Senior Systems Architect focused on secure infrastructure, DevSecOps, cybersecurity and AI-assisted systems engineering. Over 20 years of experience d
Aktualisiert am 16.07.2026
Profil
Freiberufler / Selbstständiger
Remote-Arbeit
Verfügbar ab: 14.07.2026
Verfügbar zu: 100%
davon vor Ort: 100%
Linux DevSecOps Kubernetes
Systems Architecture, DevSecOps, Kubernetes, Linux, Automation, NIS2, AI Systems

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

1 year 7 months
2025-01 - now

NIS2 Compliance Assessment for AgID

Senior Security Consultant / Technical Lead NIS2 and Legislative Decree 138/2024 compliance FNCDP framework regulatory gap analysis ...
Senior Security Consultant / Technical Lead
Leading a formal NIS2 Directive compliance assessment for AgID (Italy?s Digital Agency), qualified as an important entity pursuant to Legislative Decree 138/2024. The engagement covers seven institutional platforms hosted on AWS infrastructure in eu-south-1 (SPID, DatiGovIt, Accessibilità, DCD, Portale Accessibilità, DevOps/CI-CD, ReteDigitale). The work is structured according to the National Framework for Cybersecurity and Data Protection (FNCDP 2025, v2.1.0) and ACN Determination 379907/2025, with full coverage of the 37 measures in Annex 1. Responsible for authoring the formal assessment deliverables (Assessment Report, Gap Analysis, Immediate Compliance document, Evolutionary Roadmap), with regulatory traceability to the framework?s 17 categories and 37 subcategories, and mappings to NIST CSF 2.0, ISO/IEC 27001:2022, and the 13 articles of Legislative Decree 138/2024. Definition of cybersecurity KPIs/KRIs (MTTD/MTTR, patching coverage, MFA adoption rate, CSIRT notifications, DR test outcomes), security operations governance, and logging/monitoring architecture.
AWS eu-south-1 (CloudTrail GuardDuty WAF KMS AWS Backup with vault lock Inspector IAM Identity Center Elastic Disaster Recovery) SQLite for structured requirement tracking Python/XML documentation automation on DOCX templates.
NIS2 and Legislative Decree 138/2024 compliance FNCDP framework regulatory gap analysis formal documentation authoring for AgID/ACN auditors.
1 year 7 months
2025-01 - now

Puglia Regional Cloud Platform Configuration and Maintenance

Cloud & Kubernetes Engineer Kubernetes Docker VMware Cloud Director ...
Cloud & Kubernetes Engineer
Technical design of the private cloud infrastructure supporting regional application services. Implementation of the infrastructure on VMware Cloud Director, including the management of virtual resources (VDC, VMs, networks). Design and implementation of multi-node, multi environment Kubernetes architectures (test, staging, production). Installation, configuration, and operational management of Kubernetes clusters across test and production environments: control plane configuration, worker nodes, role and environment segregation. Configuration of Kubernetes and infrastructure networking, including environment segmentation, DMZ networks, and internal networks. Configuration and exposure of application services via Ingress Controller, management of containerised application services, and definition of access and external-exposure rules. Support for the definition of infrastructure and application security requirements, systems and cluster hardening, vulnerability analysis, and remediation activities. Ongoing operational support for production environments. Authoring of the cloud infrastructure architecture and application deployment document, and maintenance of the supportingtechnical  documentation.
Kubernetes Docker VMware Cloud Director Linux Networking CI/CD DevSecOps Security Hardening
1 year 7 months
2025-01 - now

Independent Scientific Research

design of N-of-1 longitudinal studies integration of multimodal data pipelines RAG systems over clinical knowledge bases ...
Over the last two years, an independent applied research track has developed in parallel with my professional activity, articulated in three distinct but methodologically coherent lines.


Line A ? Adaptive artificial intelligence applied to personal wellness.

Longitudinal N-of-1 applied study, conducted for over one year, on the integration of multimodal data for clinical-functional decision support. The activity involved daily acquisition of data from biometric sensors, haematochemical and urine tests, wearable devices, structured dietary logging, phenotypic imaging, and validated subjective signals. The methodology led to the development of a set of adaptive frameworks for monitoring distinct physiological domains (metabolic, renal, electrolytic, autonomic, psychoendocrine) and to the formalisation of the methodological findings in patent application IT (see the Patent Applications section). The study produced an original clinical observation regarding the differentiation between athletic-origin pseudo-pathological forms and genuine nephropathies through the integration of multimodal signals. The patent application has been submitted to international examination and technically defended with a new set of claims


Line B ? Deterministic verification of AI-generated software artefacts. 

