I build security software in Python, C++ and TypeScript that ships to production. I care about clean design, algorithms, and systems that hold up under real load.

The same PKI / TLS expertise runs through everything I do — from FIDO2 and X.509 in the product I work on to the open-source tooling I build around certificate inspection, monitoring and the TLS lifecycle.

• 📍 Based in Napoli, Italy
• 🏢 Software Engineer at Namirial since 2022 — authentication & PKI
• 🗣️ Italian (native) · English (professional)
• 🌍 LinkedIn · ✉️ michele.angrisano@gmail.com

Namirial SafeAccess — a passwordless, phishing-resistant MFA suite for enterprises, built on FIDO2 and PKI, securing access to Windows workstations and web/legacy apps.

• Built core parts of the Python backend and native Node/C++ modules powering passwordless login on enterprise workstations.
• Designed and shipped TypeScript modules for the web/integration layer.
• Work hands-on with PKI, X.509 and the TLS/SSL certificate lifecycle.

Beyond the product, I build enterprise backends in Python / FastAPI — including SOAP integrations and services around remote signing and Certificate Authority (CA) infrastructure.

I build and ship my own tooling — small, focused, production-grade.

certinspect — single-purpose X.509/TLS certificate inspector. Checks expiry, chain of trust, OCSP/CRL revocation, weak crypto and hostname match. Speaks plain text, JSON, CSV, Nagios and Prometheus; batch mode with concurrency and CI-friendly exit codes.

pip install certinspect

certminder — continuous TLS certificate monitor & alerter built on top of certinspect: scheduled checks, state memory, dedup and notifications (console / email / Slack / webhook). Currently monitoring 78 public-healthcare TLS endpoints in production.

pip install certminder

cvewatcher — self-hosted FastAPI service that matches your software inventory against the NIST NVD: precise CPE lookups, automatic CPE resolution and keyword fallback, severity/time triage, background monitoring and a no-build web dashboard.

docker pull micheleangrisano/cvewatcher

jpick — tiny jq-like JSON tool written in C++20: a hand-written lexer and recursive-descent parser over a std::variant data model. Query with object keys, array indices, iteration ([]) and the pipe operator (|); build strings with interpolation ("\(.name)"); compact, pretty or raw (-r) output; reads from stdin or a file.

brew install mangrisano/jpick/jpick

• Languages: Python · C++ · TypeScript · Node.js
• Backend: FastAPI · Django · django-ninja-aio-crud · SOAP · REST · microservices
• Infra & data: Docker · Linux · PostgreSQL · Redis
• Domain: PKI · X.509 · ASN.1 · TLS/SSL · client-cert auth · PKCS#12 · JOSE/JWT · FIDO2 · WebAuthn · remote signing · CA

On the open-source side, I keep building and maintaining my own certificate-lifecycle tooling — TLS/PKI inspection, monitoring and revocation — plus small focused utilities that scratch my own itch.

If my open-source tooling saves you time, you can support its continued development through GitHub Sponsors.

Happy to talk about PKI, security tooling and backend systems — reach out on LinkedIn or by email.