- Own full-lifecycle delivery across client platforms — discovery, UX, architecture, build, maintenance
- Built the LSAD Graduates platform (Lovie Award winner) and the “Housing Unlocked” campaign site (~25,000 visits)
- Rebuilt a national platform integrating WordPress, a Dynamics CRM, payments, and an LMS — worked directly with the CRM vendor’s engineers
- Independently detected and remediated two live malware incidents, with no in-house security team
GDPR-relevant vulnerability — found & permanently fixed
Identified a live, GDPR-relevant vulnerability — a recurrence of an issue previously reported by the Data Protection Commission. Root-caused and permanently patched it, then proactively audited a second platform and pre-emptively fixed the same flaw before it could be exploited there.
Live malware compromise — detected & fully remediated
Identified a live compromise on a client site — disguised backdoor files and a rogue admin-account creation exploit. Traced the entry point, removed the malicious code, and implemented preventative hardening (including bot protection on public forms), with no in-house security team to lean on.
Malicious script injection — traced & closed
Diagnosed a hidden script injection buried in a site’s navigation markup — the kind of attack vector most routine audits miss entirely. Traced the injection point and confirmed full removal through hosting-level forensics.
Lovie Award — LSAD Graduates platform
Built and shipped the platform that won this award, alongside a national campaign site (“Housing Unlocked,” built with the Irish Architecture Foundation and The Housing Agency) that drew close to 25,000 visits.
ECI Platform Rebuild
CRM integration with zero reference implementation
Built a working API client against a vendor’s system from spec alone, with no working example to build from. Got two of the vendor’s own server-side bugs fixed by working directly with their engineering team, and corrected a live data field-mapping issue on the way.
~5,000 groups, ~5,800 accounts migrated — zero data collisions
Migrated a live dataset between two independently-built platforms, matching records on real-world business identifiers to eliminate ID-collision risk between two source databases that had never been designed to talk to each other.
Cross-account data leakage — made impossible, not just tested for
Designed the access-control model for a compliance training platform so that one member account structurally cannot reach another’s data — a property of the architecture itself, not a rule enforced after the fact by testing.