×
Michael Nuzzo

Michael Nuzzo

Software Engineer

Malden, Massachusetts, US

Background


About

About

A generalist software engineer with experience including DevOps, Application Security, Full Stack, and Backend development.

Work Experience

Work Experience

  • Senior Software Engineer, Moxe Health

    Aug, 2022 - Apr, 20237 months

    Moxe Health specializes in healthcare data exchange between providers and insurance companies. I led a team in maintaining an internal tool and provided application security training and expertise.

    • C#, Python, Powershell, .NET, React.JS, Docker, AWS (DynamoDB, EC2, Lambda), PostgreSQL, Jenkins, Scrum, Snyk

    • Designed and led data refactor to make data more queryable and meet needs of new products while decoupling from other systems

    • Pair-programmed with least experienced engineer on front-end redesign, providing mentorship

    • Resolved incompatibility between open source tools, reducing the overhead of local testing (DynamoDump PR #180)

    • Led prototype effort to understand if off-the-shelf products could replace internal tooling in less than a quarter

    • Worked with product ownership and internal customers on proposals to reduce customer set-up lead times and enable self-service sign-up setting a long-term roadmap

    • Provided security requirements guidance, secure code review, and architecture review to other teams improving the security of new products

    • Performed developer talks on security topics and starting in January, released a regular newsletter on Application Security topics, raising awareness of issues across the engineer org

    • Improved developer setup times in my first week

  • Staff Software Engineer, Datto, Inc (acquired by Kaseya June 2022)

    Oct, 2019 - Jul, 20222 years 9 months

    Datto, Inc provides backup services through Managed Service Providers (MSPs). As an engineer on their SaaS Protection (aka Backupify) product, I worked on features and improved the security of the product.

    • PHP, Scala, Go, Python, Ruby, Puppet, Symfony, Doctrine, Ruby on Rails, Docker, PostgreSQL, MySQL Jenkins, Scrum, BSIMM, Snyk, Rapid7 Insight AppSec

    • Performed major version update of Symfony, improving the security posture of the application

    • Aided DevOps team in writing updated dev environment tooling, enabling faster rollout of OS updates and reducing the costs of maintaining an extended support contract

    • Identified ability to shut off old servers that otherwise would require an extended support contract, reducing costs

    • Performed code review, architecture review, and threat assessments of new microservices across product, reducing the number of security issues identified by the security team or a bug bounty

    • Worked with internal and external pentesters and security auditors

    • Coordinated remediation planning of Log4Shell vulnerability across multiple systems, ensuring rapid short-term and effective long-term response

    • Evaluated, prioritized, and remediated security vulnerability reports bringing new vulnerability responses within SLA

    • Retired old login system, reducing code complexity, maintenance costs, and improving login performance

    • Introduced tooling to provide testing automation to login system, reducing change risks

  • Software Engineer II, Vistaprint/Cimpress

    Aug, 2012 - Oct, 20197 years 1 month

    Vistaprint provides custom printed products through the factories owned by its parent company Cimpress. I started my career here and worked in many different parts of the company.

    • C#, Typescript, Javascript, Java, Powershell, .NET, .NET Core, ASP.Net, React.JS, Node.JS, Sitecore, Puppet, Docker, MSSQL, AWS (EC2, DynamoDB, Lambda, S3), Jenkins

    • Designed new architecture for a unified order routing engine, reducing the number of services needed

    • Led a squad of 2 other engineers and a UX designer for 6 months delivering experimental user experience changes and demonstrating effectiveness of micro-frontends for feature rollout

    • Designed new page component architecture, drastically reducing the developer investment per page type

    • Resolved major performance bug, cutting minutes off of page load time

    • Drove adoption of unit testing in new system, bringing test coverage up over 90%

    • Organized and led a team-wide developer book-club, creating a common knowledge-base and vocabulary

    • Organized a quarterly Lightning Talks series, allowing cross-org knowledge-sharing

    • Implemented proactive caching mechanism at release sites, speeding-up code deploys in remote factory locations

    • Maintained in-house build system which supported hundreds of developers with thousands of integrated C# projects, ensuring timely and accurate build results

Skills

Skills

  • Languages

    C#

    Ruby

    PHP

    Python

    Go

    Typescript

    Javascript

    Powershell

    Java

    Scala

    SQL

  • Technologies

    .NET

    Ruby on Rails

    Docker

    AWS

    PostgreSQL

    MySQL

    Oracle SQL

    MSSQL

    Puppet

    Node.JS

    React.JS

    Jenkins

    Snyk

  • Techniques

    Agile

    Scrum

    Kanban

    Pair Programming

    Mob Programming

    Secure Code Review

    Secure Architecture Review

    Threat Modeling

    Microservices

    Service-Oriented Architecture

Education

Education

  • Software Engineering, Bachelors, Rochester Institute of Technology

    Sep, 2007 - May, 2012

Volunteer Work

Volunteer Work

  • Photography and Enforcement, Games Done Quick

    - Present

    Games Done Quick hosts telethon-like events to raise money for charities. I have volunteered at two of their summer events helping raise money for Doctors Without Borders.

  • Enforcer, PAX East

    - Present

    PAX East is an east-coast convention. I have volunteered at over 5 events guiding guests through included experiences.

Interests

Interests

  • Photography (Digital and Film)

  • Science Fiction and Fantasy

  • Information Security