At Cribl, I shipped Harbor, an evaluation framework that runs AI coding agents against real engineering tasks, and helped deliver production changes through the agentic workflow. I also replaced live task secrets with a centralized integration proxy, reducing an exfiltration risk class.
At Idemeum, I owned product security for a passwordless, zero-trust identity platform. I built FIDO2/WebAuthn authentication, cryptographic workflows for a passwordless password manager, and SCIM, SAML, and OIDC enterprise identity rails.
At VMware, I rebuilt OAuth2/OIDC support as a reactive authorization server and migrated clients with zero downtime while scaling the service to 10x load. I also led a cloud migration and built identity, entitlement, and access-policy services.
