Tim Mccormack Email & Phone Number

Arlington, Virginia, Us

Python developer on platform architecture team responsible for development velocity and developer experience improvements on the edX platform. 20% time as member of engineering security working group.• Increased development velocity and reduced time-to-production and time-to-recovery across the platform by improving tests, development tools, dependency management, code ownership tracking, and deployment configuration.• Diagnosed and fixed complex authentication, performance, and deployment bugs in a large open-source Python platform (Open edX)• Reduced coupling between services through design and development of an extensible event bus• Proactively improved platform security: Advocated for, designed, and directed a Pwned Passwords integration to prevent credential stuffing attacks; wrote and deployed smarter IP address handling for rate-limiting; performed security-focused code reviews for multiple teams; identified and tracked known risks; improved secrets rotation practices.• Triaged, investigated, and remediated vulnerabilities from internal and external security reports; managed and participated in incident response.

Full-stack developer responsible for API architecture, design, development, deployment, support, and high-availability operation; worked in small mixed-remote teams to build out features and new services in Clojure while seamlessly migrating a legacy monolith to microservices in the cloud.• Developed and maintained a high-load (10,000 queries/s) video playback metadata API, including a diverse collection of authorization and restriction mechanisms, to move traffic off of a legacy service• Developed OAuth service handling 20 million auth requests per day• Served as engineering liaison to Security and security advisor to Engineering; was frequently consulted to assess vulnerability reports from security auditors and independent researchers; secured core services by proactively hunting vulnerabilities and giving talks on secure development practices at Engineering-wide sessions, drawing from real examples in our code and infrastructure• Improved operational reliability of services by implementing and promoting changelogs, architecture reviews, and Five Whys incident analysis• Independently designed and built an adaptive load balancer to provide high availability in the face of an unreliable database cluster• Mentored developers in software design, development, and operation

• Developed a full-stack web application in Java for searching and filtering document corpora, which showcased new text analysis techniques to potential customers and served as a base for custom solutions• Modernized document analytics and name indexing codebases, improving build tools, documentation, and code organization for faster iteration