Keycloak Remote Enrichment Mapper
Adds authorization claims to OIDC tokens by enriching user data from an external source.
View README →Senior DevOps / Cloud Platform Engineer
As you've probably discovered by now I'm a Senior DevOps / Cloud Platform Engineer, but obviously that doesn't say a lot. I've always loved to "play" with eletronic stuff and personal computers and I really enjoy building my own stuff. This attitude led me to get a diploma in ICT and a bachelor degree in computer science. During my career I met a lot of people sharing my passion for ICT and I was happy to discover that even if we had a common interest we still had unique backgrounds and ideas, and this, as far as I'm concerned, represents the beauty of our job.
For over five years I've been operating distributed, containerized infrastructure for national and international research and education networks. At Consortium GARR I run a multi-region Kubernetes platform, automate provisioning and configuration with Terraform and Ansible, and own the observability stack, metrics, logging and tracing, for high-availability services relied on by the wider research community. I started out building research prototypes into production systems, including a cloud-based early-warning platform that's still operational today, before growing into infrastructure and site reliability work, and I currently collaborate internationally through GEANT on security. More recently I've extended that platform ownership into AI infrastructure, contributing to a Kubernetes-based LLM inference platform (vLLM, llm-d) with Keycloak-backed, per-user access control and observability, serving open-weight models to internal tools and coding agents.
I think that's enough for now. If you want to know more you can scroll further to check some of the projects I developed or contributed to.
A mix of things I've built, broken and fixed again, plus a few open source contributions along the way. Click a card to read the README.
Adds authorization claims to OIDC tokens by enriching user data from an external source.
View README →Home Assistant component to arm/disarm EZVIZ camera motion detection per camera.
View README →Parses bank statement Excel files, classifies transactions and syncs them to Firefly III.
View README →CLI client for managing TLS certificates on the Harica platform, maintained within Consortium GARR.
View README →Android app that syncs time and temperature with OpenAuto Pro on a Raspberry Pi.
View README →Backup multiple PostgreSQL databases locally with scheduled, rotated backups.
View README →Telegram bot that searches subito.it listings; contributed the Docker image build workflow.
View README →Snap it. Track it. Save it.