Methodological research on the asymmetry between the near-zero marginal cost of code generation via large language models and the persistently high cost of verification. The proposed approach treats every AI-generated artefact as a falsifiable hypothesis subjected to a structured multi-stage validation pipeline, with mathematical formalisation of the pipeline as a composition of deterministic functions, explicit gate semantics, integration of static analysis, supply-chain verification, knownvulnerability evaluation, and cryptographic attestation of the verification run. The activity was accompanied by the development of in-house working tools for static analysis and CI/CD orchestration, and culminated in a working paper (March 2026, see the Publications section).


Line C ? Data governance and local inference architectures for artificial intelligence. 

Research and outreach on architectural approaches to data governance in AI, centred on the principle that the choice of where a model is executed is itself a data governance decision. The activity explores local inference as a concrete alternative to third-party commercial cloud services for institutional, corporate, and sensitive-data-processing contexts, including analysis of the risks of model memorisation and information exfiltration. An in-house NIS2 compliance audit methodology was developed, based on a structured questionnaire organised by regulatory domain. The activity produced educational writing on LinkedIn with significant engagement from an international technical audience.

design of N-of-1 longitudinal studies integration of multimodal data pipelines RAG systems over clinical knowledge bases static code analysis SBOM generation and CVE evaluation cryptographic attestation local inference architectures and compliance audit methodologies.
3 years 7 months
2023-01 - now

Management of Linux RedHat and Oracle Linux

Senior Systems Engineer for Various Companies Linux/Windows integration advanced debugging automation ...
Senior Systems Engineer for Various Companies
Management of Linux RedHat and Oracle Linux infrastructures, with implementation of incident response processes. Porting of KSH/HP-UX scripts to Linux. Advanced debugging and installation of GPT systems on Tesla GPUs. Development of sophisticated Airflow DAGs in Python, creation of Python software for concurrent-access management, creation of custom Docker images, orchestration of Kubernetes pods via YAML. Automation management via Docker and AWX. Participation in a project to build an AI-driven DevOps system, with broad-spectrum activity centred on OpenShift and Kubernetes, writing Dockerfiles, Kubernetes YAML, and everything else required to bring the code into operation.
Linux RedHat Oracle Linux AWX Docker KSH HP-UX Apache Samba Tesla GPUs Airflow Kubernetes.
Linux/Windows integration advanced debugging automation Airflow DAG authoring concurrent-access management custom Docker image creation Kubernetes pod management via YAML incident process management
3 years 7 months
2023-01 - now

Supercomputing Hardware Development

Linux Tesla GPUs CUDA ...
Design and construction of a supercomputing system with 6 Tesla GPUs on a single node. Management of the entire process from initial design to prototyping, including CAD design and 3D printing for cooling. Intensive testing phase to ensure system stability and performance optimisation.
Linux Tesla GPUs CUDA 3D CAD Python 3D printing GPT Supercomputing
1 month
2024-02 - 2024-02

Design and management

Kubernetes Engineer Kubernetes Docker Dockerfile ...
Kubernetes Engineer
Design and management of a complete Kubernetes environment from scratch for microservices. Implementation of a Container-as-a-Service (CaaS) offering on on-premise servers, optimising resources and costs through auto-scaling mechanisms based on the integration of an AI engine for workload categorisation.
Kubernetes Docker Dockerfile Ansible Networking PHP/Symfony/Doctrine Nginx.
1 year 4 months
2022-09 - 2023-12

Management of the Elite portal system

Systems Engineer Linux AWS HAProxy ...
Systems Engineer
Management of the Elite portal system, with ordinary and extraordinary maintenance, debugging, and releases in staging and production environments. Complete reverse engineering of the platform, reconstruction of all Docker images, and migration to AWS, optimising the infrastructure for scalability and resilience. Active participation in the Change Advisory Board for change management, and continuous support to the development team and ticket handling.
Linux AWS HAProxy Varnish Nginx MySQL PHP-FPM Docker Redis Elasticsearch AWK Shell scripting Jira GitLab Jenkins.
5 months
2023-03 - 2023-07

DevSecOps activity for TIM?s ?Attuatore Unico Fonia?

