– present
enCodePlus
Remote
Senior Software Engineer
Primary engineer for the SaaS platform that 200+ cities and counties use to draft, codify, and publish zoning, land-development, and municipal codes; author of roughly 95% of code changes since joining.
- Platform re-architecture: Leading the rebuild of the legacy VB.NET Web Forms application as an ASP.NET Core (.NET 10) REST API and a Vue 3 + Vuetify + TypeScript front end, orchestrated with .NET Aspire. Includes a scripted SQL Server-to-PostgreSQL data migration with per-client databases, Entra ID sign-in with JWT-secured APIs, and 30+ rich-text editor plugins ported from CKEditor 4 to HugeRTE.
- Engineering standards on the new stack: GitHub Actions CI with Semgrep SAST, gitleaks, dependency audits, and Dependabot; coverage ratchets; Testcontainers database tests; Vitest and Playwright suites; and Stryker mutation testing. The new test tiers caught real data-loss bugs. Section export is 3–7x faster (PDF 108 s to 31 s) with a content-addressed export cache.
- AI services: Designed and shipped a multi-tenant .NET 10 service that exposes each jurisdiction’s published code to AI agents through the Model Context Protocol and powers an embeddable Azure OpenAI chat assistant on public code sites. Per-tenant API keys, rate limiting, and Key Vault–managed secrets let one deployment serve every client.
- Production readiness: Hardened that service with Polly retries and circuit breakers, OpenTelemetry tracing in Application Insights, health checks, an Entra ID–secured admin console for tenant onboarding and key rotation, and staging-slot deployments with a gated production swap.
- Performance: Rewrote hot paths in the HTML-to-Word export engine (eliminated an O(n³) section scan, added caching, batched layout passes) and confirmed the output was byte-identical before and after every change.
- Quality & security on the current platform: Built Azure DevOps pipelines with precompile gates, SAST/SCA and secret scanning, SonarQube, and cross-tenant Playwright smoke tests; grew unit tests from 105 to 705; created a tiered penetration-testing harness (OWASP ZAP, ffuf, Nikto) that keeps active scans off production.
- Accessibility & reach: Led WCAG/ARIA remediation and VPAT support for public code sites, including a CLI tool that applies accessibility fixes across hundreds of client sites at once. Added multilingual publishing with Google Cloud Translation.
- Document workflows: Round-trip tracked changes between the web editor and Microsoft Word; AI-ready exports; CloudWriter, WebPlan, and Knowledge Advisor features.