An extra security layer between the Windows login and the Microsoft cloud service – sign-in confirmation through a second, independent channel, secured by an automated test suite.

Architected and automated the enterprise deployment of a desktop application for regulated corporate environments (SCCM, Intune, GPO).

E2E-encrypted chat for families and professionals – Matrix/Synapse based, own homeserver setup, tiered subscription model.

My path to CBBH certification: 100+ hours of learning offensive security to not just build backends, but defend them.

CTF-style training box for secure embedded development: 10 IoT challenges on ESP32, PoV scripts, Docker lab, CI skeleton.

Fail-safe A/B updates with Ed25519 signatures, anti-rollback, and verify-before-commit – CI-integrated for ESP32 & STM32.

KBV-compliant security documentation, telematics infrastructure component management, and ongoing patch governance for a dental practice connected to Germany's health IT network.