Full Stack Software Engineer
- Designed and implemented a custom access-control API for 1Password using Nginx + OpenResty (Lua) to enforce fine-grained permissions, reduce operational overhead, and lower licensing costs by minimizing the number of required 1Password users.
- Participated in an urgent database security hardening initiative: restricted direct database access by enforcing IP whitelisting, impacting 300+ services.
- Coordinated and implemented a large-scale credentials rotation across all affected services; introduced CI/CD pipelines for multiple legacy services that previously lacked automated deployment.
- Solved connectivity issues for Google Cloud Functions by configuring dedicated outbound IP addresses to maintain database access under the new network restrictions.
- Implemented role-based database access by creating read-only users for authorized personnel and enforcing access through VPN.
- Successfully delivered the entire migration and security lockdown overnight, collaborating closely with a DevOps engineer, under strict time constraints following an employee offboarding event.
- Implemented an end-to-end encrypted messaging system based on the Signal protocol, using PKI, ECDSA, ECDH, Double Ratchet, and ChaCha20-Poly1305.