Cybersecurity engineer and engineering leader specializing in Identity & Access Management (IAM), Privileged Access Management (PAM), Zero Trust, and secure platform engineering.

I design and build security-focused systems, automation, and developer tooling using Python, Go, and modern cloud-native technologies.

My work sits at the intersection of identity, cybersecurity, and software engineering, with a focus on building secure systems that are practical to operate and maintain.

• Identity & Access Management (IAM)
• Privileged Access Management (PAM)
• Zero Trust Architecture
• OAuth 2.x, OpenID Connect, SAML
• FIDO2, WebAuthn, and passkeys
• Identity governance and access controls
• Security architecture and DevSecOps
• Authentication and authorization systems

I remain hands-on with software development, infrastructure, automation, and developer tooling.

Languages

Python · Go · PowerShell · C#/.NET · JavaScript/TypeScript

Platforms & Infrastructure

Docker · AWS · Azure · Infrastructure as Code · PostgreSQL · GitHub Actions · CI/CD

Application Development

FastAPI · Django · Flask · Gin · ASP.NET · REST APIs · CLI tooling

Former Editor of the Solid-OIDC specification, defining authentication and identity behavior for the decentralized Solid ecosystem.

The work applies OpenID Connect and related web identity standards to distributed systems where identity, applications, and data may be controlled by separate parties.

Published in-depth Python tutorials and technical guides with Real Python, translating complex engineering topics into practical material for developers.

I build and maintain open-source tools focused on developer productivity, automation, and practical software engineering.

Several of my projects have been distributed through PyPI, the Visual Studio Marketplace, and GitHub.

Python command-line tool for detecting broken links in web projects.

• Published on PyPI
• Designed for automation and CI workflows
• Focused on fast, repeatable link validation

VS Code extension providing Jinja2 and Django template snippets.

• More than 125,000 downloads
• Available through the Visual Studio Marketplace

Python tooling for importing chess game data from Chess.com and Lichess into SQLite databases.

• Published on PyPI
• Demonstrates CLI design, external API integration, and structured data processing

I prefer engineering practices that optimize for long-term security, maintainability, and operational clarity.

• Treat security and reliability as design constraints rather than post-release concerns.
• Require review and automated CI validation before changes reach the primary branch.
• Prefer small, well-understood dependency footprints and justify new dependencies.
• Keep documentation synchronized with implementation.
• Use explicit versioning and document breaking changes.
• Favor short-lived branches and pull-request-driven development.

I'm particularly interested in problems involving:

• Identity security and privileged access
• Authentication and authorization architecture
• Zero Trust systems
• Security automation
• Developer security tooling
• AI-assisted engineering and security workflows
• Python and Go infrastructure tooling
• Secure software delivery and DevSecOps

Website: rickywhite.net

LinkedIn: linkedin.com/in/rickywhite

Technical Writing: Real Python

PyPI: pypi.org/user/endlesstrax

Building secure systems at the intersection of identity, security, and software engineering.