Authorization & Permissions Framework

Focused on enforcing security standards around data access and analyzing evolving production systems for vulnerabilities

Payments Team

• -Focused on improving the payments platform in its flexibility, reliability, & observability, enabling the platform to scale with increased passenger & driver payments

• -Mentor & establish processes to increase developer productivity

• -Worked cross-functionally (marketing, communications, legal) to maximize program adoption and meet compliance regulations

Projects

• -Chase partnership for riders to earn accelerated points for paying with Chase cards

• -Lyft Direct for drivers to receive instant payments after each ride

• -New payment provider integrations for reliability & flexibility

• -Minimizing the cost of payment processing

• -Automation of payments reconciliation

• -Fraud & incident detection

Languages: Python, Go, PHP

Tools: Splunk, Kibana, Grafana

API Infrastructure

• -Integrated OAuth 2.0 to secure public APIs and internal private APIs

• -Increased throughput & robustness via API Throttling

• -Enforced secure practices regarding cookie properties, HTTP headers, & sanitization

• -Enhanced UI development by providing metadata, filtering, & batch functionality

• -Improved consumption of legacy APIs

Technical Infrastructure

• -Improved Oracle performance by adding new indexes and reducing load with Redis

• -Microservice architecture

• ---Introduced search service built with ElasticSearch

• ---Defined deployment & configuration process with Vagrant & Ansible scripts and DropWizard

Programming language: Java

SCM: Perforce, Git

Build & Dependency Management: Gradle, Ant

Tools: Jenkins, Swarm code review, Splunk, New Relic, JMeter

Unit Test Frameworks: TestNG & Mockito

OpenSDN Controller Team (August 2014 - June 2015)

• -Python Backend Development - REST APIs & Background processes

• -Angular 1.0 (AngularJS) User Interface Development

• -​--Created new AngularJS modules, controllers, services, & directives

• -​--Utilized Bootstrap & Less frameworks to provide cross-browser & mobile

compatibility

• -​--Fulfilled security requirements to prevent XSS & other injection attacks

OpenDaylight Team (October 2013 – August 2014)

• -Generating APIs using RAML (REST API Markup Language)

• -Contributing to the open source OpenDaylight project, focusing on the SDN controller

• -​--Defining data models for network elements and hosts using YANG

• -​--Optimizing host tracking and packet forwarding logic

WebEx Social Team (Jan 2012 - October 2013)

• -Designed and implemented REST APIs using the Jersey framework

• -Created data models for WebEx Social objects, i.e. users and posts

• -Extended the test automation framework for new API workflows

• -Added integration tests & regression tests to the test suites

• -Developed OpenSocial gadgets & OAuth gadgets

Scrum/Agile teams for entire time

SCM: Git

Tools: Maven, Gerrit, Jenkins

WebEx Social API Team

• -Iterative development of JSON RPC handler on Apache Shindig

• -Created unit tests using the TestNG framework & Mockito

• -Implemented JavaScript code generator using Java Reflection