▸Lead platform developer for OneIDP, Omnicom's enterprise Internal Developer Platform, building shared UI components, application scaffolding, and reusable frontend foundations on Backstage, React, TypeScript, Express, and Material UI, adopted for self-service infrastructure provisioning across all Omnicom agencies worldwide.
▸Extended OneIDP as a governed entry point for AI coding agents via the Model Context Protocol (MCP), applying the same authentication, RBAC, approval-gate, and security controls used by human developers to AI-triggered requests.
▸Built the administration UI for OneIDP's RBAC system, including multi-step role creation and editing, conditional access policies with nested AND/OR logic, and allow/deny permission policy assignment across the platform.
▸Integrated Temporal workflows to route infrastructure requests through governed, RBAC-based management approvals before any resource is deployed, replacing ad hoc email/ticket approvals with a durable, auditable frontend-to-backend workflow with automatic retries and failure recovery.
▸Designed a deny-by-default rendering pattern using async permission-check hooks to prevent unauthorized catalog data from ever reaching the screen, replacing Backstage's default components with permission-checked versions that verify access before rendering any protected links.
▸Architected a React Context and Provider system for multi-tenant scoping across the platform, exposing custom hooks so consumers never call useContext directly, and reused the same shared-state pattern to manage dialog and permission state across the RBAC administration UI.
▸Partner directly with engineering and operations stakeholders across Omnicom agencies to gather requirements, validate workflows, and translate organizational standards into self-service golden path experiences that replace weeks-long ticket-based requests, targeting sub-hour provisioning and 80%+ of all Omnicom builds through OneIDP.
▸Led development of a .NET / C# data synchronization platform maintaining real-time consistency of employee records across Reach, Workday, and Microsoft Dynamics 365 for tens of thousands of employees, using a hybrid batch and event-driven architecture.
▸Engineered a snapshot-based change detection system using EF to read and model employee records from the source HR system, comparing profiles against D365 to identify delta changes and propagating only the differences through dependency-injected, async services, minimizing API load and ensuring data fidelity.
▸Eliminated thousands of help desk tickets by automating up to hundreds of HR record changes per day that previously required manual intervention, reducing resolution time from days to near real-time.
Omnicom
Senior Software Engineer
Jan 2024 – Present · 2 yrs
▸Lead platform developer for OneIDP, Omnicom's enterprise Internal Developer Platform, building shared UI components, application scaffolding, and reusable frontend foundations on Backstage, React, TypeScript, Express, and Material UI, adopted for self-service infrastructure provisioning across all Omnicom agencies worldwide.
▸Extended OneIDP as a governed entry point for AI coding agents via the Model Context Protocol (MCP), applying the same authentication, RBAC, approval-gate, and security controls used by human developers to AI-triggered requests.
▸Built the administration UI for OneIDP's RBAC system, including multi-step role creation and editing, conditional access policies with nested AND/OR logic, and allow/deny permission policy assignment across the platform.
▸Integrated Temporal workflows to route infrastructure requests through governed, RBAC-based management approvals before any resource is deployed, replacing ad hoc email/ticket approvals with a durable, auditable frontend-to-backend workflow with automatic retries and failure recovery.
▸Designed a deny-by-default rendering pattern using async permission-check hooks to prevent unauthorized catalog data from ever reaching the screen, replacing Backstage's default components with permission-checked versions that verify access before rendering any protected links.
▸Architected a React Context and Provider system for multi-tenant scoping across the platform, exposing custom hooks so consumers never call useContext directly, and reused the same shared-state pattern to manage dialog and permission state across the RBAC administration UI.
▸Partner directly with engineering and operations stakeholders across Omnicom agencies to gather requirements, validate workflows, and translate organizational standards into self-service golden path experiences that replace weeks-long ticket-based requests, targeting sub-hour provisioning and 80%+ of all Omnicom builds through OneIDP.
▸Led development of a .NET / C# data synchronization platform maintaining real-time consistency of employee records across Reach, Workday, and Microsoft Dynamics 365 for tens of thousands of employees, using a hybrid batch and event-driven architecture.
▸Engineered a snapshot-based change detection system using EF to read and model employee records from the source HR system, comparing profiles against D365 to identify delta changes and propagating only the differences through dependency-injected, async services, minimizing API load and ensuring data fidelity.
▸Eliminated thousands of help desk tickets by automating up to hundreds of HR record changes per day that previously required manual intervention, reducing resolution time from days to near real-time.