Resume (Markdown)
Rendered directly from resume.md
Muhammad Moiz
Backend Engineer — Async Python, Multi-Tenant Postgres, OAuth/OIDC Identity
📧 Email: moizcs059@gmail.com
🔗 LinkedIn: linkedin.com/in/moizofficial
💻 GitHub: github.com/MuhammadMoiz20
🎓 EDUCATION
Dartmouth College
Hanover, NH | Expected Aug 2026
B.S. in Computer Science and Engineering
Awards & Achievements
- 🏆 Faculty Citation — Top 1% in CS 52 (Full-Stack) and CS 76 (AI)
- 🥇 Winner, IvyHacks 2025 (1st of 50)
Teaching
- Lead Teaching Assistant, CS 52 Full-Stack
- Teaching Assistant, CS 59 Programming Languages
- Mentored 100+ students
💼 EXPERIENCE
Software Engineer, Auth & Identity
Evergreen | Hanover, NH | Jan 2026 – Present
- Owned migration off Firebase Auth to an OIDC/JWKS authentication layer, unifying SSO across Cognito (dev/staging) and Dartmouth CAS (prod) behind a single middleware with verified issuer and audience claims.
- Designed multi-account Google Calendar integration with per-account OAuth tokens, tenant-safe refresh-failure semantics (revoked vs. transient), and cross-account event deduplication under parallel fan-out fetch.
- Hardened the internal service-to-service REST API with timing-safe key comparison, zero-downtime key rotation, and per-route caller authorization; eliminated a class of replay and cross-service auth bugs.
Software Engineer, Integrations & Ingestion
Link VT | Burlington, VT | Oct 2025 – Dec 2025
- Hardened Calendly OAuth against duplicate-code race conditions end-to-end with PKCE and an idempotent server-side authorization-code cache; debugged the upstream content-type mismatch blocking token exchange.
- Built role-gated S3 file ingestion for the resource library serving 120 coaches managing 800 patients: MIME allowlisting, size caps, sanitized object keys, and cascading cleanup on resource deletion; shipped a type-safe upload client with progress UX.
- Built a periodic content-monitoring scraper coordinated by a MongoDB-backed distributed lock, with content-hash diffing, depth-limited crawls, and a sticky review state machine surfacing actionable changes only.
Software Engineer, Developer Tools
Coursera × Dartmouth | Hanover, NH | Aug 2025 – Oct 2025
- Owned the autograder for a Dartmouth–Coursera MOOC: Docker-packaged Cypress grader with AES-256 encrypted submissions and configurable spec filtering, plus React/Express/MongoDB lab templates and a 16-test suite used by 800+ enrolled learners.
Software Engineering Intern (Returning)
Muff Manufacturing | Manchester, UK | Jun 2025 – Aug 2025
- Built Drape's async image-gen pipeline: FastAPI uploads, Celery workers, S3 confirmation gate fixing a done-before-upload race; 65s avg, 60% approval (mannequin 72%, model 48%) on 18-SKU pilot.
- Designed the reviewer UI with side-by-side comparison and per-variant approve/reject persisted to Postgres; replaced manual SSH+rsync deploys with a GitHub Actions Docker workflow that builds and deploys on merge to main.
Backend Developer Co-op (Part-time)
Rauner Digital Archive | Hanover, NH | Aug 2024 – Mar 2025
- Built three Python archival scrapers for Rauner — Dartmouth News (date-range, 50-word PDF gate, image-captions), Instagram (Instaloader collages), YouTube (Data API v3) — each with retry, rate-limit, dedup.
Software Engineering Intern
Muff Manufacturing | Manchester, UK | Jun 2024 – Aug 2024
- Built FloorView, a factory-ops dashboard (FastAPI, React, Postgres) with an append-only stage-transition audit log; used daily by 8 staff, replacing spreadsheet and whiteboard tracking on launch.
🚀 PROJECTS
Digital Simple — Multi-Tenant Archival-Ingest SaaS
Tech Stack: FastAPI, Next.js, PostgreSQL (RLS), arq + Redis, S3, BagIt
- Designed a multi-tenant archival-ingest SaaS: PostgreSQL Row-Level Security guarantees zero cross-tenant access; arq + Redis async jobs treat Postgres as source of truth, with deterministic keys and lease-based ownership for orphan recovery.
- Shipped a format-migration pipeline (TIFF → JP2, AVI → MKV) with pluggable adapters and validators, Siegfried-based format identification, and a PREMIS-aligned audit trail; covered by a 293-test pytest suite.
Moji-Proctor — Tamper-Evident VS Code Coursework Integrity Tool
Tech Stack: TypeScript, Express, Prisma, PostgreSQL, GitHub OAuth Device Flow
- Designed a tamper-evident VS Code coursework integrity tool with a cryptographically chained event log, device-key signing, and an explicit privacy boundary: no source, file contents, or diffs leave the editor.
- Built the ingestion server with batched event endpoints, idempotent document IDs so workflow re-runs overwrite rather than duplicate, JWT refresh-token rotation, and pluggable persistence backends.
Classmoji — Open-source Dartmouth CS Classroom Tool
Tech Stack: TypeScript Monorepo (Contributor)
- Authored the notifications system and GitHub repo-analytics layer (scheduled + on-demand refresh, contributor-link mapping, per-submission anomaly indicators); led the TypeScript migration across eight workspaces, adopted as the active line.
🛠️ TECHNICAL SKILLS
Languages
- Python • TypeScript • JavaScript • Java • C • C++ • SQL
Backend & Distributed Systems
- FastAPI, Node.js, Express, REST APIs, Celery, arq, Redis, Docker
Data & Identity
- PostgreSQL (RLS), MongoDB, Alembic, Prisma
- OAuth 2.0/OIDC, JWT/JWKS, PKCE, SSO (Cognito, CAS)
Tooling & CI/CD
- GitHub Actions, AWS (S3), Pytest, Git
👥 LEADERSHIP & INVOLVEMENT
- 🎓 President, Dartmouth Alpha Lambda Mu
- 🌟 President, Roots IVY Alum CS Society
- 🚀 Founder, Young in Tech Pakistan
Last updated: May 2026