Type - A security-certified admin console for an air-gapped secure-communications environment. Users, groups, organizations, licenses, statistics.
My role - Primary engineer on almost the entire application.
Stack - Vue 3, Pinia, Vite, Tailwind, Vitest, Playwright, Docker, CI.
1,900
users in one bulk edit
~50
contacts per user
2y
on the platform
What I worked on
- Almost the entire application
- Auth, session, and network layer - CSRF, error handling, idle timeout, multi-tab coordination
- Content Security Policy and frontend security hardening
- RBAC permission system
- The whole admin CRUD surface
- Bulk editing at real customer scale
- A major performance re-architecture of the heaviest feature
- Reproducible, air-gapped builds and CI
The hardest problem
- Bulk editing froze at ~1,900 real users.
- I re-architected the state management from the ground up. Smooth at full scale now.
What I've learned
- Happy-path-first creates debt that surfaces in production. I turned one incident into guardrails.
- Performance is a design decision, not an optimization pass.
- In a certified, air-gapped environment, delivery is part of the engineering.
- Security belongs on the server. The frontend is honest UX around it.