Secure software, identity & AI agents | AppSec · DevSecOps · IAM · PKI | Azure · .NET
I design and build secure systems end to end, from enterprise identity and PKI architecture to the pipelines and code that run on them, and I use AI agents across the whole software lifecycle.
Experience
- Lead developer on a large .NET and React platform: CI/CD, automated testing, security scanning, and daily AI-assisted development (GitHub Copilot, Claude Code).
- Identity & security architecture in financial services: identity governance rollout, vulnerability management policy, PKI, HSM, PAM and SIEM.
- Infrastructure project management: Active Directory forest consolidation (22,000 users) and PCI-DSS compliance.
- Digital identity: national eID smart-card authentication, XAdES digital signing and secure data-exchange integrations.
Hands-on security practice: TryHackMe global rank 380, 710+ rooms; Offensive Pentesting, SOC Level 2 and DevSecOps paths. TOGAF 9 and ArchiMate 2 certified.
Personal projects, mostly exploring secure, AI-assisted and agentic development.
- unicode-smuggling-guard: detects invisible Unicode in code, docs and AI agent files (GitHub Action, pre-commit hook, CLI)
- sheet-music-mcp: six MCP servers that help choir singers digitize, render and sing along with sheet music
- copilot-cost-analyzer: explains agentic coding token usage, prompt caching and cost
- drawio-charts: a Claude Code Agent Skill for creating and editing draw.io diagrams
- nlsh: translates plain English into ranked, explained shell commands with local LLMs (Ollama, llama.cpp)
- onnx-text-summarizer-dotnet: ONNX Runtime and Hugging Face T5 summarization in C#
- md2p: zero-dependency Markdown-to-terminal renderer that detects hidden Unicode watermarks
Connect on LinkedIn.