Software Development Engineer Ii
CurrentSoftware engineer for AWS Identity & Access Management group working in the authentication space for root, IAM user, and Single Sign-On (SSO) users.Designed and implemented secure authentication model for vending customer sessions to AWS consoles using ephemeral credentials.Designed and developed secure browser cookies using asymmetric signing/encryption methods and JSON web token open standards. Built extendable framework for managing signing/encryption keys. Designed and implemented fraud detection and prevention mechanisms in account registration. Developed a new SSO feature for customers to use a single login across AWS applications and services. Launched account registration service and infrastructure in new AWS China region. Implemented email domain controls feature in account registration and management for AWS Organizations. Achieved continuous deployment initiative to meet operation excellence goals of rapid code deployments, automated testing, and service monitoring. Received AWS Identity & Access Management group Wombat Award for tenacity while developing novel automated testing framework for phone verification workflow in account registration. Regularly held 24/7 on-call rotation supporting operational issues and customer support cases.