Skip to content
Werner Pretorius WP
MobiSec Cloud (Pty) Ltd · Reg 2025/943137/07 Brits, North West · Remote-capable

Pieter Werner Pretorius

Solutions Architect · Reverse Engineer · MobiSec Cloud — Owner / Director

Analytical, outside-the-box technologist with 14+ years practical across solution architecture, reverse engineering, software development and systems administration. Primary stack Blazor Server + C# end-to-end; fluent reading/debugging/porting Java, Rust, VB.NET/Visual Basic, Clarion, Progress 4GL/OpenEdge, C/C++, Pascal, PHP. Specializes in rescuing legacy monoliths into low-footprint, high-performance microservices — then mentoring the team to run them.

Strangler modernization RE: barcodes/RSA · RFID/AEI · pcap Zero-trust · FIDO2 · DPoP ESP32 · Modbus · offline-first EN / AF
14+
Years practical
8
Flagship deep-dives
L5
Architect-Mentor
Portrait of Werner Pretorius
Owner — MobiSec Cloud Available via MobiSec
Positioning

Not the best in any single skill — unmatched in breadth + practical depth + creativity across IT and engineering trades. Ships, documents, mentors, and hands over running systems.

Practical depth beats book smarts. Thesis: own the bits, prove it in a curriculum, leave a team that can run it.
At a glance
  • ▸ PlanMyBenefits strangler: netcoreapp2.2 → net10 + Blazor + 3 APIs + standalone Identity + 4 envs
  • ▸ RE lineage: SADL/NAMDL RSA + Transnet AEI 128-bit from opaque DLLs to owned decoders
  • ▸ Field systems: RDT terminals + OmniGrid HEMS with offline SPIFFS/LittleFS & Modbus

Specialties

Evidence-anchored — each maps to shipped repos and investor-auditable artefacts.

Full skills matrix →
Strangler modernization

Monolith → microservices with parity tables, 4-env topology and mentor handover (PlanMyBenefits precedent).

Reverse engineering

Barcodes/RSA (SADL/NAMDL), RFID/AEI 128-bit, pcap/PCAPNG, emulation (Unicorn/ELFSharp).

Zero-trust identity & biometrics

OpenIddict/OIDC/JWT/DPoP, tiered RBAC, FIDO2/MFA mesh, ZKTeco/Crossmatch/AS608/R558.

Hardware-software co-design

ESP32-S2/C3, Modbus, SPIFFS/LittleFS, buck/ACS712, 3D brackets, epoxy-potted field nodes.

Low-footprint high-performance

Redis/In-Mem cache, Dapper hot paths, chunked streaming, single-file trimmed net10-android.

Career overview

Verified chronological roles — see Experience for the full timeline. Approx. flagged where commission span is approximate.

Full timeline →
2022 — Present
Owner / Director
MobiSec Cloud (Pty) Ltd — Reg 2025/943137/07 (trading as WIPPS)
Brits, North West

Bespoke development + SaaS incubation: OmniTrust/OmniLock zero-trust mesh, OmniGrid HEMS, RDT biometric terminals, container/OCR logistics pipeline, PlayStore/MobisecLite app suite. Consulting member, JSE Project Horizon (Biometric-First Identity Framework v1.0 + onboarding flows consolidation).

~3 years · approx.
Lead Architect
Payme / PlanMyBenefits programme (client engagement)
Remote — SA fintech

Commissioned to optimize legacy Mentenova benefits monolith (netcoreapp2.2, MVC/jQuery, EF Core 2.x, IdentityServer4). Single-handedly architected and built the modern net10 replacement (Blazor UI, split Dataservice/Calculation/ClientAccess APIs, standalone Identity microservice, event-driven messaging, Redis cache, OpenAPI, 4 envs + APITEST; Azure-hosted, DevOps-managed). Final ~1.5 years: mentored client internal developers in monolith→microservices patterns.

2021 — Present
Remote Developer
RapidDev
Durban — Remote

Web API + Xamarin/Android rescue, debugging, and ongoing improvement of client systems.

Note: qualifications, employers, dates and certifications on this site are taken only from CV_Werner_Pretorius.md and the 01_Skills_Matrix.md evidence matrix. Nothing invented.

Selected achievements

Achievements are framed as shipped outcomes — no unverified “firsts”.

◈

Strangler migration as curriculum

PlanMyBenefits: single-handed net10 build from EOL monolith, then 6–18h migration modules + 15 parity/gap tables that turn a rescue into a teachable capability for the client team.

⬢

Owned decoder lineage (barcodes + RFID)

SADL/NAMDL RSA 128/74-block + versioned KeySets through Unicorn emulation to MAUI SDK; Transnet 128-bit AEI with 10 equipment groups — from opaque DLLs to bit-accurate owned implementations.

⬣

Field-deployable biometric terminals

RDT ESP32-S2 + net8 single-file tooling + xUnit tests + 16KB memory RCA (streaming fix, chunked print, yield/vTaskDelay) — offline SPIFFS ACL when cloud is absent.

All achievements →

Featured case studies

Each with problem · constraints · approach · outcomes · lessons. Links to corporate where product surface exists.

All 8 case studies →
Fintech / Employee Benefits

PlanMyBenefits — legacy monolith to microservices strangler

EOL netcoreapp2.2 monolith (MVC/jQuery, EF Core 2.x, IdentityServer4, 4 DbContexts) could not scale securely; calculation matrices needed isolation and testability.

C# .NET 10Blazor ServerEF Core 10
Read case study →
Identity / Reverse Engineering

SADL / NAMDL driver-licence barcode RE chain

No documented private decoder chain for SA/Namibian DL 2D barcodes existed outside vendor DLLs (SWI32/zarlib/Summus.WiSDK).

VC++C#Unicorn
Read case study →
Logistics / Rail

Transnet RFID AEI tag decoder (rail)

Transnet rail tags used a 128-bit AEI encoding with undocumented field packing; existing tooling relied on opaque ParseATA.dll.

C# .NET 8AEI 128-bitWinForms
Read case study →

Build with the architect — not the slide deck

Engagement via MobiSec Cloud. No sales theatre — you speak to engineering.

contact@mobisec.co.za · Brits, North West, ZA · via www.mobisec.co.za/contact