Sanawer S.
Senior PKI & eSignature Engineer | Java Spring Boot | HSM, CA/RA & AWS
If you need a secure PKI infrastructure, Digital Signature/eSignature platform, HSM integration, Java Spring Boot application, or enterprise authentication system, you’re in the right place. I’m a 𝐏𝐊𝐈 & 𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫 with 𝟏𝟐+ 𝐲𝐞𝐚𝐫𝐬 𝐨𝐟 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 designing and developing secure, scalable, high-performance, enterprise-grade software using 𝐉𝐚𝐯𝐚, 𝐒𝐩𝐫𝐢𝐧𝐠 𝐁𝐨𝐨𝐭, 𝐏𝐊𝐈, 𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐲, 𝐇𝐒𝐌, 𝐂𝐀/𝐑𝐀, 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞𝐬, 𝐀𝐖𝐒, 𝐀𝐧𝐠𝐮𝐥𝐚𝐫, and 𝐑𝐞𝐚𝐜𝐭𝐉𝐒. My focus is on building secure systems where identity, certificates, cryptographic keys, signing workflows, APIs, and enterprise applications work together reliably. I specialize in 𝐏𝐊𝐈 & 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐋𝐢𝐟𝐞𝐜𝐲𝐜𝐥𝐞 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, including 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐭𝐢𝐞𝐬 (𝐂𝐀), 𝐑𝐞𝐠𝐢𝐬𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐭𝐢𝐞𝐬 (𝐑𝐀), certificate issuance, renewal, validation, revocation, CRL, OCSP, trust chains, certificate provisioning, and automated certificate lifecycle workflows. Whether you need a new PKI architecture, an existing CA/RA integration, automated certificate operations, or modernization of a certificate management platform, I can design and implement the solution around your security and business requirements. For 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞 & 𝐞𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞 𝐒𝐨𝐥𝐮𝐭𝐢𝐨𝐧𝐬, I develop secure signing workflows for PDF, XML, enterprise documents, transactions, and business processes. I work with 𝐏𝐀𝐝𝐄𝐒, 𝐂𝐀𝐝𝐄𝐒, 𝐗𝐀𝐝𝐄𝐒, and 𝐒/𝐌𝐈𝐌𝐄, including signature creation, validation, certificate verification, timestamping, document integrity, signing APIs, and secure verification workflows. I can build end-to-end signing platforms or integrate digital signing into your existing enterprise applications. For 𝐇𝐒𝐌 𝐈𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐢𝐨𝐧 & 𝐒𝐞𝐜𝐮𝐫𝐞 𝐊𝐞𝐲 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, I work with 𝐀𝐖𝐒 𝐂𝐥𝐨𝐮𝐝𝐇𝐒𝐌, 𝐓𝐡𝐚𝐥𝐞𝐬 𝐇𝐒𝐌, and 𝐒𝐚𝐟𝐞𝐍𝐞𝐭 𝐇𝐒𝐌 for secure key generation, protected key storage, cryptographic operations, signing, encryption/decryption, certificate protection, and hardware-backed security. I understand how to connect HSM-backed cryptography with Java services, PKI platforms, signing systems, and enterprise workflows while keeping sensitive keys protected. On the application side, I build secure and scalable 𝐉𝐚𝐯𝐚 𝐒𝐩𝐫𝐢𝐧𝐠 𝐁𝐨𝐨𝐭 𝐁𝐚𝐜𝐤𝐞𝐧𝐝𝐬 using REST APIs, microservices, secure business logic, authentication, authorization, database integrations, asynchronous processing, logging, monitoring, and production-ready architecture. I also provide 𝐉𝐚𝐯𝐚 𝐅𝐮𝐥𝐥-𝐒𝐭𝐚𝐜𝐤 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 using 𝐀𝐧𝐠𝐮𝐥𝐚𝐫 and 𝐑𝐞𝐚𝐜𝐭𝐉𝐒 for enterprise