Software Engineer
Exostar
A FedRAMP-certified platform where defense manufacturers exchange Controlled Unclassified Information with their suppliers. First engineering role, on the authorization and tenant-isolation side of the product.
- Eliminated a privilege-retention flaw that let demoted or removed users keep old permissions until logout, by moving authorization from a login-time cookie claim to a live per-request role check.
- Closed a cross-tenant data-leak path by resolving file uploads from the thread's owning organization instead of the uploader's membership.
- Re-architected the tenant-admin permission model across the API, SQL schema, SAML login, and Angular UI, shipped with guarded migrations and ordered rollback.