Samuel Kimama,

I architect frontend systems built to be inherited.

Founding engineer and patent-holder, 16 years shipping product at the interface layer. As first UI engineer at WitnessAI I built the AI security workflows the product sold on: contextual review of user and LLM interactions, policy-block notifications, and incident triage; I also designed the browser-side interception layer now covered by US patent 12,587,529. The RBAC and enterprise SSO systems I owned unblocked WitnessAI's first multi-million-dollar deals. Earlier, a GraphQL BFF and event-driven services over a decomposed monolith at Southwest, and billing shipped end to end at Survata from Groovy service logic and schema design through the UI. Independently ship applied AI end to end: QueQue turns natural language into shell commands over an LLM API, distributed via Homebrew; Etch is a browser extension on Chrome and Firefox spanning seven LLM platforms; pm-loop is a bounded agent-to-agent review loop running in CI.

About

Architecture, migrations, and the platform layer.

My work sits where product complexity, team scale, and frontend architecture collide. Companies call me when they need stronger foundations: component contracts, BFFs that absorb backend churn, and design systems that survive team growth.

Across SaaS platforms, enterprise modernization, ML-enabled products, and consumer systems at LinkedIn scale, I work beyond feature delivery. I define architecture, negotiate API contracts with backend partners (GraphQL/BFF where it earns its keep), raise the performance and accessibility bar, and make the frontend a first-class layer instead of a thin client.

The throughline is leverage. Strong systems compound — reducing friction for users and drag for engineers, and making future product bets easier to execute.

Core strengths

  • Patented real-time policy enforcement on live AI traffic, proxy-injected on model input and output
  • Production surfaces for inspecting live user and LLM conversation traffic
  • AI product surfaces enterprise buyers evaluate: incident triage, policy-block notification
  • Agent-to-agent loops that terminate: persisted triage state and iteration caps in CI
  • Model output shaped for surfaces where a wrong answer is destructive, including natural language to executable shell
  • Access control and data-leakage defense for AI systems: RBAC, SOC2 readiness, enterprise SSO
  • Seven LLM platform integrations, resilient to UI churn in surfaces I do not control
  • LLM developer tools shipped and distributed solo
  • Honest tradeoff calls across scope, speed, and long-term complexity
  • Long-lived codebases held together by migrations, decomposition, and boundaries that last
  • React + TypeScript monorepos, GraphQL BFF contracts
  • Features owned end to end: service logic and SQL schema design through to the shipped UI
Resume

Experience and supporting detail.

Oct 2023 – Jan 2026

Senior Software Engineer

WitnessAI · Remote

First UI engineer, establishing frontend architecture and cross-team delivery patterns for a fast-evolving SaaS platform.

  • Established the React + TypeScript architecture, component library, and API contracts that 5 frontend engineers build on across the WitnessAI platform.
  • Designed and shipped the company-wide RBAC system enforcing 5 roles across every route and UI control, partnered with backend to close data-leakage vectors, supported SOC2 readiness, and unblocked enterprise purchase contracts requiring role-based permission enforcement.
  • Shipped 3 core customer workflows in partnership with ML, backend, and product: alerts for triaging security incidents, conversations for contextual review of user + LLM interactions, and end-user notifications when traffic was redirected or blocked by policy.
  • Led the enterprise SSO (WorkOS) integration that unblocked deals with multiple Fortune 100 companies and a top-tier global telecom, all of which required SSO to close.

Impact: Elevated the frontend into a first-class product layer: RBAC and enterprise SSO directly unblocked WitnessAI's first multi-million-dollar ARR enterprise deals, including multiple Fortune 100 customers and a top-tier global telecom.

Jun 2022 – May 2023

Senior Software Engineer

Southwest Airlines · Remote

Modernization initiative migrating critical systems to a cloud-native architecture.

  • Defined the seams decomposing a legacy monolith into independently owned micro-frontends, unblocking parallel team delivery.
  • Built a GraphQL/BFF layer that transformed legacy APIs into UI-optimized read models, simplifying client complexity.
  • Designed event-driven integrations (Lambda, Kinesis, DynamoDB) to decouple frontend from backend availability.
  • Made deliberate tradeoffs across migration speed, team autonomy, and risk; used feature flags and controlled cutovers to ship without stalling delivery.

Impact: Reduced complexity and enabled scalable frontend ownership across teams.

See more experience Show less experience
Jun 2020 – May 2022

Lead Frontend Engineer

Confidential Client (NDA) · Remote

Principal frontend engineer for a multi-app platform integrating ML-driven workflows.

  • Designed a React + TypeScript monorepo hosting multiple apps that shared core primitives.
  • Partnered with ML teams and product leaders to shape how classification and automation surfaced in user workflows.
  • Established A11y, analytics, performance, and testing standards; built design systems that absorbed complexity so product teams moved faster.

Impact: Enabled scalable product development and ML integration into user-facing workflows.

Jun 2015 – Apr 2020

Lead Frontend Engineer

Survata · San Francisco, CA

First frontend engineer, later de facto lead for a B2B SaaS analytics platform.

  • Shipped multi-pay-period billing end to end: Groovy service logic, GORM schema changes designed with the CTO, and a self-serve survey extension in the UI that removed CSRs from the renewal path.
  • Owned an AngularJS to React migration, using incremental-vs-rewrite tradeoffs to preserve product velocity through the transition.
  • Designed a D3-based data visualization plugin platform grounded in how analysts actually explored customer data.
  • Cut TTFB 67% for return visitors through architectural changes; reduced onboarding from 1 week to 1 day via standards and workflow tooling.

Impact: Scaled the frontend from a single engineer to a mature platform supporting product growth and team expansion.

Mar 2012 – Oct 2014

Senior Software Engineer

LinkedIn · Mountain View, CA

Led login and authentication flows across web and mobile web at LinkedIn scale.

  • Designed secure client-server preload patterns for LinkedIn's login and auth flow.
  • Built the profile-page connection widget that helped users connect with new members via their shared connections, backed by an offline pipeline that pre-computed degrees of connection across LinkedIn's full 300M+ member graph.
  • Contributed core components to LinkedIn's shared UI system, used across multiple product surfaces on web and mobile web.

Impact: Shipped secure login, auth, and profile connection features used across LinkedIn's global member base on web and mobile web.

Technologies

  • TypeScript / JavaScript (ES6+)
  • Groovy
  • SQL
  • React
  • Node.js
  • GraphQL
  • LLM APIs (Anthropic, OpenAI)
  • GitHub Actions
  • WebExtensions (Chrome, Firefox)
  • AWS (Lambda, Kinesis, DynamoDB, CloudFront)
  • Single-SPA
  • D3
  • Astro
  • Vite
  • Webpack
  • Jest / RTL
  • HTML/CSS
Projects

Personal projects and active explorations.