I build the platformother engineers ship on.

Staff Software Engineer, Platform & Product

• Staff Software Engineer, Platform & Product · Sep 2025 - Present
• Senior Full-Stack Engineer (Cloud) · May 2023 - Aug 2025

• De-facto technical lead of a 5-engineer team, reporting to the COO/CEO: set the standards the fleet adopts, specify the CCS-side (IWS) changes the vendor team implements, own the team's AWS access as Terraform.
• Own ~$110K/yr of AWS across the production and test fleet - CI/CD, Datadog/CloudWatch observability, and FinOps tooling driving right-sizing and Fargate-Spot savings.
• Owned production go-live readiness for 6 client launches.
• Primary author of both generations of the fleet's core API - 58% of v1, serving all seven launched tenants; 78% of v2, in production for the first ahead of its cutover - and the auth and Oracle CCS patterns both share.
• Primary author (93%) of the internal developer platform: a Terraform control-plane (9 stacks, ~60 AWS resource types) with a Fastify/React dashboard, onto which the fleet's provisioning is migrating tenant by tenant.
• Rolled blocking Snyk gates across the portal pipelines, then keyless OIDC deploys - pilot, test envs, prod on 4 repositories - taking long-lived AWS credentials out of the deploy path.
• Shipped the fix for an SSN identity-verification gap enabling account takeover - wrong-person matches on ~2.4% of one tenant's accounts - as attempt lockout plus ZIP disambiguation, flag-gated for per-tenant rollout.
• Built a fleet-wide customer-interaction audit trail: tenant-scoped, IDOR-safe admin history API with CSV export and rate limiting, 90-day retention, later extended to admin reads and impersonated sessions.
• Built and measured the team's AI tooling: kept the Claude PR reviewer on the core API and backend, shelved the Bedrock auto-fix on evidence, shipped the knowledge-base agent.
• Designed and shipped a multi-account usage-extract feature (backend API + frontend modal) letting multi-account customers export combined billed usage as one CSV, closing an admin-bypass IDOR gap found in review.

Senior Full Stack Engineer

• One of 3 core engineers on an ISO 27001-certified biopharma strategy SaaS in private beta with enterprise pharma clients.
• Originated two subsystems from scratch: a DMMF-driven strategy clone engine and the Edge archive/restore isolation system.
• Contributed to real-time collaboration (GraphQL subscriptions), OpenAI-backed generation features, and platform security (OWASP/IDOR, JWT sessions).
• Originated a data-dependency subsystem - GraphQL contract, resolver, registry-driven modal - that warns before archiving or deleting finalised entities with dependents, then cascades the archive/restore across them.
• Built out the Edge brand-strategy module - Belief Shift, Narrative, and competitive-landscape recap tabs with per-group finalise - and instrumented its LLM-backed prompt generation with llm_event telemetry.