- Own full-lifecycle delivery across client platforms: discovery, UX, architecture, build, maintenance
- Work within a Git-based development workflow with CI/CD pipelines for review and deployment
- Led the build of the LSAD Graduates platform (Lovie Award and Webby Award winner), including ongoing development since launch; also worked on the “Housing Unlocked” campaign site (~25,000 visits)
- Rebuilt a national platform integrating WordPress, a Dynamics CRM, payments, and an LMS. Worked directly with the CRM vendor’s engineers
- Regularly detects and remediates live security incidents (hacks and attacks), including a GDPR-relevant vulnerability, with no in-house security team
Highlights
GDPR-relevant vulnerability, found & permanently fixed
Identified a live, GDPR-relevant vulnerability: a recurrence of an issue previously reported by the Data Protection Commission. Root-caused and permanently patched it, then proactively audited a second platform and pre-emptively fixed the same flaw before it could be exploited there.
Live malware compromise, detected & fully remediated
Identified a live compromise on a client site, disguised backdoor files and a rogue admin-account creation exploit. Traced the entry point, removed the malicious code, and implemented preventative hardening (including bot protection on public forms), with no in-house security team to lean on.
Malicious script injection, traced & closed
Diagnosed a hidden script injection buried in a site’s navigation markup, the kind of attack vector most routine audits miss entirely. Traced the injection point and confirmed full removal through hosting-level forensics.
Lovie Award & Webby Award, LSAD Graduates platform
Led the build of the platform that won both awards, and have continued developing it since launch. Also worked on a national campaign site (“Housing Unlocked,” built with the Irish Architecture Foundation and The Housing Agency) that drew close to 25,000 visits.
CRM integration with zero reference implementation
Built a working API client against a vendor’s system from spec alone, with no working example to build from. Got two of the vendor’s own server-side bugs fixed by working directly with their engineering team, and corrected a live data field-mapping issue on the way.
~5,000 groups, ~11,000 individual accounts migrated, zero data collisions
Migrated a live dataset between two independently-built platforms, matching records on real-world business identifiers to eliminate ID-collision risk between two source databases that had never been designed to talk to each other. The group structure alone spanned ~5,800 group leaders overseeing the ~11,000 member accounts beneath them.
Cross-account data leakage, made impossible, not just tested for
Designed the access-control model for a compliance training platform so that one member account structurally cannot reach another’s data, a property of the architecture itself, not a rule enforced after the fact by testing.