Jun 2024 – Sep 2025 · 1 yr 3 mos · Gdańsk, Pomorskie, Poland · Remote

• I led security, IT, and infrastructure at a next-gen CRM startup.
• Technologies: TypeScript, Rust, Node.js, React, SQL (Google Cloud Spanner), Pulumi, Kubernetes, Google Cloud Platform

Jun 2021 – May 2024 · 2 yrs 11 mos · Gdańsk, Pomorskie, Poland · Remote

• Auth0 Key and Secrets Management
• Led large scale refactoring projects:
• Implemented key rotation for Auth0 application-level data encryption (20+ services and 10+ databases).
• Deployed a cloud agnostic in-house Key Management Service.
• Centralized application and infrastructure secrets management.
• Closed critical security gaps at scale and without interruption.
• Example: rotation of 1500+ data encryption keys and re-encryption 1B+ database records with zero downtime and no customer impact.
• Auth0 Platform Security
• Defined an 18 month roadmap of container security improvements for the new Kubernetes-based platform to minimize the risk of supply chain attacks and exploitation of known vulnerabilities in container images.
• Led a project to enable and coordinate 5+ platform teams and 10+ service teams to migrate services to new container base images to reduce the container image size and vulnerability footprint, further reducing the risk of exploitation.

Aug 2020 – Present · 5 yrs 7 mos · Remote

• Published online courses to teach developers about building more secure software:
• JavaScript Security: Best Practices
• Securing Your GitHub Project
• React Security: Best Practices

Jan 2018 – Jun 2021 · 3 yrs 5 mos · Gdańsk, Pomorskie, Poland · Remote

• Auth0 Security Insight and Assessment
• Hired and managed an interdisciplinary team: 2 software developers, 2 security engineers, and 2 penetration testers. Defined and executed on a roadmap to build automated asset management and security assessment capabilities to better protect the Auth0 product from external attacks.
• Represented the company in several Open Source security initiatives: OpenSSF Vulnerability Disclosures WG, OpenJS Foundation Cross Project Council, and Node.js Ecosystem Security WG.
• Auth0 Product Security
• Hired and managed a team of 12 security engineers to support 100+ software developers at Auth0. The team supported core feature development to minimize the risk of vulnerabilities, data breaches, and brand damage.
• Launched and managed the Auth0 Bug Bounty and Vulnerability Disclosure programs to build a relationship with the security research community and to improve product security incident response capabilities for Auth0.
• Technologies: OAuth 2.0, OpenID Connect, JavaScript, Node.js, MongoDB, AWS

Jan 2016 – Jan 2018 · 2 yrs · Gdańsk, Pomorskie, Poland · Remote

• Maintained NServiceBus transport and persistence plugins working on top of RDBMS engines. NServiceBus is a leading OSS messaging framework for .NET.
• Coordinated development of product requirements and improving software development processes. Contributed to customer support and marketing by speaking at conferences and meetups.
• Technologies: C#, .NET, MSMQ, RabbitMQ, MS SQL Server, Oracle, AWS, Azure

Aug 2014 – Dec 2015 · 1 yr 4 mos · Gdańsk, Pomorskie, Poland · On-site

• Led the team that ported a legacy 3D CAD application to mobile devices to unlock a new revenue stream for the company. Later the team integrated the ported mobile application with a project management system built by an acquired company. The team was small and consisted of two other staff+ ICs.
• Technologies: C++, C#, .NET, Azure

Dec 2008 – Jun 2014 · 5 yrs 6 mos · Gdańsk, Pomorskie, Poland · On-site

• Intel SGX
• Designed and led the implementation of key management and remote attestation services for the Intel SGX technology. The components were fundamental for Intel to monetize SGX beyond just silicon sales.
• Coordinated protocol specification changes to ensure interoperability across teams (architecture, firmware, OS drivers, SDKs).
• Intel TCS
• Led the implementation of several cryptographic protocols leveraged by multiple products (Intel AT, Intel TCS, Intel IPT) to securely deliver application secrets to chips deployed in the field. Led a team that built and managed PKI infrastructure for hundreds of millions of chips. Contributed to a project that enabled multi-million dollar savings by replacing a 3rd party hardware appliance with an in-house software solution.

Aug 2007 – Nov 2008 · 1 yr 3 mos · Gdańsk, Pomorskie, Poland · On-site

• Developed bespoke business applications for external customers.
• Technologies: C#, .NET, MS SQL Server, SharePoint

Jan 2005 – Jul 2007 · 2 yrs 6 mos · Gdańsk, Pomorskie, Poland · On-site

• Developed an in-memory time series database to replace a legacy RDBMS implementation to scale to millions of time series. Implemented an outlier detection library to improve time series data quality. The library had more statistical tests than existing commercial competitors.
• Technologies: C#, .NET, MSMQ, MS SQL Server