I build security software in Python, C++ and TypeScript that ships to production. I care about clean design, algorithms, and systems that hold up under real load.
The same PKI / TLS expertise runs through everything I do — from FIDO2 and X.509 in the product I work on to the open-source tooling I build around certificate inspection, monitoring and the TLS lifecycle.
- 📍 Based in Napoli, Italy
- 🏢 Software Engineer at Namirial since 2022 — authentication & PKI
- 🗣️ Italian (native) · English (professional)
- 🌍 LinkedIn · ✉️ michele.angrisano@gmail.com
Namirial SafeAccess — a passwordless, phishing-resistant MFA suite for enterprises, built on FIDO2 and PKI, securing access to Windows workstations and web/legacy apps.
- Built core parts of the Python backend and native Node/C++ modules powering passwordless login on enterprise workstations.
- Designed and shipped TypeScript modules for the web/integration layer.
- Work hands-on with PKI, X.509 and the TLS/SSL certificate lifecycle.
Beyond the product, I build enterprise backends in Python / FastAPI — including SOAP integrations and services around remote signing and Certificate Authority (CA) infrastructure.
I build and ship my own tooling — small, focused, production-grade.
certinspect — X.509/TLS certificate inspector: expiry, chain of trust, OCSP/CRL revocation, weak crypto and hostname match, with text/JSON/CSV/Nagios/Prometheus output.
certminder — continuous TLS certificate monitor & alerter built on certinspect: scheduled checks, dedup and notifications (console / email / Slack / webhook).
cvewatcher — self-hosted FastAPI service that matches your software inventory against the NIST NVD, with background monitoring and a web dashboard.
jpick — tiny jq-like JSON query tool written in C++20.
gaze — small file-watcher CLI in Go that re-runs a command whenever watched files change, like entr/watchexec.
hobble — fault-injection reverse proxy CLI in Go: inject latency, error status codes and dropped connections to test how a client handles a flaky backend.
- Languages: Python · C++ · Go · TypeScript · Node.js
- Backend: FastAPI · Django · django-ninja-aio-crud · SOAP · REST · microservices
- Infra & data: Docker · Linux · PostgreSQL · Redis
- Domain: PKI · X.509 · ASN.1 · TLS/SSL · client-cert auth · PKCS#12 · JOSE/JWT · FIDO2 · WebAuthn · remote signing · CA
On the open-source side, I keep building and maintaining my own certificate-lifecycle tooling — TLS/PKI inspection, monitoring and revocation — plus small focused utilities that scratch my own itch.
If my open-source tooling saves you time, you can support its continued development through GitHub Sponsors.
Happy to talk about PKI, security tooling and backend systems — reach out on LinkedIn or by email.