I work in Berlin as a principal engineer, focused on application security and on making agentic engineering more secure and efficient.

Building #

Most of my time goes into the Agentic Identity Broker: delegation and consent infrastructure, so that an agent can act for a person without holding that person’s credentials. The retrospective covers what 10 months of building it with coding agents taught me.

Writing #

I am turning the knowledge base into a field guide: short, citable answers with the evidence behind them, starting with password reuse and the new agent identity area.

Speaking #

Talk and lecture material lives on the speaking page. If you organize an event on application security, identity or agents, the about page has a short bio.

This page follows the now page idea. Last updated 13 October 2026.