Paul Greenberg is a full-stack software engineer in New York with 11 years of experience building cloud-native business applications that combine applied data science, machine learning, analytics, and generative AI. He excels at rapidly turning ideas into production-ready systems while thriving in autonomous, high-trust environments. A long-time open-source maintainer and contributor, Paul has made impactful back-end and security contributions to notable projects like CoreDNS and the Google capirca ACL generator, and has helped harden authentication and authorization in Caddy through the caddy-security plugin. He brings a creative, dreamer’s perspective to pragmatic engineering problems, often resurfacing non-obvious improvements in protocol handling, rewrite logic, and security policy. Outside core engineering he tinkers with Blender and generative AI for 3D environments, bridging infrastructure-grade systems thinking with creative exploration.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
Role in this project:
Backend & Security Engineer
Contributions:35 releases, 1 review, 119 commits in 1 year
Contributions summary:Paul's commits primarily involve adding, modifying, and testing code related to authentication, authorization, and security aspects of the Caddy web server plugin. They contributed significantly to the implementation of authorization policies, including ACL rules and various authentication mechanisms. The user also focused on incorporating and testing security-related configurations and integrating various identity providers, showing a strong focus on security and backend functionality.
Contributions:3 releases, 1 review, 14 commits in 2 months
Contributions summary:Paul primarily contributed to the Palo Alto firewall generator, a core component of the ACL generation system. Their work involved enhancing the generator to support mixed address families, ICMP/ICMPv6 types, rule descriptions, and exclude source/destination options. Additionally, they made modifications to truncate rule descriptions, address minor issues with the XML output, and integrate support for logging keywords, demonstrating a deep understanding of the system's architecture and configuration intricacies. The user also added support for the GRE protocol.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.