DevSecOps activity for TIM?s ?Attuatore Unico Fonia? (Unified Voice Actuator) system. Creation of approximately 67 Ansible playbooks for the hardening of critical systems, ensuring compliance with security standards.
Linux, Ansible, Bash, AWK, Expect.

Aus- und Weiterbildung

Aus- und Weiterbildung

Certifications

  • DCAP ? Digium Certified Asterisk Professional
  • ACA ? AudioCodes SBC: Essentials & Configuration


Education

1995 - 1999

Diploma di Geometra (Italian Surveying Diploma, secondary-school level) ? Istituto Tecnico per Geometri,

Vibo Valentia, grade 90/100.

Kompetenzen

Kompetenzen

Top-Skills

Linux DevSecOps Kubernetes Systems Architecture, DevSecOps, Kubernetes, Linux, Automation, NIS2, AI Systems

Produkte / Standards / Erfahrungen / Methoden

Profile

I have been active in the IT sector for over 20 years, working with state institutions and strategic organisations on complex projects of national and European security relevance. My career has focused on security, technological innovation, and the design of advanced systems that address the critical needs of institutions and strategic infrastructures. Among my most significant projects is the development of a distributed communication and control system for the Hellenic Coast Guard, designed to manage and modernise communication with their obsolete radios through Digital Signal Processing (DSP) technologies. This system, based on Linux and Asterisk, made it possible to integrate modern PBX systems, SCADA networks, and naval communication systems, guaranteeing operational continuity and communication security in highly critical contexts. I also developed innovative components, such as digital modulators and demodulators, written entirely in C/C++. In parallel, I have worked on supercomputing systems for scientific computing and cybersecurity, contributing to projects of strategic relevance for Italy and Europe. I have implemented advanced legally-binding digital signature solutions and designed highly secure infrastructures, including hybrid cloud architectures and systems supporting the operational resilience of critical infrastructures. The applied research and development activity has resulted in the filing of six patent applications in different technological domains (digital signature, secure document management, anti-DDoS, encrypted exchange systems, and artificial intelligence applied to personal wellness), and in three research lines active in parallel throughout 2025?2026: adaptive artificial intelligence applied to personal wellness deterministic verification of AI-generated software artefacts, formalised in a 2026 working paper; data governance and local inference architectures for AI, with methodological reflection on compliance with the European cybersecurity regulatory framework. My technical competencies range from Kubernetes, Docker, and Ansible to languages such as Python and C/C++ ? tools I have used to build innovative, secure, and scalable systems. My mission is to contribute to strengthening the technological capabilities of institutions, ensuring security, reliability, and innovation for the future.


Selected Projects

  • AgID ? Agenzia per l?Italia Digitale (Italian Digital Agency): Formal compliance assessment against the NIS2 Directive and Legislative Decree 138/2024 on seven institutional platforms hosted on AWS infrastructure (2025 ? present).
  • Regione Puglia (Puglia Regional Government): Configuration and maintenance of the Cloud and Kubernetes platform supporting regional application services (2025 ? present).
  • Hellenic Coast Guard: Development of a distributed system for the modernisation of radio communications using DSP technologies, ensuring operational continuity and security in critical contexts.
  • Italian National Civil Protection Department: Implementation of an advanced monitoring system for IT infrastructures, including those for nationwide emergency management.
  • Italian Judiciary System: Development of the STS Magistratura platform, for call tracking on Telecom Sparkle.
  • Banca d?Italia (Bank of Italy): Development of centralised systems for the security and management of the voice network, including process automation via custom Puppet modules.
  • TIM: Hardening and security-in-depth of central infrastructures using over 60 Ansible playbooks.
  • Supercomputing and AI: Design of innovative supercomputing systems, optimised for intensive workloads and advanced AI applications.
  • Patent research (Phoenix ICT and independent activity): Six patent applications filed covering digital signature, secure digital document management, anti-DDoS systems, client-to-client encrypted exchange, and artificial intelligence applied to personal wellness.
  • Independent scientific research (2025?2026): Three research lines active in parallel ? (A) adaptive artificial intelligence applied to personal wellness, with an N-of-1 longitudinal study of over one year underlying Italian patent application (B) deterministic verification of AI-generated software artefacts, formalised in a working paper (March 2026); (C) data governance and local inference architectures for AI, with an in-house NIS2 compliance audit methodology.


