I build zero-trust access and identity infrastructure and run it in production on hardware we own. I work across the stack in Go, Rust, C/C++, C#/.NET, Python, TypeScript and Bash, and pick whichever fits the job.
Founder & CTO of HexxLock, a two-person company. I have spent seven years in defense-sector software, including an intelligence platform used nationally in Türkiye. I run the Kubernetes platform, the network and the identity layer underneath them. Several of the pieces are open source.
| Repo | What it is | License |
|---|---|---|
| falcon-id | Multi-tenant OIDC identity provider: OAuth 2.1, DPoP, PAR, SAML, SCIM, WebAuthn, adaptive MFA, SpiceDB authz | AGPL-3.0 |
| talon | Identity-aware proxy built to NIST SP 800-207, with SpiceDB policy checks and device posture signals | AGPL-3.0 |
| jess | Zero-trust infrastructure access broker: short-lived grants, session recording, tamper-evident audit | AGPL-3.0 |
| keystone | Kubernetes operator for multi-tenant Postgres schema migrations and drift detection | AGPL-3.0 |
| keystone-sdk | Migration SDKs for Go, Rust and .NET, wire-compatible with the operator | Apache-2.0 |
| platform-shared | Go libraries for multi-tenant services: auth, audit, outbox, quota, observability | Apache-2.0 |
| hexx-pep-core | Hash-chained audit, offline governed decisions, ML-DSA-ready crypto-agility seam | Apache-2.0 |
Notes on identity protocols and running this stack on-prem, starting on dev.to/dogukanturhal.
- Hiring or contracting for identity, zero-trust and platform engineering: I'm open to remote senior and staff-level roles and to project work.
- Partnerships: HexxLock is open to integration, reseller and design-partner work with security, sovereign-cloud and infrastructure companies.