~/work

Proof, not promises.

Every project below shipped: work from 6+ years at Microsoft, my own full-stack products, Morgan Stanley, and published research. Microsoft work is described at a high level.

#

Case studies

enterprise
// Microsoft · DevSecOps & platform2024 — present

Run a high-volume malware pipeline with tiered storage and gated releases

The stakes: a pipeline that quarantines millions of malicious samples a day, where both storage cost and release safety matter.

Own the pipeline that moves malware samples and phishing URLs into quarantined storage. Designed hot/cool/archive storage tiering to cut cost, built single-click build and release pipelines with static analysis, fuzz testing, vulnerability scanning, and AI-assisted code review gating CI, and added distributed tracing.

Millions
of samples a day
1-click
gated dev/prod releases
Storage tieringYAML pipelinesCodeQLFuzz testingOpenTelemetry
// Microsoft · AI platform2024 — present

Gave security researchers a shared Azure OpenAI platform without the quota fights

The stakes: researchers needed LLM capacity, but per-subscription quotas capped them, some data had to stay in-region, and one heavy workload could starve everyone else.

Distributed Azure OpenAI deployments across multiple subscriptions behind a single API Management endpoint, with routing, load balancing, and data-residency controls. Then added per-user token rate limiting with API Management policies, plus an escalation path that grants extra capacity for critical work.

Hundreds
of researchers on one platform
Azure OpenAIAPI ManagementMulti-subscription routingData residencyQuota governance
// Microsoft · product security2023 — 2024

Shipped an isolated malware-investigation browser, secure and compliant from the threat model up

The stakes: researchers investigating live malicious websites needed full isolation from customer data and the corporate network, inside a hardened, compliance-certified cloud environment.

As dev owner, wrote the threat model and data-flow diagram, then built the controls they called for: auditing, access logging, and guardrails against customer-data exfiltration. Owned the privacy design through GDPR review, stood up the build and release pipelines, and wrote the BCDR plan, then ran the recovery simulations that validated failover and restore.

GDPR
privacy review cleared
BCDR
validated with recovery drills
Browser isolationThreat modelingData-flow diagramsGDPRBCDR
// Microsoft · identity2024 — present

Leading a migration past a long-standing authentication blocker

The stakes: a critical rule-authoring workflow for a large enterprise service was stuck in a legacy desktop tool, because authentication couldn't follow it to the web.

Built a reusable, thread-safe OAuth 2.0 On-Behalf-Of library with configurable caching that services use to call downstream APIs under fine-grained permissions. Now leading the cross-team migration of that workflow to the web platform, working with the owning team to clear the blocker.

11 mo
authentication blocker being cleared
OAuth 2.0 OBOToken caching.NET 8AzureCross-team delivery
// Microsoft · detection quality2024 — present

Made detection-quality reviews 4× faster

The stakes: security researchers reviewing email-threat detections one sample at a time, while campaigns moved faster than reviews.

Designed and shipped the review system end to end — data model, ingestion pipeline, APIs, and UI/UX — partnering with UX and security-research teams. Clustered review with auto-assignment and one-click verdict propagation across each cluster.

4×
faster reviews
.NETEvent pipelinesReactAPI designUX collaboration
// Microsoft · investigation tooling2020 — 2024

Turned 20-second waits into sub-3-second triage

The stakes: researchers triaging malware detections were waiting 20+ seconds per sample preview, and most samples weren't ready to analyze when they needed them.

Redesigned the preview panel and added a pre-processing service, cutting preview load time from 20+ seconds to under 3 in the slowest region. An artifact-copy service raised sample availability from under 20% to about 75%, and direct blob-storage integration cut threat-hunting page loads from 30+ seconds to under 4.

<3s
preview latency, from 20s+
<4s
hunting-page loads, from 30s+
~75%
sample availability, from <20%
PerformancePre-processing servicesAzure Blob Storage.NETReact
#

Independent products

full-stack
// admissions platform

UniAccess

A pan-African university admissions portal, launching in Angola first: students build one academic profile, apply to universities, and track decisions. Payments through Stripe and Multicaixa Express, background jobs on Azure Functions, deployed on Azure Container Apps.

.NET 10React 19VitePostgreSQLAuth0Azure Container Apps
view live →
// nightlife & event ticketing

Vibaze

A nightlife and event ticketing platform built end to end, with role-separated access through Auth0 (Auth Code + PKCE), media on Azure Blob Storage, the frontend on Cloudflare Pages behind Cloudflare WAF, and infrastructure in Bicep.

.NET 8EF CorePostgreSQLReact 18Tailwind / shadcnBicep
view live →
// DJ business management

EventPilot

A business-management app for DJs, built API-contract-first: one OpenAPI spec generates both the Go server types and the React TypeScript SDK, with a make verify gate in CI and deployment on Fly.io.

GoOpenAPIReactTypeScriptFly.io
view live →
#

Research

publication
// ACM FPGA '20 · University of Rochester, Horizon Lab

Energy-Efficient 360-Degree Video Rendering on FPGA via Algorithm-Architecture Co-Design

Co-author, ACM/SIGDA International Symposium on Field-Programmable Gate Arrays (FPGA 2020). The co-designed renderer cut 360° video rendering energy by 55% versus a mobile GPU at the same frame rate, with no perceptible quality loss. View publication →

open for new engagements · booking now

$ want results like these?

Bring me the hard problem. You'll get a personal reply within one business day.