Technical Skills

  • Frameworks and libraries: Puppet, Ansible, Nagios, Selenium, TensorFlow, BERT, LSTM, OpenPGP.js, Symfony, Doctrine.
  • Operating systems and virtualisation: Linux (RedHat, Oracle Linux, CentOS, Debian, Ubuntu, Gentoo), OpenBSD,
  • VMware Cloud Director, KVM/Libvirt, VMware, Docker, Kubernetes, OpenShift.
  • Automation and DevOps: Puppet, Ansible, GitLab CI/CD, Jenkins, AWX, Airflow, HashiCorp Vault.
  • Cloud: AWS (CloudTrail, GuardDuty, WAF, KMS, AWS Backup, Inspector, IAM Identity Center, Elastic Disaster Recovery), VMware Cloud Director.
  • Cybersecurity: NIS2 / Legislative Decree 138/2024 compliance, FNCDP 2025, ISO/IEC 27001:2022, NIST CSF 2.0, ISO 27001, ISO 25051, PCI DSS / CIS Benchmark, HSM, digital signature (CAdES, PAdES, XAdES), SCEP protocol, IPsec, systems hardening, vulnerability management, GDPR, HIPAA, MDR, HL7.
  • Monitoring: Nagios, Checkmk, custom systems.
  • Networking: network design, VPN, firewalls (Cisco, pfSense), Linux/Windows AD integration (SSO, Samba, SSH).
  • Databases: PostgreSQL, MySQL, Oracle, Redis, Elasticsearch, SQLite.
  • Artificial intelligence and supercomputing: LLMs (Gemma 2, Vicuna), RAG, embeddings, semantic segmentation with BERT, ML with LSTM, Tesla GPUs, CUDA, design of custom supercomputing systems.
  • Telephony and DSP: Asterisk (DCAP), AGI, IVR, AudioCodes SBC, ISDN, DSP, digital modulation/demodulation.

Programmiersprachen

C/C++
Java
Python
PHP
Bash
KSH
JavaScript
SQL
PL/SQL

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

1 year 7 months
2025-01 - now

NIS2 Compliance Assessment for AgID

Senior Security Consultant / Technical Lead NIS2 and Legislative Decree 138/2024 compliance FNCDP framework regulatory gap analysis ...
Senior Security Consultant / Technical Lead
Leading a formal NIS2 Directive compliance assessment for AgID (Italy?s Digital Agency), qualified as an important entity pursuant to Legislative Decree 138/2024. The engagement covers seven institutional platforms hosted on AWS infrastructure in eu-south-1 (SPID, DatiGovIt, Accessibilità, DCD, Portale Accessibilità, DevOps/CI-CD, ReteDigitale). The work is structured according to the National Framework for Cybersecurity and Data Protection (FNCDP 2025, v2.1.0) and ACN Determination 379907/2025, with full coverage of the 37 measures in Annex 1. Responsible for authoring the formal assessment deliverables (Assessment Report, Gap Analysis, Immediate Compliance document, Evolutionary Roadmap), with regulatory traceability to the framework?s 17 categories and 37 subcategories, and mappings to NIST CSF 2.0, ISO/IEC 27001:2022, and the 13 articles of Legislative Decree 138/2024. Definition of cybersecurity KPIs/KRIs (MTTD/MTTR, patching coverage, MFA adoption rate, CSIRT notifications, DR test outcomes), security operations governance, and logging/monitoring architecture.
AWS eu-south-1 (CloudTrail GuardDuty WAF KMS AWS Backup with vault lock Inspector IAM Identity Center Elastic Disaster Recovery) SQLite for structured requirement tracking Python/XML documentation automation on DOCX templates.
NIS2 and Legislative Decree 138/2024 compliance FNCDP framework regulatory gap analysis formal documentation authoring for AgID/ACN auditors.
1 year 7 months
2025-01 - now

