Production-grade engineering knowledge, executable labs and reusable Spring libraries for Java architects: distributed systems, Keycloak security, BPMN orchestration, telecom provisioning and enterprise AI engineering.
English · Français
| If you are a(n)... | Start with... |
|---|---|
| Java/Spring Architect | engineering-library |
| Security / IAM Engineer | keycloak-spi-workbench + spring-keycloak-toolkit |
| Enterprise AI Engineer | ai-skills |
| Telecom / BSS Engineer | bpmn-provisioning-patterns + oda-learning-lab |
| API / Platform Engineer (telecom) | openapi-sentinel + component-manifest-lint |
| Coding Agent | llms.txt / skills-index.json |
-
📚 engineering-library — Production-grade Java 17 / Spring Boot 3 monorepo featuring 90+ multi-tiered reference implementations (
nanotomacro), 16 knowledge domains, ADRs, and post-mortem analysis. -
🔀 bpmn-provisioning-patterns — Executable Camunda + Spring Boot + Kafka Sagas modeling telecom provisioning, multi-operator number portability with SLA timeouts, and threshold-based batch compensation.
-
🛠️ keycloak-spi-workbench — Real-world Keycloak SPI extensions (Custom Authenticators, Event Listeners, Federation) built properly with full integration test coverage.
-
🔐 spring-keycloak-toolkit — Enterprise Spring Boot auto-configuration library for Keycloak OAuth2/OIDC Resource Servers, solving role-mapping and RFC 7807 problem details.
-
🤖 ai-skills — Pragmatic AI Engineering Knowledge Base (LLM Economics, Hybrid RAG, Multi-Agent Orchestration, MCP Protocol, Spring AI & Guardrails) powered by JihedAiLabs.
-
🛡️ cyber-skills — A working library of security skills across 26 domains — each an agent-ready SKILL.md that doubles as a human cheatsheet. Bilingual EN/FR.
-
🧭 oda-learning-lab — Unofficial, bilingual EN/FR study path on the Open Digital Architecture: nine modules, five executable labs, and a source matrix that separates what was verified from what was only reported.
-
🔎 openapi-sentinel — Offline lint and breaking-change check for OpenAPI/Swagger descriptions, with telecom-style conventions observed in public APIs. Bilingual messages.
-
🧩 component-manifest-lint — Offline checks for telecom component manifests against the published schema: unknown fields, required fields, types, service consistency. Bilingual messages.
| Repository | Language | Last Push |
|---|
| engineering-library | Java | 2026-10-23 |
| bpmn-provisioning-patterns | Java | 2026-10-15 |
| keycloak-spi-workbench | Java | 2026-09-29 |
| spring-keycloak-toolkit | Java | 2026-10-22 |
| ai-skills | Python | 2026-10-15 |
| cyber-skills | Python | 2026-10-15 |
| oda-learning-lab | Python | 2026-10-19 |
| openapi-sentinel | Python | 2026-10-22 |
| component-manifest-lint | Python | 2026-10-22 |
- From Spring Boot to Spring Cloud: Master microservices architecture, from design to production.
- Keycloak Security Mastery: Understand and extend Keycloak (SPI), integrate OAuth2/OIDC with Spring.
- Orchestration & Resilience (BPMN): Manage distributed transactions, saga patterns, and system resilience.
- Applied Enterprise AI: Integrate Generative AI into existing production workflows (RAG, Agents, Spring AI).
- Standardization and CI/CD: Docs linting, i18n checks and freshness gates enforced on every push — the same governance pattern applied across every repo above.
Engineering is not just about writing code; it is primarily about managing complexity. I strongly believe in simplicity by design (clean architecture), secure-by-default paradigms, and validation through execution rather than theory. A distributed system must be designed to fail predictably, with clear boundaries and total observability. My approach prioritizes production reliability, relentless automation, and transparently sharing field-tested knowledge.
- LinkedIn: Jihed Ben Arfa
- GitHub Discussions/Issues: Feel free to open issues or discussions on the respective repositories.
(Direct contact is exclusively via LinkedIn or GitHub messages. No support or discussion via email is accepted.)



