Muhammad Moiz

Hanover, NH

• Owned migration off Firebase Auth to an OIDC/JWKS authentication layer, unifying SSO across Cognito (dev/staging) and Dartmouth CAS (prod) behind a single middleware with verified issuer and audience claims.
• Designed multi-account Google Calendar integration with per-account OAuth tokens, tenant-safe refresh-failure semantics (revoked vs. transient), and cross-account event deduplication under parallel fan-out fetch.
• Hardened the internal service-to-service REST API with timing-safe key comparison, zero-downtime key rotation, and per-route caller authorization; eliminated a class of replay and cross-service auth bugs.

Burlington, VT

• Hardened Calendly OAuth against duplicate-code race conditions end-to-end with PKCE and an idempotent server-side authorization-code cache; debugged the upstream content-type mismatch blocking token exchange.
• Built role-gated S3 file ingestion for the resource library serving 120 coaches managing 800 patients: MIME allowlisting, size caps, sanitized object keys, and cascading cleanup on resource deletion; shipped a type-safe upload client with progress UX.
• Built a periodic content-monitoring scraper coordinated by a MongoDB-backed distributed lock, with content-hash diffing, depth-limited crawls, and a sticky review state machine surfacing actionable changes only.

Hanover, NH

• Owned the autograder for a Dartmouth–Coursera MOOC: Docker-packaged Cypress grader with AES-256 encrypted submissions and configurable spec filtering, plus React/Express/MongoDB lab templates and a 16-test suite used by 800+ enrolled learners.

Manchester, UK

• Built Drape's async image-gen pipeline: FastAPI uploads, Celery workers, S3 confirmation gate fixing a done-before-upload race; 65s avg, 60% approval (mannequin 72%, model 48%) on 18-SKU pilot.
• Designed the reviewer UI with side-by-side comparison and per-variant approve/reject persisted to Postgres; replaced manual SSH+rsync deploys with a GitHub Actions Docker workflow that builds and deploys on merge to main.

Hanover, NH

• Built three Python archival scrapers for Rauner — Dartmouth News (date-range, 50-word PDF gate, image-captions), Instagram (Instaloader collages), YouTube (Data API v3) — each with retry, rate-limit, dedup.

Manchester, UK

• Built FloorView, a factory-ops dashboard (FastAPI, React, Postgres) with an append-only stage-transition audit log; used daily by 8 staff, replacing spreadsheet and whiteboard tracking on launch.