I build security software in Python, C++ and TypeScript that ships to production. I care about clean design, algorithms, and systems that hold up under real load.

The same PKI / TLS expertise runs through everything I do — from FIDO2 and X.509 in the product I work on to the open-source tooling I build around certificate inspection, monitoring and the TLS lifecycle.

• 📍 Based in Napoli, Italy
• 🏢 Software Engineer at Namirial since 2022 — authentication & PKI
• 🗣️ Italian (native) · English (professional)
• 🌍 LinkedIn · ✉️ [email protected]

Namirial SafeAccess — a passwordless, phishing-resistant MFA suite for enterprises, built on FIDO2 and PKI, securing access to Windows workstations and web/legacy apps.

• Built core parts of the Python backend and native Node/C++ modules powering passwordless login on enterprise workstations.
• Designed and shipped TypeScript modules for the web/integration layer.
• Work hands-on with PKI, X.509 and the TLS/SSL certificate lifecycle.

Beyond the product, I build enterprise backends in Python / FastAPI — including SOAP integrations and services around remote signing and Certificate Authority (CA) infrastructure.

I build and ship my own tooling — small, focused, production-grade.

certinspect — X.509/TLS certificate inspector: expiry, chain of trust, OCSP/CRL revocation, weak crypto and hostname match, with text/JSON/CSV/Nagios/Prometheus output.

certminder — continuous TLS certificate monitor & alerter built on certinspect: scheduled checks, dedup and notifications (console / email / Slack / webhook).

cvewatcher — self-hosted FastAPI service that matches your software inventory against the NIST NVD, with background monitoring and a web dashboard.

jpick — tiny jq-like JSON query tool written in C++20.

gaze — small file-watcher CLI in Go that re-runs a command whenever watched files change, like entr/watchexec.

hobble — fault-injection reverse proxy CLI in Go: inject latency, error status codes and dropped connections to test how a client handles a flaky backend.

• Languages: Python · C++ · Go · TypeScript · Node.js
• Backend: FastAPI · Django · django-ninja-aio-crud · SOAP · REST · microservices
• Infra & data: Docker · Linux · PostgreSQL · Redis
• Domain: PKI · X.509 · ASN.1 · TLS/SSL · client-cert auth · PKCS#12 · JOSE/JWT · FIDO2 · WebAuthn · remote signing · CA

On the open-source side, I keep building and maintaining my own certificate-lifecycle tooling — TLS/PKI inspection, monitoring and revocation — plus small focused utilities that scratch my own itch.

If my open-source tooling saves you time, you can support its continued development through GitHub Sponsors.

Happy to talk about PKI, security tooling and backend systems — reach out on LinkedIn or by email.