Projects

Things I have built and owned.

Enterprise platforms first, then the startup years, then the small tools I ship for fun. Each one taught me something the next one needed.

Walmart Global Tech · 2025 – present · Enterprise

Sage — governed agentic analytics

Walmart’s first governed agentic-analytics platform: AI agents turn natural language into row-, column- and attribute-level-secured dashboards. Architected and shipped to production as the sole engineer in ~5 months.

Five-layer security (OAuth2/OIDC → RBAC → RLS → CLS → ALS) enforced on every query by a Data Firewall that parses generated SQL into an AST and rewrites it per viewer.
MCP server exposing certified queries as tools, so agents run analytics under the same access controls as humans.
Java 21 query engine (Virtual Threads, 3-tier BigQuery cache, in-flight dedup): dashboard loads ~20–30s → ~2–3s.
Dashboard Builder with 26 widget types, event-driven pub/sub, cascading variables; LangGraph chat layer with local RAG.
50+ ADRs; OpenTelemetry golden signals, Grafana alerting, Langfuse tracing with PII masking.

Java 21Spring BootPythonFastAPIsqlglotReact 19BigQueryMCPLangGraphOpenTelemetry

Walmart Global Tech · ULearn International · 2025 · Enterprise

HackerOne bug-bounty remediation

An unplanned security programme: 23 in-scope HackerOne + Snyk findings (15 Critical, 8 High) across 7 microservices, closed under a 3-week SLA with zero production incidents.

Re-architected the JWT model: single mint point, server-side RBAC, no trust in client-supplied parameters.
Stood up an 882-assertion SQL-injection regression suite, retained as a permanent CI gate.

JavaSpring SecurityJWTSnykCI gates

Walmart Global Tech · 2022 – 2025 · Enterprise

OIDC SSO for Walmart Mexico (DCP)

OIDC-compliant single sign-on for the Digital Connections Program across Walmart International markets — 1.6M+ user logins at an 82% login rate.

Identity, profile and membership initiatives across Mexico, Canada and Chile.
Chaired the Operational & Engineering Excellence Council (SLIs/SLOs, deployment governance for 20+ services) and the daily Change Council.
Cloud cost optimisation of $6K–$10K/month via custom monitoring models and dashboards.

OIDCOAuth2PingFederateSpring BootKubernetes

Walmart Canada · 2023 – 2024 · Enterprise

Walmart Compliance Adapter (Bill C-64)

Privacy-compliance adapter for Walmart Canada’s Bill C-64 Phase 3, integrating OneTrust for centralised consent management.

Owned Phase 3 delivery end to end; wrote the internal whitepaper on the Privacy Compliance Adapter pattern.

JavaSpring BootOneTrustPrivacy engineering

Applied Materials · 2020 – 2022 · Enterprise

Software Development Accelerator CoE

Code generators, cloud-native and low-code practices, tech-stack standardisation and framework adoption across teams.

Code generationCloud-nativeLow-code

Cognizant · Apple · 2016 – 2020 · Enterprise

Apple customer systems

15+ global projects across customer systems, including the Apple Jobs Portal and contact-centre tools.

JavaEnterprise integrationDelivery leadership

X-ISS Inc. (HealthSignz) · 2014 – 2015 · Enterprise

HPC monitoring & analytics

Architected an HPC cluster monitoring and analytics product used by global HPC customers.

JavaMonitoringAnalytics

Techworks Technologies · 2009 – 2014 · Startup

Antida — distributed P2P file sharing

Flagship product of my own startup: a distributed peer-to-peer file-sharing solution. Alongside it, 50+ published mobile apps, a JavaFX POS and embedded Java middleware.

Founded and ran the company for five years — product, engineering, customers, payroll.

JavaP2PJavaFXAndroidiOSEmbedded Java