution design and improved communication between technical teams and end users.
Accounting and Payroll Automation Using Quickbooks
Enterprise Identity & Access Management (IAM) Governance Framework
I was responsible for designing and maintaining access control structures, managing user lifecycle processes (joiners, movers, leavers), and ensuring compliance with audit and governance requirements. I collaborated with audit and infrastructure teams to reduce access risks and strengthen identity governance across critical business systems. The framework improved visibility into access, reduced the risk of privilege escalation, and strengthened the overall security posture.
Enterprise Infrastructure & Systems Administration Platform
I was responsible for server administration, system monitoring, performance optimization, and troubleshooting infrastructure issues. The role also included coordinating system upgrades, managing configuration changes, and ensuring operational stability across production environments. This work contributed to improved system uptime, reduced incidents, and more reliable service delivery across the organization.
Enterprise Cybersecurity Monitoring & Incident Response System
I was responsible for monitoring security alerts, investigating potential threats, coordinating incident response activities, and ensuring timely remediation of vulnerabilities. The role also involved supporting backup and recovery processes, strengthening endpoint security policies, and assisting in compliance reporting. These efforts improved threat visibility, reduced response times, and strengthened the organization’s overall security posture.
Real Estate Property & Tenant Management System
IT Automation & Security for a Global Climate-Tech Workforce
Python Agent for SAP Segregation-of-Duties Conflict Detection
Education
Bachelor's Degree in Information Technology
Jomo Kenyatta University of Agriculture and Technology - Nairobi, Kenya
Certifications
ERP Systems & Database Management, Development, Maintenance and Upgrade
The Computer Society of Kenya
Okta
Udemy
Power Automate - Complete Guide to Microsoft Power Automate
Udemy
Mastering Microsoft 365 SharePoint Online: Essential Guide
Udemy
Business Writing & Technical Writing Immersion
Udemy
Generative AI, ChatGPT, Copilot & AI Agents Masterclass 2025
Udemy
Hacking Public Speaking
Udemy
Cloud Computing Azure
Proven Training & Consultancy Solutions Limited
Privacy and Data Protection for Champions
The Computer Society of Kenya
Scrum Fundamentals Certified
Scrum.org
SAP ADM950: Secure System Management
SAP
SAP ADM940: AS ABAP Authorization Concept
SAP
SAP ADM: 900 System Security Fundamentals
SAP
Salesforce Certified Administrator in Enterprise Linux
SUSE
Data Warehouse Specialist
IBM
CompTia Network + Support Skills
CompTIA
Skills
Libraries/APIs
OneDrive, SharePoint API, Slack API, Google API, Claude API, QuickBooks API, REST APIs, Google Drive API, API Development
Tools
SAP Security, VPN, SAP Quality Assurance (QA), SAP Portal, SAP Controlling (CO), SAP S/4HANA, Microsoft Excel, Spreadsheets, Microsoft Exchange, Google Workspace, Microsoft Teams, Microsoft Outlook, Jira, Google Sheets, Excel 2010, ChatGPT, Microsoft Copilot, Visio, Microsoft Visual Studio, Google Docs, Microsoft Power Apps, Adobe, Grafana, Claude, Microsoft AI, SAP Solution Management, Jamf Pro, Microsoft Intune, Zapier, VMware, SAP Workflow, SAP Plant Maintenance (PM), Slack, Zoom, Notion, Azure Active Directory B2C (ADB2C), Apple Mail, SAP2000, LaTeX, Skype, Microsoft Power Pages, Google Forms, Darktrace, IBM Notes, Git, Odoo
Languages
ABAP, SQL, Bash, XML, PHP, Java, HTML, Python, C#, VB.NET, C++, XAML, JavaScript, HTML5, CSS3, C#.NET
Frameworks
SPF, .NET, Windows PowerShell, Windows Presentation Foundation (WPF)
Paradigms
Scrum, Agile, Penetration Testing, Change Management, Testing, ITIL, Requirements Analysis, Role-based Access Control (RBAC), DevOps, Automation, Design Thinking, High-performance Computing (HPC), SCORM, Database Design, Agile Software Development, UI Design, UX Design
Platforms
Windows, SAP HANA, Linux, Microsoft, Windows Server, Amazon Web Services (AWS), MacOS, Windows Server 2016, Google Cloud Platform (GCP), Azure, SharePoint, SharePoint 365, Microsoft Power Automate, Microsoft Copilot Studio, Microsoft Power Platform, iOS, WordPress, Bluehost, HubSpot, Google AppSheet, Apple, Dropbox, Microsoft Dynamics 365, Power Automate Cloud Flow, Windows Server 2019, Desktop
Storage
FibreChannel, Google Cloud, Database Security, Azure Active Directory, Microsoft Entra ID, Microsoft SQL Server, Data Centers, Databases, Database Modeling, SAP S/4HANA Cloud, JSON, Data Integration, MySQL, Data Validation, XML-RPC
Industry Expertise
Cybersecurity, Project Management, Web Design, Accounting
Other
