avatar

Matthew Wallace
Software Engineer

About Me

As a Senior Software Engineer at Microsoft for 11 years, I honed my expertise in building and safely deploying robust solutions to a large and complex service. I've worked across the cloud, on-prem and hybrid offerings of SharePoint. My experience includes work with federated auth, NTLM, Kerberos, OAuth/OIDC, AD/Azure AD and other technologies.

Looking for

Full time work, preferably full remote or hybrid, but on location in the central/north Austin area would also work well.

Experience

Microsoft Corp.
9/2021 - 9/2024
{
Senior Software Engineer
SharePoint Authentication and Authorization
  • Developed TLS token binding for SharePoint Online authentication cookies, implementing RFC 8705, to enhance security and reduce unauthorized access.
  • Developed Client Proof of Possession for SharePoint Online tokens, implementing RFC 7800, to enhance token security and integrity.
  • Engineered a custom token type for SharePoint Online search crawler, enabling secure data access on more servers and increasing scalability.
  • Managed and maintained the SharePoint Online dependency on Active Directory, reducing service alerts from 25 known repetitive escalations to 2 novel escalations per month and improving reliability to four 9's.
}
Microsoft Corp.
12/2014 - 9/2021
{
Software Engineer
SharePoint Authentication and Authorization
  • Led the development of SharePoint 2016 authentication, backporting 49 features from SharePoint Online, enabling on-time release of a robust feature set despite a short schedule.
  • Deployed and administered four shared test environments representing most customer configurations, allowing other teams to validate interoperability with authentication scenarios.
  • Managed over 20 authentication scenarios combined with 4 authentication modes, including federated and certificate authentication, resolving regressions and backport bugs, ensuring a seamless product and customer satisfaction.
  • Developed SharePoint Online conditional access for unmanaged devices, securing tenant content from local download for 1K initial tenants, now expanded globally. US Patent: #US11625469B2.
  • Developed a modern solution for SharePoint Online partner administration scenario to allow cross-tenant authentication across updated security boundaries utilizing Entra Federated Directory.
}
Microsoft Corp.
8/2013 - 10/2014
{
Software Development Engineer in Test
SharePoint Authentication and Authorization
  • Managed automated tests for a 12-person team, identifying and rehabilitating defunct tests that accounted for over 25% of the inventory, boosting team's check-in confidence.
  • Developed and executed a rigorous test plan to ensure a smooth migration of customer identities from SharePoint BPOS and Active Directory to SharePoint Online and Azure AD.
}

Education

  • Summer 2013

    Double Major (BS) in Computer Science and Applied Mathematics

    Texas State University - San Marcos

Contact

369

Skills

C#
Software Testing
Federated Authentication
OAuth & OIDC
Shell scripting (BASH/PowerShell)
GNU/Linux
Entra & Azure Active Directory
Active Directory
Git
Windows Server & IIS
TypeScript
C/C++
Java
Beginner
Proficient
Expert
Master