Simo Sorce
Distinguished Engineer at Red Hat
New York, New York, United States
Summary
🤩
RockstarSimo Sorce is a Distinguished Engineer and longtime open-source maintainer with 25 years of experience leading cryptography, identity management, and security engineering at Red Hat and across major projects like FreeIPA, SSSD, OpenSSL and OpenShift. He combines deep systems and networking expertise with practical crypto engineering—contributing KDFs and TLS/KRB5 improvements to OpenSSL and pyca/cryptography and hardening authentication in krb5, cyrus-sasl and tlsfuzzer. As a founder of multiple foundational projects (FreeIPA, SSSD, GSS-Proxy) and recent initiator of pkcs11-provider and Kryoptic, he blends product-grade architecture with hands-on backend development. Based in New York, he is equally comfortable debugging LDAP/TCP timeouts and designing cross-platform Windows–Linux integration, a seldom-highlighted strength that roots his security work in real operational constraints.
25 years of coding experience
21 years of employment as a software developer
Italian, Finnish, English
Github Skills (59)
rbac10
code-optimization10
ldap10
kubernetes10
encrypt10
authorizations10
tls1210
python10
kerberos10
memory-management10
user-authentication10
test-framework10
authentication10
sssd10
json-web-signature10
Programming languages (20)
Github contributions (5)
latchset/jwcrypto
Mar 2015 - Oct 2022
Implements JWK,JWS,JWE specifications using python-cryptography
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:24 releases, 37 reviews, 232 commits in 7 years 8 months
Contributions summary:Simo primarily contributed to the implementation of the JSON Web Signature (JWS) and JSON Web Encryption (JWE) standards within the project. Their contributions included the addition of core functionalities for signing and verifying JWS tokens, as well as encrypting and decrypting JWE tokens. Furthermore, the user improved the handling of potential security vulnerabilities in RSA algorithms, by specifically addressing a Million Messages Attack (MMA) vulnerability.
cryptographypython-cryptographypythonsignjose
freeipa/freeipa
Jun 2007 - Sep 2019
Mirror of FreeIPA, an integrated security information management solution
Role in this project:Back-end Developer
Back-end DeveloperContributions:2 reviews, 853 commits, 30 PRs in 12 years 4 months
Contributions summary:Simo implemented new functionality and addressed reported issues by introducing a new ipa-uuid plugin used to generate unique identifiers for user entries. The code changes involved working with LDAP operations to modify and manage user entries, including adding a special entry for anonymous users. This involved modifying code in daemons, ipa-client, and ipa-server directories, indicating their focus on backend development within the FreeIPA project.
policyactive-directory-integrationpampythonfreeipa
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.