At Microsoft, I designed and shipped seven certificate-policy validations to block non-compliant certificate issuance. They addressed a missing-extension failure behind an incident involving approximately 800 certificate revocations.
I modernized a Windows product-key assignment service to .NET 8 and Azure Service Fabric, replacing manual deployments and patching with automated pipelines and VM scale set updates. I also secured Service Bus access with managed identity.
I designed CRL monitoring with 30-minute publication checks and extended it to partitioned CRLs. I also automated DNS record creation and verification for TLS domain validation, and added domain-based certificate-authority routing for test-certificate autorotation.
I expanded multi-perspective DNS/CAA validation from four to six production regions and brought a new production PKI zone online. Earlier, as a Software Intern at Licious, I built Amazon Redshift data pipelines and optimized SQL queries for customer-data analysis.
