I build and study identity, authentication, web security, and backend systems, with a strong focus on how modern authentication flows work at the HTTP, API, and session layers.
My portfolio combines defensive security engineering, authentication-flow analysis, and Python-based security tooling across controlled and authorized environments.
- Identity & Authentication Engineering
- CIAM & Microsoft Entra External ID
- OAuth 2.0 / OpenID Connect
- Authentication & Session State
- CSRF & Request Protection
- MFA & OTP Workflows
- HTTP / API Engineering
- Python Security Automation
- Security Research & Authorized Testing
Defensive Authentication & Web Security
A local FastAPI security laboratory focused on session-bound request protection, token security, CSRF defense, User-Agent binding, session lifecycle management, and automated security testing.
Authentication Flow Analysis & Protocol Engineering
An independent PoC studying a Microsoft B2C authentication workflow through HTTP session management, authentication state, OTP workflows, concurrency, and protocol-level debugging in a controlled environment.
B2C Authentication Flow Analysis
An educational PoC exploring Microsoft B2C authentication state, session management, CSRF protection, OTP verification, and HTTP-level workflow automation for authorized testing.
Languages: Python, JavaScript, HTML, CSS
Frameworks & Tools: FastAPI, Uvicorn, pytest, Requests
Domains: Identity • Authentication • CIAM • HTTP • APIs • Web Security • Security Automation
I'm building toward deeper work in:
- Identity and access management
- Secure authentication systems
- CIAM architecture
- OAuth 2.0 / OpenID Connect
- Session and token security
- Defensive web security
Goal: Build secure, reliable identity systems and grow into a strong Identity & Authentication Engineer with a focus on CIAM and defensive security engineering.