Security · multi-tenant SaaS
Found a cross-tenant data-access flaw in review - before launch, not after a breach
Caught in a pre-implementation review, not an incident. Stopped feature work, audited the entire platform for the same class of flaw, closed the process gap that allowed it - then fixed the code.
closed pre-launch · full-platform audit shipped
Cloud · cost
-84%
Cut AWS spend without collapsing the architecture
~$10K/year saved at pilot scale. Wrote the non-negotiable invariants first: no monolith collapse, every service boundary preserved, and a documented one-weekend path back to Kubernetes.
production cutover 2026-06 · running since
Payments · reliability
100%
Blocked my own release over a defect that would have failed every refund
A live end-to-end test showed the provider contract differed from what the docs implied. Declared NO-GO on my own evidence, fixed it, and proved exactly-once refund semantics under replay before shipping.
replay-tested on live provider · shipped
AI-era engineering · security
Wrote the AI-agent security rulebook - after a real incident, not in theory
An AI coding agent leaked credentials into a session log. I wrote a machine-followable secret-handling and supply-chain policy, propagated it into every agent session, and wired an automated leak check into the deploy pipeline.
enforced in CI · held since
AI-era engineering · quality
46
Real defects fixed in one pass - every AI finding hand-verified first
Six review agents fanned out across a seven-repo feature. 48 raw candidates, each confirmed by direct code read; one killed as a false positive. 46 fixes across 11 reviewed PRs, deployed together.
48 → 46 confirmed · 1 false positive killed
Payments · compliance
Restructured payments so the company never holds other people's money
Designed out a money-transmitter licensing exposure across IL/EU/US before writing code - restaurant as merchant of record, platform fee separate. Read the provider's full API documentation page by page; one buried error code invalidated the refund-retry design.
licensing exposure designed out
Legacy modernization · team leadership
+60%
Modernized a national telecom's legacy mobile systems
Led a six-developer team migrating legacy Java applications to Kotlin with modern architecture patterns - improving application efficiency by up to 60% across products used on Android, iOS, and smart-TV platforms.
delivered as team lead · national telecom
Automation · growth engineering
8×
Built automation that multiplied client business exposure
Designed Python automation and business-growth systems for consulting clients - increasing profile exposure and interactions by up to 800%, built on the same reliability discipline as everything else here.
delivered via consulting practice