Puglia Regional Cloud Platform Configuration and Maintenance

Cloud & Kubernetes Engineer Kubernetes Docker VMware Cloud Director ...
Cloud & Kubernetes Engineer
Technical design of the private cloud infrastructure supporting regional application services. Implementation of the infrastructure on VMware Cloud Director, including the management of virtual resources (VDC, VMs, networks). Design and implementation of multi-node, multi environment Kubernetes architectures (test, staging, production). Installation, configuration, and operational management of Kubernetes clusters across test and production environments: control plane configuration, worker nodes, role and environment segregation. Configuration of Kubernetes and infrastructure networking, including environment segmentation, DMZ networks, and internal networks. Configuration and exposure of application services via Ingress Controller, management of containerised application services, and definition of access and external-exposure rules. Support for the definition of infrastructure and application security requirements, systems and cluster hardening, vulnerability analysis, and remediation activities. Ongoing operational support for production environments. Authoring of the cloud infrastructure architecture and application deployment document, and maintenance of the supportingtechnical  documentation.
Kubernetes Docker VMware Cloud Director Linux Networking CI/CD DevSecOps Security Hardening
1 year 7 months
2025-01 - now

Independent Scientific Research

design of N-of-1 longitudinal studies integration of multimodal data pipelines RAG systems over clinical knowledge bases ...
Over the last two years, an independent applied research track has developed in parallel with my professional activity, articulated in three distinct but methodologically coherent lines.


Line A ? Adaptive artificial intelligence applied to personal wellness.

Longitudinal N-of-1 applied study, conducted for over one year, on the integration of multimodal data for clinical-functional decision support. The activity involved daily acquisition of data from biometric sensors, haematochemical and urine tests, wearable devices, structured dietary logging, phenotypic imaging, and validated subjective signals. The methodology led to the development of a set of adaptive frameworks for monitoring distinct physiological domains (metabolic, renal, electrolytic, autonomic, psychoendocrine) and to the formalisation of the methodological findings in patent application IT (see the Patent Applications section). The study produced an original clinical observation regarding the differentiation between athletic-origin pseudo-pathological forms and genuine nephropathies through the integration of multimodal signals. The patent application has been submitted to international examination and technically defended with a new set of claims


Line B ? Deterministic verification of AI-generated software artefacts. 

Methodological research on the asymmetry between the near-zero marginal cost of code generation via large language models and the persistently high cost of verification. The proposed approach treats every AI-generated artefact as a falsifiable hypothesis subjected to a structured multi-stage validation pipeline, with mathematical formalisation of the pipeline as a composition of deterministic functions, explicit gate semantics, integration of static analysis, supply-chain verification, knownvulnerability evaluation, and cryptographic attestation of the verification run. The activity was accompanied by the development of in-house working tools for static analysis and CI/CD orchestration, and culminated in a working paper (March 2026, see the Publications section).


Line C ? Data governance and local inference architectures for artificial intelligence. 

Research and outreach on architectural approaches to data governance in AI, centred on the principle that the choice of where a model is executed is itself a data governance decision. The activity explores local inference as a concrete alternative to third-party commercial cloud services for institutional, corporate, and sensitive-data-processing contexts, including analysis of the risks of model memorisation and information exfiltration. An in-house NIS2 compliance audit methodology was developed, based on a structured questionnaire organised by regulatory domain. The activity produced educational writing on LinkedIn with significant engagement from an international technical audience.

design of N-of-1 longitudinal studies integration of multimodal data pipelines RAG systems over clinical knowledge bases static code analysis SBOM generation and CVE evaluation cryptographic attestation local inference architectures and compliance audit methodologies.
3 years 7 months
2023-01 - now

Management of Linux RedHat and Oracle Linux

Senior Systems Engineer for Various Companies Linux/Windows integration advanced debugging automation ...
Senior Systems Engineer for Various Companies
Management of Linux RedHat and Oracle Linux infrastructures, with implementation of incident response processes. Porting of KSH/HP-UX scripts to Linux. Advanced debugging and installation of GPT systems on Tesla GPUs. Development of sophisticated Airflow DAGs in Python, creation of Python software for concurrent-access management, creation of custom Docker images, orchestration of Kubernetes pods via YAML. Automation management via Docker and AWX. Participation in a project to build an AI-driven DevOps system, with broad-spectrum activity centred on OpenShift and Kubernetes, writing Dockerfiles, Kubernetes YAML, and everything else required to bring the code into operation.
Linux RedHat Oracle Linux AWX Docker KSH HP-UX Apache Samba Tesla GPUs Airflow Kubernetes.
Linux/Windows integration advanced debugging automation Airflow DAG authoring concurrent-access management custom Docker image creation Kubernetes pod management via YAML incident process management
3 years 7 months
2023-01 - now

