Hi, I’m Cedric, a Software & Security Engineer. I hold a Master’s in Computer Science from ETH Zurich. I currently work at Pinterest and maintain the Ghostunnel open-source project. I’m based in Zurich, Switzerland.
About
Experience
Sr. Staff Engineer, Information Security
Pinterest, Zurich · Sep 2026 – Present
Set technical direction and security architecture for Pinterest’s Information Security organization. Returned to Switzerland in 2026 and moved from management back into a senior hands-on role.
Manager / Director, Information Security
Pinterest, San Francisco · Jul 2019 – Sep 2026
Joined as technical and people lead for the Infrastructure Security team, responsible for the security of cloud infrastructure, operating systems, networks, identity & access, and container orchestration. Rolled out clear security standards and reference architectures, translating risk and compliance goals into secure-by-design guardrails for engineering teams.
Promoted to Director in 2025 and grew the team from 5 engineers into an organization of over 20 engineers and managers across three teams: Platform Security, Internal Identity & Access, and Security Operations. Defined the long-term security strategy and roadmaps, orchestrated multi-team initiatives for critical company goals, mentored and grew leaders, and established planning and operations workflows adopted org-wide.
Software Engineer, Information Security
Square, San Francisco · Oct 2013 – Jul 2019
Software engineer and later technical lead for the Security Infrastructure team. Built critical, high-uptime distributed systems for tokenization and encryption of payment data, maintained core libraries for access control and cryptography in Java, Go, and Ruby, and deployed and managed HSMs for payments processing. Served as company-wide subject-matter expert for TLS, X.509 PKI, and security standards including NIST and PCI-DSS/PIN.
Master of Science in Computer Science
ETH Zurich · 2008 – 2013
Completed a combined BSc and MSc program in Computer Science. Focus area in Information Security (Master’s Thesis).
Open Source
Ghostunnel — A simple TLS proxy with mutual authentication and access control for securing non-TLS services. Supports short-lived certificates, runs anywhere as a single static binary, and is compatible with SPIFFE. Original author and current maintainer.
Maintained since 2015 · 2.3k+ stars on GitHub.
Go JOSE — An implementation of the JavaScript Object Signing and Encryption (JOSE) standard in Go. Used by Boulder, the ACME CA implementation powering Let’s Encrypt. Original author; now maintained by the Let’s Encrypt team.
Maintained 2014–2023 · 540+ stars on GitHub.
Skills
Infrastructure Security — Cloud & Container Security, Operating System & Network Security, Secrets Management, Threat Modeling, Security Operations
Cryptography & PKI — TLS/mTLS, X.509 PKI, Cryptographic Key Management, HSM Management, Payment Security & Tokenization
Identity & Access — Identity & Access Management, Workload Identity & Zero Trust, Authentication Protocols (OAuth 2.0, OIDC, JWT), Open Policy Agent (Rego)
Engineering — Security Architecture & Design Review, Distributed Systems, Cryptographic Libraries, Open Source Maintainership
Programming Languages & Platforms — Go, Java, Ruby, Python, Haskell · Linux, AWS & GCP, Kubernetes, Terraform
Compliance & Standards — NIST, BSI, PCI-DSS/PIN, SOX, SOC2
Leadership — People Management, Organizational Scaling, Hiring & Interviewing, Mentoring, Technical Strategy, Risk Management, Stakeholder Management, Technical Writing
Languages
German (Native) · English (Native) · French (B1)