We support admins to implement and manage 1Password for their organizations and teams of any size, by providing simple, effective, and scalable solutions through provisioning and organization management that work for onboarding and set admins up for long term success.

The Infrastructure Services organization is composed of a number of sub-teams collaborating on various levels of the infrastructure that runs 1Password. This includes the creation and maintenance of shared libraries, readying services for containerization and Kubernetes, and stateful services. Laying the foundations for logging, configuration, and secrets management. Maintaining the overall health of the services that power 1Password.

◆ Helmed the initial phase of an internal engineering platform creation, collaborated closely with the Cloud Platform Engineering team to align the project with their managed EKS platform, resulting in an approved internal RFD and Backend Engineering Golden Path, fostering a structured approach toward achieving our engineering goals.

◆ Identified a low-risk internal service for containerization, readying it for Kubernetes deployment by consolidating multiple Dockerfiles and ensuring compatible health checks were available. This initiative demonstrated a minimal secure rootless containerization model, setting a precedent for other services to emulate.

◆ Collaborated on a two-person team to transition an ephemeral internal review environment from GKE to our managed EKS cluster, crafting Helm charts for four services along with their corresponding stateful services, and facilitated per-branch deployment, simplifying deployment processes and enhancing the code review workflow.

◆ Identified and isolated obsolete tables in our MySQL database, safely removing them post a six-month validation period, contributing to a significant milestone in database cleanup freeing over 20GB of data.

◆ Orchestrated a seamless multi-service Go version upgrade to go1.18 across seven services with zero downtime or incidents, liaising with respective teams to ensure smooth transitions and continued service availability. Coordinated a conservative upgrade cadence org-wide to ensure services are using supported Go versions.

While on the Server Architecture team, we primarily focused on the overall health and scalability of the entire 1Password backend, including stateful services. We were responsible for creating and maintaining internal libraries that are used across Go services, to assisting in code patterns and feature design.

◆ Identified and corrected improper transaction patterns in the codebase, developed a tool to automate the detection of such issues, resulting in optimized database connection efficiency by ensuring timely releasing of connection resources, thereby reducing the overall number of open connections between the server and the database.

◆ Uncovered ungraceful shutdown issues in the server, orchestrated and executed a comprehensive refactoring of the main function and its child goroutines, achieving zero data loss and ensuring graceful resource release with every shutdown.

◆ Identified and rectified a security vulnerability in our server's endpoint registration process which allowed unauthorized endpoint registration due to the use of Go's DefaultServeMux; implemented a more secure and readable pattern, eliminating the threat, leading to a tech talk disseminating the findings and promoting better coding practices regarding the avoidance of package globals.

Back Office is an internal platform used primarily by our customer support team and some reporting. It is a part of the main server powering 1Password, enabling deeper diagnostic and resolution capabilities for customer accounts and server subsystems.

◆ Spearheaded the development of a custom banner system, collaborating across design, content, and sales teams, resulting in immediate engagement from the sales team with potential customers.

◆ Led the refactoring of business logic and increasing test coverage from 10.7% to 17.4% in Back Office, significantly reducing the time spent on codeowner reviews, enabling the team to reallocate focus on priority initiatives.

◆ Onboarded and mentored two interns, fostering a supportive and educational environment that led to one intern accepting a full-time position, with managerial commendation for significantly contributing to the interns' enjoyable and successful term.

◆ Delivered internal tech talk describing the effective utilization of various "access" types in our Go repository for managing permissions, supplemented with visual aids to assist with understanding of Go concepts and their application within our codebase.

◆ Led the development and deployment of safe restoration of deleted users, overseeing the research with security, development, and QA testing, enabling safer and expedient assisted recovery of deleted users and their data.

As a Junior Engineer, I worked a variety of projects with guidance from a senior engineer or tech lead. This work was primarily in support of the server powering 1Password, using Go.

◆ Analyzed metrics to set throttle limits for 105 unthrottled server endpoints, created a CLI tool for endpoint inspection, and integrated it into the CI pipeline, automating throttle verification and significantly reducing DOS attack susceptibility.

◆ Collaborated with a senior engineer to migrate 410 unique configuration key/value pairs from HCL to ENV files across 16 environments, utilizing the stdlib for configuration loading to avoid additional dependencies, meticulously validated and tested each configuration set ensuring accurate conversion of encrypted secrets, all accomplished within a 6-week timeframe, enhancing configuration manageability and security.

◆ Coordinated with 7 client teams to transition 15 critical API endpoints from custom error codes to HTTP Status Codes, implemented simplified error code interpretation logic, resulting in a reusable common handler standardizing api error responses over a 6-week period without incident.