Professional profile / 2026

Mostafa Salman

DevOps & Security Engineer

Hamburg, Germany

Mostafa Salman

Software and hardware engineer with experience in robotics, embedded systems and firmware security, and ongoing M.Sc. Microelectronic Systems study including FPGA and CNNs. At NXP since 2022, spanning trust provisioning and eSE development operations, build/test automation, observability and engineering tools.

Experience

Current role

NXP Semiconductors · eSE DevOps / Development Operations

Working student · Hamburg · Sep 2026 – Present
Continuous NXP employment since Feb 2022

  • Maintain and extend Jenkins CI/CD pipelines for automated builds and tests of Java Card-based JCOP and embedded Secure Element (eSE) software.
  • Engineer Grafana and Prometheus observability infrastructure, integrating engineering metrics and reusable monitoring/KPI dashboards for operational visibility.
  • Co-develop a PostgreSQL-backed engineering KPI platform and integrate it with Grafana for structured data storage, SQL querying and visualization.
  • Automate configuration management and reproducible provisioning of development/test environments with Ansible.
  • Troubleshoot pipeline and engineering-infrastructure failures to improve the reliability and maintainability of existing build/test workflows.
  • Resolve ongoing DevOps requests from software-development teams and maintain shared tooling and build/test automation.

NXP Semiconductors · Trust Provisioning

Working student, intern and thesis student · Feb 2022 – Aug 2026

  • Worked hands-on with PKI administration, HSM-based signing, device authentication, cryptographic key management, and certificate lifecycle processes.
  • Developed Python and Bash automation to improve provisioning and recurring operational workflows and reduce manual effort.
  • Provided operational support for CI/CD pipelines, Docker and Kubernetes deployments, and Prometheus, Grafana, Alertmanager, and ELK monitoring.
  • Completed Cypress-based tasks to test the UI of a small internal simulation at NXP.
  • Supported controlled releases and service workflows across development, test, QA, and production environments.

HAW Hamburg · Undergraduate research assistant

International Economics Program · Hamburg · Jun – Oct 2023

  • Developed interactive course materials using animated videos.
  • Supported research activities through data analysis, literature review, and publication preparation.

MIT · Robotics engineering internship

Boston, USA · Jul – Aug 2019

  • Designed, programmed, and tested autonomous robots for sample collection and communication tasks.
  • Achieved 1st place at IDC ROBOCON with a mixed international team from Japan, South Korea, Thailand, the USA, and China.
Explore robotics project ↗

Selected work

Post-quantum firmware security · Bachelor thesis

Implemented SPHINCS+ firmware-signature authentication and benchmarked SPHINCS+ and LMS on the NXP i.MX93. Developed a Python/PySide6 application with SQLite for key handling and firmware signing.

Read firmware case study ↗ Explore firmware demo ↗

YallaDabka · Production operations

GitHub Actions delivery, Docker/Compose and Nginx on an IONOS VPS. Health checks, security-header validation, non-root runtime, resource limits and release-based deployments.

Explore YallaDabka ↗

Secure Smart Supply Chain · University project

HAW Hamburg · 2023

Smart containers combining sensors, GPS and IoT nodes for information tracking. Secure storage, provisioning and key-management concepts using RIOT OS.

Explore supply-chain project ↗

Bus systems and sensors · Term paper

HAW Hamburg · Sep 2020 – Feb 2021

Analysis and comparison of Ethernet, CAN, SPI, USB and RS485 for embedded and sensor-based systems, documenting communication requirements and selection criteria.

Explore protocol study ↗

Skills

Electronics & PCB designPCB design · Eagle · LTspice · sensors · microcontrollers.

Delivery & automation · Hands-onJenkins / Groovy, Ansible, GitHub Actions, Docker, Git, GitLab, Bitbucket, SVN, Python, Bash.

Observability & data · Hands-onGrafana, Prometheus, PostgreSQL, SQL, SQLite, MySQL.

Software & QA · Hands-onC, C++, Python / PySide6, Cypress, Jira, Confluence.

Security & embeddedPKI, HSM, SPHINCS+, LMS, i.MX93, Cortex-M4, CAN, SPI, UART, JCOP / eSE.

Operational supportKubernetes, Helm, OpenShift, Azure DevOps, Argo CD, Terraform, Alertmanager, ELK, Locust, Keycloak, Black Duck, SonarQube, Nexus, Nginx.

Hands-on means direct use in engineering work. Operational support means contributing to team delivery and operations, without claiming ownership or expert administration. JCOP/eSE describes the platform context of build and test infrastructure.

Education & training

M.Sc. Microelectronic Systems · Ongoing studies, enrolled since 2025
HAW Hamburg / FH Westküste · Current study includes FPGA and CNNs.

B.Sc. Information Engineering · HAW Hamburg · 2020 – 2025

Automation Engineering · Studies, degree not completedMenoufia University, Egypt · Sep 2017 – Sep 2020
Completed 6 of 10 semesters before continuing studies in Germany.

DevOpsCon Kubernetes CAMP · Hamburg · 2024

Leadership & robotics

Robocon · Menoufia University

Egypt · Aug 2019 – Sep 2020

Led a student robotics team designing and building competition robots. Coordinated mechanical, electrical and software tasks, supporting testing, troubleshooting and competition preparation.

Languages

Arabic: Native · English: C1 / Fluent · German: A2 / Continuing to learn