Supercomputing Hardware Development

Linux Tesla GPUs CUDA ...
Design and construction of a supercomputing system with 6 Tesla GPUs on a single node. Management of the entire process from initial design to prototyping, including CAD design and 3D printing for cooling. Intensive testing phase to ensure system stability and performance optimisation.
Linux Tesla GPUs CUDA 3D CAD Python 3D printing GPT Supercomputing
1 month
2024-02 - 2024-02

Design and management

Kubernetes Engineer Kubernetes Docker Dockerfile ...
Kubernetes Engineer
Design and management of a complete Kubernetes environment from scratch for microservices. Implementation of a Container-as-a-Service (CaaS) offering on on-premise servers, optimising resources and costs through auto-scaling mechanisms based on the integration of an AI engine for workload categorisation.
Kubernetes Docker Dockerfile Ansible Networking PHP/Symfony/Doctrine Nginx.
1 year 4 months
2022-09 - 2023-12

Management of the Elite portal system

Systems Engineer Linux AWS HAProxy ...
Systems Engineer
Management of the Elite portal system, with ordinary and extraordinary maintenance, debugging, and releases in staging and production environments. Complete reverse engineering of the platform, reconstruction of all Docker images, and migration to AWS, optimising the infrastructure for scalability and resilience. Active participation in the Change Advisory Board for change management, and continuous support to the development team and ticket handling.
Linux AWS HAProxy Varnish Nginx MySQL PHP-FPM Docker Redis Elasticsearch AWK Shell scripting Jira GitLab Jenkins.
5 months
2023-03 - 2023-07

DevSecOps activity for TIM?s ?Attuatore Unico Fonia?

DevSecOps activity for TIM?s ?Attuatore Unico Fonia? (Unified Voice Actuator) system. Creation of approximately 67 Ansible playbooks for the hardening of critical systems, ensuring compliance with security standards.
Linux, Ansible, Bash, AWK, Expect.

Aus- und Weiterbildung

Aus- und Weiterbildung

Certifications

  • DCAP ? Digium Certified Asterisk Professional
  • ACA ? AudioCodes SBC: Essentials & Configuration


Education

1995 - 1999

Diploma di Geometra (Italian Surveying Diploma, secondary-school level) ? Istituto Tecnico per Geometri,

Vibo Valentia, grade 90/100.

Kompetenzen

Kompetenzen

Top-Skills

Linux DevSecOps Kubernetes Systems Architecture, DevSecOps, Kubernetes, Linux, Automation, NIS2, AI Systems

Produkte / Standards / Erfahrungen / Methoden

Profile

I have been active in the IT sector for over 20 years, working with state institutions and strategic organisations on complex projects of national and European security relevance. My career has focused on security, technological innovation, and the design of advanced systems that address the critical needs of institutions and strategic infrastructures. Among my most significant projects is the development of a distributed communication and control system for the Hellenic Coast Guard, designed to manage and modernise communication with their obsolete radios through Digital Signal Processing (DSP) technologies. This system, based on Linux and Asterisk, made it possible to integrate modern PBX systems, SCADA networks, and naval communication systems, guaranteeing operational continuity and communication security in highly critical contexts. I also developed innovative components, such as digital modulators and demodulators, written entirely in C/C++. In parallel, I have worked on supercomputing systems for scientific computing and cybersecurity, contributing to projects of strategic relevance for Italy and Europe. I have implemented advanced legally-binding digital signature solutions and designed highly secure infrastructures, including hybrid cloud architectures and systems supporting the operational resilience of critical infrastructures. The applied research and development activity has resulted in the filing of six patent applications in different technological domains (digital signature, secure document management, anti-DDoS, encrypted exchange systems, and artificial intelligence applied to personal wellness), and in three research lines active in parallel throughout 2025?2026: adaptive artificial intelligence applied to personal wellness deterministic verification of AI-generated software artefacts, formalised in a 2026 working paper; data governance and local inference architectures for AI, with methodological reflection on compliance with the European cybersecurity regulatory framework. My technical competencies range from Kubernetes, Docker, and Ansible to languages such as Python and C/C++ ? tools I have used to build innovative, secure, and scalable systems. My mission is to contribute to strengthening the technological capabilities of institutions, ensuring security, reliability, and innovation for the future.


