Skip to content
View dferraes's full-sized avatar
🏠
Working from home
🏠
Working from home

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Pull Sharkx4Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Highlights

  • Pro

Block or report dferraes

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
dferraes/README.md

Hi, I'm David Ferraes 👋

Platform & Cloud Security Engineer with ~20 years across Identity & Access Management (IAM/IGA), cloud security, and infrastructure engineering. I've operated identity platforms at large enterprise scale and built the tooling and automation around them.

Most of my work is under NDA in private repositories, so instead of code dumps I write about how I solve the hard problems 👇

🎯 Focus areas

  • Identity & Access Management — IAM/IGA/PAM, SailPoint, Okta, Microsoft/OpenText Identity Manager, Keycloak/Red Hat SSO, RACF. Protocols end to end: SAML 2.0, OAuth 2.0/OIDC, SCIM 2.0, FIDO2/WebAuthn, Zero Trust (NIST SP 800-207).
  • Cloud security — GCP & AWS Well-Architected reviews, Security Hub/GuardDuty/SCC, least-privilege IAM, compliance alignment (SOC 2, ISO 27001, NIST 800-53/63).
  • Platform & protocol engineering — from-scratch systems in Go/Python, including a multi-tenant mail-protocol gateway and a cross-platform access-auditing tool with a dozen identity-source connectors.
  • Infrastructure as code — Terraform & Ansible at fleet scale, observability (Prometheus/Grafana/Loki), hardened container deployments.

📜 Certifications

Google Cloud Professional Cloud Architect · Google Cloud Associate Cloud Engineer · AWS Security – Specialty · HashiCorp Terraform Associate → credly.com/users/dferraes

✍️ Engineering write-ups

I document the hard problems I solve in engineering-notes — deep dives on identity, protocols, and platform security, no proprietary code.

🧰 Stack

Go · Python · Terraform · Ansible · GCP · AWS · Kubernetes · PostgreSQL · Prometheus/Grafana/Loki · IAM platforms (Okta, SailPoint, Keycloak)

📫 david@ferraes.mx · LinkedIn · Credly

Popular repositories Loading

  1. nagstamon nagstamon Public

    Forked from HenriWahl/Nagstamon

    Nagios status monitor for your desktop, AI improved version.

    Python

  2. plugins plugins Public

    Forked from opnsense/plugins

    OPNsense plugin collection

    PHP

  3. Openprovider-WHMCS-domains Openprovider-WHMCS-domains Public

    Forked from openprovider/Openprovider-WHMCS-domains

    Openprovider WHMCS Domain Module

    PHP

  4. dferraes dferraes Public

    Profile

  5. engineering-notes engineering-notes Public

    Engineering write-ups: identity, protocols, and platform security.

  6. icinga-pushover-notifications icinga-pushover-notifications Public

    Send Icinga 2 host and service alerts to Pushover, using only the Python standard library

    Python