8+ years in solutions or software architecture with hands-on code, for typical modern SaaS backends.
API security fundamentals: OAuth 2.0 / OIDC, JWT issuance and verification, JWKS rotation, and microservices architecture (service-to-service auth, API gateways, zero-trust patterns) — can design these for a system no single team fully owns.
Has co-designed an integration with an external platform team (IdP, cloud, CDN, commerce platform) where neither side owned the whole system.
Threat-modelling and privacy-by-design experience; can write an ADR that engineers actually follow and a sequence diagram a partner can read.
Consulting-grade communication: has led technical working sessions with external engineering teams and translated between executives and builders.