* Designed and built internal solution for highest sensitivity clinical file storage in S3

* Designed and built internal tokenization service to anonymize data in long-lived internal storage (Kafka events)

* Developed internal libraries for Kafka and observability

* Founding member of the security team

* Performed first round of security hardening in AWS prod environment (role-based IAM, organizational cloudtrail, secops alerts)

* Core developer on a new framework for inter-service authorization, deployed company-wide

Security Infrastructure

* Developed infrastructure for internal authentication and permissions management, emphasizing usability

* Assisted in developing new security-owned access control bastions in AWS, and migrated core services

* Automated deployment of a 100+ node Splunk SIEM cluster using Chef, supporting centralized observability at scale

* Built the first Workday Add-on for Splunk, enabling easy secure log ingestion for enterprise customers

* Expanded observability use cases beyond security into IT service health and SRE

* Partnered with the SOC as the primary engineering contact to design detection rules

* Developed and operated foundational security tooling for vulnerability management and corporate email