Oluwatobi Mustapha Oluwatobi-Mustapha

Hi, I'm Oluwatobi Mustapha

Cloud IAM Security Engineer | Non-Human Identity | OSS Contributor

I build and secure IAM systems across cloud and distributed environments, with a focus on least-privilege architecture for both human and machine identities.

Member of the AWS Community Builders and The Identity Underground.

Open Source Contributions

I contribute security fixes to enterprise identity infrastructure and cloud governance projects.

Keycloak Improved fine-grained admin permissions by closing policy-evaluation gaps around protected group memberships, and contributed fixes across OIDC and OID4VCI flows.
Home Assistant Core Improved Google Sheets authentication reliability by fixing OAuth error handling so invalid credentials trigger secure re-authentication while transient provider failures retry safely.
Authentik Fixed an OAuth2 credential-decoding flaw that broke authentication when secrets contained special characters, restoring reliable sign-in for automated workflows.
Better Auth Delivered security patches that closed OTP bypass paths and tightened cryptographic validation to reduce session takeover risk.
Cloud Custodian Fixed an AWS IAM monitoring blind spot so legitimate AccessDenied events surface correctly during multi-account compliance and security audits.

My full open-source contribution log

Projects

Boundary - AWS JIT Access Broker A just-in-time access vending engine that reduces provisioning time from days to seconds while generating artifacts needed for SOC 2 audit evidence.
Identrail - Machine Identity Security A machine identity security platform for cloud and Kubernetes environments focused on discovering workload identities, analyzing risky access paths, and reducing identity exposure.
IAM Logic Fuzzer A security testing tool that surfaces hidden privilege escalation paths in IAM policies and helps validate controls against CIS AWS benchmarks.