Oluwatobi Mustapha Oluwatobi-Mustapha

Hi, I'm Oluwatobi.

Security Engineer | Non-Human Identity | OSS Contributor

I build and secure cloud and distributed systems, with a focus on identity security, least-privilege architecture, threat detection, and incident response.

Member of the AWS Community Builders and The Identity Underground.

Projects

Identrail - Machine Identity Security A machine identity security platform for AWS, GitHub/OIDC, and Kubernetes, built to find risky trust paths, repository exposure, and authorization gaps before they become incidents.
Boundary - AWS JIT Access Broker A just-in-time access vending engine that reduces provisioning time from days to seconds while generating artifacts needed for SOC 2 audit evidence.
IAM Logic Fuzzer A security testing tool that surfaces hidden privilege escalation paths in IAM policies and helps validate controls against CIS AWS benchmarks.

Open Source Contributions

I contribute security fixes to enterprise infrastructure and cloud governance projects. My full open-source contribution log

Keycloak Improved fine-grained admin permissions by closing policy-evaluation gaps around protected group memberships, and contributed fixes across OIDC and OID4VCI flows.
Home Assistant Core Improved Google Sheets authentication reliability by fixing OAuth error handling so invalid credentials trigger secure re-authentication while transient provider failures retry safely.
Authentik Fixed an OAuth2 credential-decoding flaw that broke authentication when secrets contained special characters, restoring reliable sign-in for automated workflows.
Better Auth Delivered security patches that closed OTP bypass paths and tightened cryptographic validation to reduce session takeover risk.
Zitadel Fixed native gRPC status-error propagation across service boundaries.
Cloud Custodian Fixed an AWS IAM monitoring blind spot so legitimate AccessDenied events surface correctly during multi-account compliance and security audits.