About

I’m Chris Paul. I’ve run identity and authentication infrastructure since 2001: directories behind trading floors, hospitals, airlines, and a social platform with hundreds of millions of users. I care about systems that are boring on purpose: certificate-based trust, no root credentials, recovery measured in minutes, and monitoring that notices problems before people do.

This site is where I write down what that work teaches. Lately that includes taking the security patterns I’ve enforced at the protocol layer for two decades (workload identity, mutual TLS, segmentation, least privilege) into Kubernetes, and documenting the trip.

I also build in the open: ldap-as-code is a security-first Infrastructure-as-Code framework for LDAP with automatic X.509 issuance and no root credentials anywhere.

Elsewhere: LinkedIn · ldap-as-code repo