Resume.
Software engineer focused on backend systems, security, performance, and product ownership.
Download formal resume
Skills
How I build useful software.
01 Shape the backend
Turn messy product workflows into APIs, services, and data paths that stay understandable when real users hit them.
02 Make data operational
Design tables, query paths, and access rules so teams can trust the system instead of hand-checking the database.
03 Build product interfaces
Create interfaces and internal tools that make complex workflows easier to operate without hiding the underlying system state.
04 Ship with confidence
Use delivery and test feedback loops so changes are versioned, reviewable, and less likely to break important paths.
05 Harden request surfaces
Treat exposed endpoints as product boundaries: validate input, narrow accepted shapes, and make failures safe by default.
06 Operate AI in product
Treat AI features like production systems: observable, reviewable, cost-aware, and tied to user outcomes.
Breef
Software Engineer, 2024 to present
- Production Django and PostgreSQL work across customer-facing API paths.
- LLM production sampling, review tracking, evaluation workflows, and OpenAI API automation.
- Query-count, database workload, and latency improvements documented in resume/profile materials.
IBM
Full Stack Web Development Intern, 2022 to 2024
- React and TypeScript internal tools for UX research workflows.
- REST API integration and JWT-authenticated platform work.
Projects
01 Rider-owned product architecture
Apex Setup Vault
A setup logbook for riders where historical sessions stay stable, JWT-backed access is explicit, and sensitive setup data stays scoped to the owner.
- Uses Supabase Auth, request JWT claims, RLS boundaries, immutable snapshots, and validation around setup data.
- Runbook covers rate limits, smoke checks, observability, backup, and rollback paths.
- FastAPI
- Next.js
- PostgreSQL
- Supabase Auth
- JWT claims
- RLS
- rate limits
- integration tests
02 Event-driven authorization
Clearance
A Go authorization platform built around ledgered events, retryable failure paths, idempotent processing, and hardened request handling.
- Request hardening includes a 1 MiB body cap, strict JSON fields, safe header/token regex, masked errors, no-store, nosniff, DENY frame header, and a CORS allowlist.
- Redis-backed rate limiting, IP banning, Docker Compose, and unit/integration/E2E coverage support the failure paths.
- Go
- Kafka/Redpanda
- PostgreSQL
- Redis
- Docker
- CORS allowlist
- IP banning
- E2E testing
03 Account-scoped operations
Properly
A landlord operations app designed around tenant boundaries, Supabase-issued JWTs, private file handling, and practical workflows for property data.
- Documents account-scoped data, Postgres RLS policies, Supabase JWTs, and private Cloudflare R2 upload/download flows.
- Uses checksum and magic-byte verification, frontend/backend CI checks, validation, and tests before data is trusted.
- PostgreSQL
- Supabase JWTs
- RLS
- Cloudflare R2
- input validation
- CI
- unit tests
- private files