Oluwatobi Mustapha

I'm building Identrail, an open-source machine identity security platform that maps trust paths across AWS, GitHub/OIDC, and Kubernetes. It turns repository exposure and authorization gaps into evidence-backed findings with owners, severity, confidence, and remediation steps.

My work focuses on secure-by-default identity controls across AWS and Kubernetes, including least-privilege architecture, detection workflows, and policy-as-code. I've delivered days-to-seconds privileged access, pre-merge IAM flaw detection, and 24 merged upstream security fixes across identity and cloud security projects.

As a freelance AI Security Engineer with Microsoft CloudSec Network, I build AI-assisted workflows for detection triage and remediation context to improve alert quality and operator response speed. Previously at Prodigy InfoTech, I performed vulnerability assessments and penetration testing, prioritizing remediation by exploitability and business impact.

I also built Boundary for approval-based, time-bound AWS JIT access and IAM Logic Fuzzer for CI-integrated IAM policy assurance before merge.