Software Engineer 1 · Imagine Learning
Backend and Platform Services · C#/.NET · AWS · Agentic AI (n8n, RAG, Langchain, Harness)
- Token Vault: OAuth token proxy for credential security. Part of the team responsible for Token Vault, a standalone OAuth token-proxy microservice built with C#/.NET on AWS Lambda, DynamoDB, KMS, SQS/SNS that isolates long-lived provider credentials from consuming services. Working within this team's ownership as I move into full accountability for the service's reliability and rollout. A core part of the auth layer serving 20M+ users nationally.
- Secure long-lived credential storage for integrations. Part of the team accountable for the credential-storage design that keeps OAuth refresh tokens for Google Classroom and other providers encrypted through AWS KMS and never exposed outside the vault boundary. Working alongside this team as I take on ownership of the pattern across current and future integrations. Foundational to how the platform protects educator and student data at scale.
- OTK v2 migration: Registration and ERT APIs. Part of the team responsible for migrating Registration and ERT API workloads onto OTK v2, including CQRS-based service endpoints and MongoDB Atlas access patterns. Working within this ownership as I step into the migration effort directly, toward a more scalable and observable foundation for nationwide authentication services.
- Caliper event consumers for roster/deactivation propagation. Part of the team owning the event-consumer layer that processes Caliper-spec events through Kinesis/SQS to propagate roster updates and deactivations downstream. Working within this ownership as I take on the pipeline, including its dead-letter queue and replay safeguards. Keeps access and roster state synchronized in near real time across the ecosystem.
- Google Classroom / DAGS integration. Part of the team responsible for the Google Classroom integration into Readiness DAGS: OAuth 2.0 authorization code flow, OIDC launch, and automated grade passback. Working within this ownership as I take on the integration directly. Keeps teacher gradebooks and classroom rosters in sync without manual work.
- Rostering support across multiple ingestion channels. Part of the team responsible for rostering support across Clever, ClassLink, SFTP, and CSV import paths, monitored via New Relic, Grafana, and OpenSearch. Working within this ownership as I take on operational responsibility directly. Ensures rostering data stays reliable across a wide range of district data sources.