SAP, SAP HR Security, SAP BI Security, Networks, IP Networks, WiFi, Cisco, Cisco Switches, Firewalls, Authorization, Data Privacy, Networking, Policy, SAP Enterprise Portal, Microsoft Office, Web Development, Algorithms, Data Structures, Scrum Master, Scrum Product Owner, Authentication, User Authentication, IT Audits, Back-end Admin Systems, SANs, Business Continuity Planning (BCP), Disaster Recovery Plans (DRP), Cisco Routers, LAN, WAN, Access Control, DNS, Linux Servers, SAP ERP, Customer Support, Solution Design, Presales, Projects, CCNA, CompTIA Network+ Certification, IT Infrastructure, SAP Implementation, SAP Integration, User Roles, IT Support, IT Security, Security, MacBook, System Administration, Monitoring, Procure to Pay, Troubleshooting, IoT Security, Antivirus Software, Anti-spam Protection, Google, Network Security, Network Protocols, Google+, L3 Network Protocol, HR Tools, Site Reliability Engineering (SRE), System Service & Hardware Control, IT, IT Networking, Infrastructure, Technical Writing, Technical Documentation, Documentation, FortiGate, DHCP, Universal Router, Dynamic Host Configuration Protocol (DHCP), Wireless Systems, Fortinet Firewall Configuration, Hotspot, PCI, Servers, Architecture, Design, Enterprise Resource Planning (ERP), Active Directory Federation, Excel Expert, CTO, Leadership, Information Security, IT Administration, GoDaddy, Microsoft 365, Windows 11, SAP Testing, IT Management, Reports, Office 365, Intuit QuickBooks, QuickBooks Online, Excel 365, Mobile Device Management (MDM), iOS Mobile Device Management (MDM), IT Automation, Workflow, Solution Architecture, Windows System Administration, Gmail, Email, Business Services, DNS Configuration, Technical Consulting, Technical Leadership, Windows 10, APIs, English, MDM, Mail Servers, SMTP, DNS Servers, IMAP, Outlook, Network Administration, Absence Management, SAP Architecture, Teams, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Cloud, Fractional CTO, Data Analysis, Data Engineering, QuickBooks Desktop, Data Science, Cloud Migration, Cloud Platforms (e.g., AWS, Azure, Google Cloud), Security & Compliance Awareness, SaaS, Case Management, System Design, Generative Artificial Intelligence (GenAI), Data Wrangling, Data Visualization, Active Directory (AD), Customer Relationship Management (CRM), Systems Monitoring, Virtualization, Domain Migration, Cloudflare, Microsoft Entra, Network Engineering, PDF, Data Processing, OpenAI, Human Resources (HR), Microsoft Servers, Local Networking, Network Infrastructure, Routing and Switching Protocols, Data Security, Email Delivery, DomainKeys Identified Mail (DKIM), Startups, Jira Administration, Jira Administrator, Jira Service Management, Google Drive, VoIP, VoIP Administration, SharePoint Online, API Integration, Large Language Models (LLMs), HRIS, Okta, Integration, ITSM, Content Migration, Performance Optimization, Debugging, Workflow Automation & System Integration, Minimum Viable Product (MVP), AI Automation, Workflow Automation, Agentic AI, Communication, Advisory, Consulting, Deployment, Planning, Team Leadership, Data Migration, Accounting Systems, Inventory Tracking, AI Tools, Endpoint Security, Technical Support, IT Service Management (ITSM), CompTIA, Endpoint Management, Endpoint Protection, Patch Management, Network Design, Network Topology, Systems Design, Approval, API Connectors, Email Templates, Error Handling, Job Schedulers, Webhooks, Workflow Design, Email Migration, User Permissions, Security Audits, Cloud Computing, Microsoft Azure, System Integration, Ticketing Systems, User Onboarding, Troubleshooting & Issue Resolution, Compliance, Infrastructure as Code (IaC), Cloud Architecture, Azure Administrator, Data Loss Prevention (DLP), System Architecture, Data Governance, Cloud Infrastructure, Code Review, Database Optimization, Multi-tenant Architecture, IT Operations Management (ITOM), Stakeholder Engagement, Process Automation, Asset Management, IT Asset Management (ITAM), Emailers, SharePoint Migration, Test Documentation, Technical Architecture, Sales Engineering, IT Consulting, Administration, SharePoint Administration, Third-party APIs, Third-party Integration, Workflows, ITIL 4, Learning Management Systems (LMS), Dashboards, Integrations, Full-stack Development, Data Retention, Microsoft Lists, DMZ Networks, Network Operation Centers (NOC), Audits, SAP HCM, IP PBX, PBX, VLANs, SAP Warehouse Management System (WMS), Network Management Stations (NMS), Business to Business (B2B), Artificial Intelligence (AI), AI Agents, Business Analysis, Reporting, Data Modeling, Fortinet, Jamf, Prometheus, API Gateways, Data Encryption, eCommerce, IT Project Management, Multiprotocol Label Switching (MPLS), Domain DNS Setup, Cisco Wireless, User Flows, QuickBooks Point of Sale, QuickBooks Advance Reporting, HubSpot CRM, Microsoft OneDrive, Apple Business Manager, NordLayer VPN, Public Speaking, Data, Big Data, Single Sign-on (SSO), User Groups, AI Integration, GDPR, ISO 27001, Symantec, Backups, IT Troubleshooting, Incident Response, Vulnerability Management, Questionnaires, Enterprise Architecture, SDKs, Desktop App, qbXML, Data Mapping, Software Development, .NET 10, COM Interop, Payment Gateways, Software Architecture, Relational Data Mapping, Cloud Engineering, Rippling, Analysis, CSV, CSV Import
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring