Building and analyzing systems that must remain secure, reliable, and measurable at scale.
Infrastructure and security engineering practitioner. Staff-level scope across cloud, platform, and detection systems.
Akíntóyè O.
What I've built
Building a multi-cloud security posture analyzer that ingests IAM policies, security group rules, and resource configurations to identify misconfigurations, excessive permissions, and trust boundary violations.
Designed and implemented an identity-aware gateway that sits in front of internal services, enforcing device posture validation, step-up authentication, and session risk scoring before granting access.
Infrastructure experiments in progress
Built a reproducible Docker environment for homelab services with Compose-based stacks, health checks, resource limits, and a documented migration path from manually managed containers. Evaluated when Compose suffices versus needing a full orchestrator.
Deployed Tailscale as the primary remote access layer for homelab infrastructure. Configured subnet routing, ACL policies, exit nodes, and MagicDNS integration to replace port forwarding and manual WireGuard peer management.
How I model system failure and trust
Modern identity systems create chains of trust that, when compromised at any point, enable cascading access escalation across organizational boundaries.
Trust boundaries in complex systems do not fail catastrophically - they erode gradually through accumulated exceptions, implicit dependencies, and architectural drift until the boundary exists only in documentation.
What I'm observing in production systems
SaaS proliferation creates credential reuse patterns that bypass organizational security controls entirely.
Push-based MFA creates a novel social engineering surface that exploits human tolerance for system interruptions.
Cloud IAM governance is failing because organizations apply legacy governance frameworks to fundamentally different identity architectures.
Formal analysis with stated methodology
Structural analysis of cloud service provider architectures combined with empirical observation of trust boundary failures in multi-tenant environments.
Infrastructure, security engineering, and observability writing. Periodic, high-signal.