dashboards, admin portals, certificate management interfaces, signing portals, workflow systems, and secure business applications. I also specialize in 𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲, 𝐀𝐮𝐭𝐡𝐞𝐧𝐭𝐢𝐜𝐚𝐭𝐢𝐨𝐧 & 𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧, implementing enterprise access management with 𝐊𝐞𝐲𝐜𝐥𝐨𝐚𝐤, 𝐎𝐀𝐮𝐭𝐡𝟐, 𝐒𝐀𝐌𝐋, 𝐒𝐒𝐎, 𝐀𝐮𝐭𝐡𝟎, and 𝐖𝐒𝐎𝟐. This includes role-based access control, identity federation, token-based authentication, secure sessions, service authentication, and integration with enterprise identity providers. I can connect these identity workflows with PKI-based authentication, digital certificates, signing services, and existing enterprise systems. For 𝐒𝐞𝐜𝐮𝐫𝐞 𝐀𝐏𝐈 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 & 𝐈𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐢𝐨𝐧, I create APIs with strong authentication, authorization, encryption, digital signatures, access controls, certificate-based security, and third-party integrations. I also work with 𝐒𝐦𝐚𝐫𝐭 𝐂𝐚𝐫𝐝𝐬, 𝐔𝐒𝐁 𝐓𝐨𝐤𝐞𝐧𝐬, and cryptographic devices for secure identity verification, private-key operations, certificate-based authentication, and signing workflows. My cloud and deployment expertise includes 𝐀𝐖𝐒 services such as 𝐄𝐂𝟐, 𝐒𝟑, 𝐑𝐃𝐒, 𝐑𝐨𝐮𝐭𝐞𝟓𝟑, 𝐊𝐌𝐒, and 𝐂𝐥𝐨𝐮𝐝𝐇𝐒𝐌, along with 𝐃𝐨𝐜𝐤𝐞𝐫, 𝐉𝐞𝐧𝐤𝐢𝐧𝐬, CI/CD pipelines, secure deployments, monitoring, secrets management, and production infrastructure. I approach security as part of the architecture rather than an afterthought, with emphasis on scalability, reliability, maintainability, and clean integration. My core expertise includes 𝐏𝐊𝐈 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞, 𝐂𝐀/𝐑𝐀, 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞𝐬, 𝐞𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞, 𝐇𝐒𝐌, 𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐲, 𝐉𝐚𝐯𝐚, 𝐒𝐩𝐫𝐢𝐧𝐠 𝐁𝐨𝐨𝐭, 𝐑𝐄𝐒𝐓 𝐀𝐏𝐈𝐬, 𝐌𝐢𝐜𝐫𝐨𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬, 𝐊𝐞𝐲𝐜𝐥𝐨𝐚𝐤, 𝐎𝐀𝐮𝐭𝐡𝟐, 𝐒𝐀𝐌𝐋, 𝐒𝐒𝐎, 𝐀𝐖𝐒, 𝐀𝐧𝐠𝐮𝐥𝐚𝐫, 𝐑𝐞𝐚𝐜𝐭𝐉𝐒, 𝐃𝐨𝐜𝐤𝐞𝐫, and 𝐂𝐈/𝐂𝐃. #PKI #DigitalSignature #eSignature #Cryptography #HSM #Java #SpringBoot #CyberSecurity #DigitalIdentity #IAM #IdentityManagement #CloudSecurity #AWS #CloudHSM #EnterpriseSecurity #Microservices #JavaDeveloper #BackendDeveloper #SoftwareArchitecture #DevSecOps #OAuth2
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $1.1k
Billed in all: $57,126$57k
$1.1k in the last 6 months
Across 42 contracts
Earnings, last 30 days
Skill rankings: Top 17% in Spring Security
Ranked by MRR among everyone on Upwork with the skill.
- #6OS Security16 freelancers · 🇵🇰 #3Top 38%🇵🇰#3 of 5
- #11Encryption62 freelancers · 🇵🇰 #1Top 18%🇵🇰#1 of 11
- #33Cryptography183 freelancers · 🇵🇰 #5Top 18%🇵🇰#5 of 27
- #42Spring Security248 freelancers · 🇵🇰 #3Top 17%🇵🇰#3 of 27
- #42Crypto Wallet136 freelancers · 🇵🇰 #10Top 31%🇵🇰#10 of 32
- #77Security Analysis357 freelancers · 🇵🇰 #14Top 22%🇵🇰#14 of 53
- #86AI Security199 freelancers · 🇵🇰 #14Top 43%🇵🇰#14 of 41
- #120AWS CloudFormation595 freelancers · 🇵🇰 #25Top 20%🇵🇰#25 of 102