Security engineering leader — building practical security tooling across network infrastructure, cryptography, post-quantum readiness, and AI-assisted engineering.
I build tools that solve security and infrastructure problems I run into operationally: BGP route monitoring with leak & RPKI anomaly detection, certificate-lifecycle auditing against the CA/Browser Forum schedule, post-quantum readiness auditing of public TLS endpoints, and encrypted keystore tooling. I care about tests, reproducible setup, honest limitations, and keeping AI-assisted development under review.
- Network security — BGP telemetry, route leaks, RPKI, AS-path analysis
- Cryptography & post-quantum readiness — hybrid ML-KEM/X25519 vaults, PQC TLS auditing
- Automation — network-configuration validation pipelines, CI-enforced security gates, AI agents in ops
- Certificate lifecycle — cert chain scanning, 398/200/100/47-day schedule impact
- AI-assisted engineering — agents with tests, security review, and human verification
- BGP_Monitor — live BGP route monitoring with route-leak and RPKI anomaly detectors
- 47certificates — impact auditor for short-lived TLS certificates (CA/B lifetime schedule)
- pqc-domain-auditor — passive + active post-quantum TLS readiness auditing for public domains
- QuantumVault-Desktop · Quantum-Vault · Quantum-Vault-iOS — hybrid post-quantum encrypted vault family
- ConfigLens — network device configuration auditing with a rule engine
Private repos hold older experiments; public work here is the maintained set.
- GitHub: @bamit99