I build the platformother engineers ship on.

Staff Software Engineer, Platform & Product

• Staff Software Engineer, Platform & Product · Sep 2025 - Present
• Senior Full-Stack Engineer (Cloud) · May 2023 - Aug 2025

• De-facto technical lead of a 5-engineer team, reporting to the COO/CEO: set the standards the fleet adopts, specify the CCS-side (IWS) changes the vendor team implements, own the team's AWS access as Terraform.
• Sole platform engineer for the multi-tenant AWS fleet - production and test - running CI/CD, Datadog/CloudWatch observability, and FinOps tooling that drives right-sizing and Fargate-Spot savings.
• Owned production go-live readiness for 6 client launches.
• Primary author of both generations of the fleet's core API - 58% of v1, serving all seven launched tenants; 78% of v2, in production for the first ahead of its cutover - and the auth and Oracle CCS patterns both share.
• Primary author (93%) of the internal developer platform: a Terraform control-plane (9 stacks, ~60 AWS resource types) with a Fastify/React dashboard, onto which the fleet's provisioning is migrating tenant by tenant.
• Closed pentest findings in severity-labelled batches across 6 external test rounds - 60 findings triaged, false positives refuted - from IDOR and unauthenticated endpoints to URL-borne tokens and missing rate limits.
• Built the runtime feature-flag platform: a database-backed reader replacing build-time env vars, SSE push with fail-open, wired into 6 v1 admin consoles and 4 portals, shipped flag-gated per tenant with parity tests.
• Built the drift-repair program behind the reconciler: duplicate/missing/split-identity classification, an unregister-then-relink merge endpoint, and a signup guard for one tenant's 107 duplicate registrations.
• Built the multi-party account authorization model: secondary users scoped global or per-account under a 2-per-account cap, guest access and collective-account gating, and 5 ownership traversals folded into one module.
• Built the internal customer-360 admin product, backend and frontend: unified search, shared-email disambiguation, a default-deny capability manifest, adapters over both API generations, shipped flag-gated per tenant.
• Rebuilt admin sign-in-as-customer twice: a URL-borne token replaced by a server-side exchange, shipped to production fleet-wide, then a single-use code redeemed for a scoped session token on 7 allowlisted routes.
• Shipped the fix for an SSN identity-verification gap enabling account takeover - wrong-person matches on ~2.4% of one tenant's accounts - as attempt lockout plus ZIP disambiguation, flag-gated for per-tenant rollout.
• Rolled Datadog RUM and Session Replay across six portal repositories - per-field privacy unmasking, source-map symbolication, RUM config from Secrets Manager - then tuned sampling and dropped noise classes for cost.
• Migrated four portals from Create React App to Vite, cleared Node, AWS Amplify and router majors, removed dead dependencies, then wrote suites of 69, 142 and 47 tests plus 54 on zero-coverage surfaces.
• Designed the release engineering behind per-tenant promotion: branch-per-environment pipelines on a {tenant}-{env} convention, build-time secrets from Secrets Manager, committed .env files deleted, scripted teardown.
• Built a fleet-wide customer-interaction audit trail: tenant-scoped, IDOR-safe admin history API with CSV export and rate limiting, 90-day retention, later extended to admin reads and impersonated sessions.
• Built and measured the team's AI tooling: kept the Claude PR reviewer on the core API and backend, shelved the Bedrock auto-fix on evidence, shipped the knowledge-base agent.
• Rolled blocking Snyk gates across the portal pipelines, then keyless OIDC deploys - pilot, test envs, prod on 4 repositories - taking long-lived AWS credentials out of the deploy path.
• Added a CCS ownership check to admin account linking, where a CSR could previously link any account Invoice Cloud accepted with no owner verification: the link now blocks and audits on a NOT_OWNED verdict from CCS.
• Cut admin-portal CI time: vitest to a threads pool (~10.5min test step to ~3-4min) and dropped redundant reruns from 21 deploy-branch build steps (~47% of a 14min pipeline), leaving the PR-gate suite as the test gate.
• Designed and shipped a multi-account usage-extract feature (backend API + frontend modal) letting multi-account customers export combined billed usage as one CSV, closing an admin-bypass IDOR gap found in review.

Senior Full Stack Engineer

• One of 3 core engineers on an ISO 27001-certified biopharma strategy SaaS in private beta with enterprise pharma clients.
• Originated two subsystems from scratch: a DMMF-driven strategy clone engine and the Edge archive/restore isolation system.
• Built the in-house observability layer - an Apollo plugin emits one structured obs_event per GraphQL operation to CloudWatch, errClass splits fault from noise, dashboards cover staging and prod - then removed New Relic.
• Serialized rating upserts behind a Postgres advisory lock, killed a duplicate-groups race in a sync resolver, blocked re-entrant AI generation calls, and added double-press guards plus stale-poll reconciliation.
• Extracted a FinalisedFloater primitive plus style-guide entry, wired it to one page, then 6, and rolled it onto bespoke finalise panels across the app; a shared useFloatingMenu hook cut ~170 duplicated dropdown lines.
• Evolved the schema against live customer data - idempotent backfills in an ordered pipeline with an audit gate, repair scripts, a string-encoded key swapped for a real foreign key, and an index pinned to stop drift.
• Contributed to real-time collaboration (GraphQL subscriptions), OpenAI-backed generation features, and platform security (OWASP/IDOR, JWT sessions).
• Rebuilt an Edge communications-strategy tab as a per-brand-value tile grid - new Prisma columns, per-field AI drafting, and a collaboration thread per field, with writes scoped to the strategy's own rows.
• Added a reason-for-archiving note across the finalised-entity archive subsystem - one nullable column on four models in a single migration, forwarded through their create/update resolvers behind one shared path.
• Originated a data-dependency subsystem - GraphQL contract, resolver, registry-driven modal - that warns before archiving or deleting finalised entities with dependents, then cascades the archive/restore across them.
• Built out the Edge brand-strategy module - Belief Shift, Narrative, and competitive-landscape recap tabs with per-group finalise - and instrumented its LLM-backed prompt generation with llm_event telemetry.