Selected Projects

  • AgID ? Agenzia per l?Italia Digitale (Italian Digital Agency): Formal compliance assessment against the NIS2 Directive and Legislative Decree 138/2024 on seven institutional platforms hosted on AWS infrastructure (2025 ? present).
  • Regione Puglia (Puglia Regional Government): Configuration and maintenance of the Cloud and Kubernetes platform supporting regional application services (2025 ? present).
  • Hellenic Coast Guard: Development of a distributed system for the modernisation of radio communications using DSP technologies, ensuring operational continuity and security in critical contexts.
  • Italian National Civil Protection Department: Implementation of an advanced monitoring system for IT infrastructures, including those for nationwide emergency management.
  • Italian Judiciary System: Development of the STS Magistratura platform, for call tracking on Telecom Sparkle.
  • Banca d?Italia (Bank of Italy): Development of centralised systems for the security and management of the voice network, including process automation via custom Puppet modules.
  • TIM: Hardening and security-in-depth of central infrastructures using over 60 Ansible playbooks.
  • Supercomputing and AI: Design of innovative supercomputing systems, optimised for intensive workloads and advanced AI applications.
  • Patent research (Phoenix ICT and independent activity): Six patent applications filed covering digital signature, secure digital document management, anti-DDoS systems, client-to-client encrypted exchange, and artificial intelligence applied to personal wellness.
  • Independent scientific research (2025?2026): Three research lines active in parallel ? (A) adaptive artificial intelligence applied to personal wellness, with an N-of-1 longitudinal study of over one year underlying Italian patent application (B) deterministic verification of AI-generated software artefacts, formalised in a working paper (March 2026); (C) data governance and local inference architectures for AI, with an in-house NIS2 compliance audit methodology.


Technical Skills

  • Frameworks and libraries: Puppet, Ansible, Nagios, Selenium, TensorFlow, BERT, LSTM, OpenPGP.js, Symfony, Doctrine.
  • Operating systems and virtualisation: Linux (RedHat, Oracle Linux, CentOS, Debian, Ubuntu, Gentoo), OpenBSD,
  • VMware Cloud Director, KVM/Libvirt, VMware, Docker, Kubernetes, OpenShift.
  • Automation and DevOps: Puppet, Ansible, GitLab CI/CD, Jenkins, AWX, Airflow, HashiCorp Vault.
  • Cloud: AWS (CloudTrail, GuardDuty, WAF, KMS, AWS Backup, Inspector, IAM Identity Center, Elastic Disaster Recovery), VMware Cloud Director.
  • Cybersecurity: NIS2 / Legislative Decree 138/2024 compliance, FNCDP 2025, ISO/IEC 27001:2022, NIST CSF 2.0, ISO 27001, ISO 25051, PCI DSS / CIS Benchmark, HSM, digital signature (CAdES, PAdES, XAdES), SCEP protocol, IPsec, systems hardening, vulnerability management, GDPR, HIPAA, MDR, HL7.
  • Monitoring: Nagios, Checkmk, custom systems.
  • Networking: network design, VPN, firewalls (Cisco, pfSense), Linux/Windows AD integration (SSO, Samba, SSH).
  • Databases: PostgreSQL, MySQL, Oracle, Redis, Elasticsearch, SQLite.
  • Artificial intelligence and supercomputing: LLMs (Gemma 2, Vicuna), RAG, embeddings, semantic segmentation with BERT, ML with LSTM, Tesla GPUs, CUDA, design of custom supercomputing systems.
  • Telephony and DSP: Asterisk (DCAP), AGI, IVR, AudioCodes SBC, ISDN, DSP, digital modulation/demodulation.

Programmiersprachen

C/C++
Java
Python
PHP
Bash
KSH
JavaScript
SQL
PL/SQL

Vertrauen Sie auf Randstad

Im Bereich Freelancing
Im Bereich Arbeitnehmerüberlassung / Personalvermittlung

Fragen?

Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Das Freelancer-Portal

Direktester geht's nicht! Ganz einfach Freelancer finden und direkt Kontakt aufnehmen.