IamBishalIamBishal

Technology Stack

Security Stack

Security, identity, and access management tools and practices. The frameworks and tools I use to build, experiment, and ship real solutions.

  • BuildReal solutions
  • ExperimentContinuously
  • StayUp to date
  • ShareWhat I learn
  • Identity
  • SSO
  • Authorization
  • Secrets
  • Scanning
  • OWASP
  • Zero Trust

Security

Security, identity, and access management tools and practices.

Security built into the architecture — identity, access and secrets handled properly from the start.

Overview

I design identity and access management with OAuth2, OpenID Connect and Keycloak, and secure APIs with fine-grained authorization.

Secrets management, dependency scanning and OWASP practices are part of every delivery pipeline.

Key Focus Areas

  • Identity and SSO (OAuth2, OIDC, SAML)
  • RBAC and ABAC authorization
  • API security
  • Secrets management
  • Dependency and code scanning
  • OWASP Top 10 mitigation

Tools & Technologies

A selection of the tools and platforms I work with.

  • Spring Security
  • OAuth2 / OIDC
  • Keycloak
  • JWT
  • Auth0
  • Vault
  • OWASP
  • Snyk
  • SonarQube
  • Let's Encrypt

My Experience Level

Not just tools — real hands-on experience.

  • Spring Security90%
  • OAuth2 / OIDC90%
  • Keycloak85%
  • Vault60%
  • Security Scanning70%

Real-World Applications

How I use these technologies in practice.

  • Single sign-on across applications
  • Multi-tenant access control
  • Secure APIs for partners
  • Compliance-ready audit trails

Learning Resources

Articles and tutorials I've written on these topics.

New articles and tutorials on this topic are on the way.

Let's Build Something Amazing

Have a project in mind or want to collaborate? I'm always open to discussing new opportunities.

Let's Talk