Resume (Markdown)

Rendered directly from resume.md

Muhammad Moiz

Backend Engineer — Async Python, Multi-Tenant Postgres, OAuth/OIDC Identity

📧 Email: moizcs059@gmail.com
🔗 LinkedIn: linkedin.com/in/moizofficial
💻 GitHub: github.com/MuhammadMoiz20


🎓 EDUCATION

Dartmouth College

Hanover, NH | Expected Aug 2026

B.S. in Computer Science and Engineering

Awards & Achievements

  • 🏆 Faculty Citation — Top 1% in CS 52 (Full-Stack) and CS 76 (AI)
  • 🥇 Winner, IvyHacks 2025 (1st of 50)

Teaching

  • Lead Teaching Assistant, CS 52 Full-Stack
  • Teaching Assistant, CS 59 Programming Languages
  • Mentored 100+ students

💼 EXPERIENCE

Software Engineer, Auth & Identity

Evergreen | Hanover, NH | Jan 2026 – Present

  • Owned migration off Firebase Auth to an OIDC/JWKS authentication layer, unifying SSO across Cognito (dev/staging) and Dartmouth CAS (prod) behind a single middleware with verified issuer and audience claims.
  • Designed multi-account Google Calendar integration with per-account OAuth tokens, tenant-safe refresh-failure semantics (revoked vs. transient), and cross-account event deduplication under parallel fan-out fetch.
  • Hardened the internal service-to-service REST API with timing-safe key comparison, zero-downtime key rotation, and per-route caller authorization; eliminated a class of replay and cross-service auth bugs.

Software Engineer, Integrations & Ingestion

Link VT | Burlington, VT | Oct 2025 – Dec 2025

  • Hardened Calendly OAuth against duplicate-code race conditions end-to-end with PKCE and an idempotent server-side authorization-code cache; debugged the upstream content-type mismatch blocking token exchange.
  • Built role-gated S3 file ingestion for the resource library serving 120 coaches managing 800 patients: MIME allowlisting, size caps, sanitized object keys, and cascading cleanup on resource deletion; shipped a type-safe upload client with progress UX.
  • Built a periodic content-monitoring scraper coordinated by a MongoDB-backed distributed lock, with content-hash diffing, depth-limited crawls, and a sticky review state machine surfacing actionable changes only.

Software Engineer, Developer Tools

Coursera × Dartmouth | Hanover, NH | Aug 2025 – Oct 2025

  • Owned the autograder for a Dartmouth–Coursera MOOC: Docker-packaged Cypress grader with AES-256 encrypted submissions and configurable spec filtering, plus React/Express/MongoDB lab templates and a 16-test suite used by 800+ enrolled learners.

Software Engineering Intern (Returning)

Muff Manufacturing | Manchester, UK | Jun 2025 – Aug 2025

  • Built Drape's async image-gen pipeline: FastAPI uploads, Celery workers, S3 confirmation gate fixing a done-before-upload race; 65s avg, 60% approval (mannequin 72%, model 48%) on 18-SKU pilot.
  • Designed the reviewer UI with side-by-side comparison and per-variant approve/reject persisted to Postgres; replaced manual SSH+rsync deploys with a GitHub Actions Docker workflow that builds and deploys on merge to main.

Backend Developer Co-op (Part-time)

Rauner Digital Archive | Hanover, NH | Aug 2024 – Mar 2025

  • Built three Python archival scrapers for Rauner — Dartmouth News (date-range, 50-word PDF gate, image-captions), Instagram (Instaloader collages), YouTube (Data API v3) — each with retry, rate-limit, dedup.

Software Engineering Intern

Muff Manufacturing | Manchester, UK | Jun 2024 – Aug 2024

  • Built FloorView, a factory-ops dashboard (FastAPI, React, Postgres) with an append-only stage-transition audit log; used daily by 8 staff, replacing spreadsheet and whiteboard tracking on launch.

🚀 PROJECTS

Digital Simple — Multi-Tenant Archival-Ingest SaaS

Tech Stack: FastAPI, Next.js, PostgreSQL (RLS), arq + Redis, S3, BagIt

  • Designed a multi-tenant archival-ingest SaaS: PostgreSQL Row-Level Security guarantees zero cross-tenant access; arq + Redis async jobs treat Postgres as source of truth, with deterministic keys and lease-based ownership for orphan recovery.
  • Shipped a format-migration pipeline (TIFF → JP2, AVI → MKV) with pluggable adapters and validators, Siegfried-based format identification, and a PREMIS-aligned audit trail; covered by a 293-test pytest suite.

Moji-Proctor — Tamper-Evident VS Code Coursework Integrity Tool

Tech Stack: TypeScript, Express, Prisma, PostgreSQL, GitHub OAuth Device Flow

  • Designed a tamper-evident VS Code coursework integrity tool with a cryptographically chained event log, device-key signing, and an explicit privacy boundary: no source, file contents, or diffs leave the editor.
  • Built the ingestion server with batched event endpoints, idempotent document IDs so workflow re-runs overwrite rather than duplicate, JWT refresh-token rotation, and pluggable persistence backends.

Classmoji — Open-source Dartmouth CS Classroom Tool

Tech Stack: TypeScript Monorepo (Contributor)

  • Authored the notifications system and GitHub repo-analytics layer (scheduled + on-demand refresh, contributor-link mapping, per-submission anomaly indicators); led the TypeScript migration across eight workspaces, adopted as the active line.

🛠️ TECHNICAL SKILLS

Languages

  • PythonTypeScriptJavaScriptJavaCC++SQL

Backend & Distributed Systems

  • FastAPI, Node.js, Express, REST APIs, Celery, arq, Redis, Docker

Data & Identity

  • PostgreSQL (RLS), MongoDB, Alembic, Prisma
  • OAuth 2.0/OIDC, JWT/JWKS, PKCE, SSO (Cognito, CAS)

Tooling & CI/CD

  • GitHub Actions, AWS (S3), Pytest, Git

👥 LEADERSHIP & INVOLVEMENT

  • 🎓 President, Dartmouth Alpha Lambda Mu
  • 🌟 President, Roots IVY Alum CS Society
  • 🚀 Founder, Young in Tech Pakistan

Last updated: May 2026