I build security software in Python, C++ and TypeScript that ships to production. I care about clean design, algorithms, and systems that hold up under real load.
- 📍 Based in Napoli, Italy
- 🏢 Software Engineer at Bit4id/Namirial — authentication & PKI
- 🗣️ Italian (native) · English (professional)
- 🌍 LinkedIn · ✉️ michele.angrisano@gmail.com
Namirial SafeAccess — a passwordless, phishing-resistant MFA suite for enterprises, built on FIDO2 and PKI, securing access to Windows workstations and web/legacy apps.
- Built core parts of the Python backend and native Node/C++ modules powering passwordless login on enterprise workstations.
- Designed and shipped TypeScript modules for the web/integration layer.
- Work hands-on with PKI, X.509 and the TLS/SSL certificate lifecycle.
I build and ship my own tooling — small, focused, production-grade.
certinspect — single-purpose X.509/TLS certificate inspector. Checks expiry, chain of trust, OCSP/CRL revocation, weak crypto and hostname match. Speaks plain text, JSON, CSV, Nagios and Prometheus; batch mode with concurrency and CI-friendly exit codes.
pip install certinspect
certminder — continuous TLS certificate monitor & alerter built on top of certinspect: scheduled checks, state memory, dedup and notifications (console / email / Slack / webhook). Currently monitoring 63 public-healthcare TLS endpoints in production.
pip install certminder
cvewatcher — self-hosted FastAPI service that matches your software inventory against the NIST NVD: precise CPE lookups, automatic CPE resolution and keyword fallback, severity/time triage, background monitoring and a no-build web dashboard.
docker pull micheleangrisano/cvewatcher
- Languages: Python · C++ · TypeScript · Node.js
- Infra & data: Docker · Linux · PostgreSQL
- Domain: PKI · X.509 · TLS/SSL · FIDO2
Deep into certificate-lifecycle automation — OCSP/CRL revocation, TLS monitoring, and CI-friendly PKI tooling.
💬 Happy to talk about PKI, security tooling and backend systems — feel free to reach out.