Security & identity
Designing Identity Across Applications, APIs and Automation
Representative engineering work
Supporting people and machine-driven integrations without collapsing them into one trust model.
Context
Representative engineering work from the MicroSecure platform, which combines interactive accounts, linked OAuth providers, role-aware application access, and scoped API keys for automation.
Challenge
Browser sessions, external identity providers, administrative workflows, and automated integrations all needed access to the same platform without sharing credentials or identical privileges.
Engineering Approach
Separate interactive and machine access paths, centralize authorization decisions, and reuse the same domain services after identity has been established.
Architecture / Technical Decisions
JWT-backed sessions support application access; OAuth provider flows handle external account identity; API keys carry explicit scopes for automation. Route middleware and service boundaries keep authentication separate from business operations.
Continue through the system
View all workReliability engineering
Diagnosing a Cross-Layer Production Problem
Investigating intermittent failures across application, data, platform, network, storage, and infrastructure boundaries.
Software Modernization
Modernizing Legacy .NET Without a Big-Bang Rewrite
Moving .NET Framework applications toward modern .NET while preserving working business behavior and production continuity.