maxstashAbout
Software Engineer at Fidelity Investments, working across platform and cloud infrastructure, from API design and Kubernetes orchestration to the front-end interfaces on top.
Fidelity Investments
Software Engineer
Apr 2024 - Present
- Engineer on a platform team provisioning cloud-based IDEs on AWS (VSCode, JupyterLab, RStudio, Airflow) for over 3,000 users spanning quantitative development, machine learning, and prototyping.
- Drove the migration from EC2 to EKS with async Spring Boot endpoints and Kubernetes Java Client integrations orchestrating pod lifecycle, cutting IDE spin-up time from 15 minutes to 2 and infrastructure costs by 20%.
- Integrating a new firm-wide AI gateway built on Go and Envoy AI Gateway with an existing org-specific gateway, covering multi-provider LLM routing, token-based rate limiting, and per-tenant quota enforcement.
- One of the primary escalation points for platform reliability, on-call in and out of rotation, debugging incidents across EKS, EC2, shared filesystems (S3, EFS, NetApp), Jenkins pipelines, and the frontend.
- Owned self-service EC2 and EKS configuration profiles and bring-your-own IAM role, adopted by over 60% of users.
- Rewrote the Angular frontend from Bootstrap to PrimeNG across 750+ files, split oversized modules into standalone components, consolidated duplicate components and SASS into shared libraries, fixed XSS vulnerabilities, and cut the main bundle size 46%.
Associate Software Engineer
Jan 2023 - Apr 2024
- Led development of a patent-pending full stack automated deployment tool that ingests OpenAPI specs from SwaggerHub, generates Spring Boot scaffolding, and deploys to Azure Kubernetes Service through a programmatically created Jenkins pipeline, reducing deployment time from 3 days to under 45 minutes.
- Mentored two engineering interns through their projects, both of whom received return offers.
Squares
Go · React · Kubernetes
A full-stack real-time football squares platform: a Go and Gin REST API behind a React and TypeScript front end, deployed to my self-hosted Kubernetes cluster through GitHub Actions and Argo CD. It implements a contest state machine, automated winner calculation, NATS pub/sub for horizontally scaled WebSocket broadcasting, Google and GitHub sign-in through Dex, and PostgreSQL persistence with GORM, instrumented end to end with Prometheus, Grafana, and Loki.
Everything I build runs on a self-hosted k3s cluster: Envoy Gateway routing every app through one front door, Dex federating Google and GitHub sign-in, highly available PostgreSQL, NATS messaging, and a full Prometheus, Grafana, and Loki observability stack. Argo CD keeps the cluster in sync with Git, so reusable Helm charts and GitHub Actions workflows release every app the same way. Sealed Secrets lets secrets live safely in the repo, Renovate keeps dependencies current, and system-upgrade-controller and kured handle k3s upgrades and coordinated rolling node reboots. The infrastructure around it is code too: Terraform runs through GitHub Actions to manage S3 remote state, Cloudflare DNS and edge security, and GitHub repo settings.
A React 19 app prerendered to static HTML with React Router framework mode, so every route ships real markup and then hydrates. Styled with Material UI and Emotion on a themed token set with persistent light and dark modes. Containerized with Docker behind NGINX, packaged into a Helm chart, and deployed to my Kubernetes cluster through the same reusable GitHub Actions and Argo CD pipeline that ships every other project here.
Elon University
2018 - 2022
B.S. Computer Science, Data Science Minor · Elon, NC