Phillip Jan Moran

Solutions Library

• Enhanced an existing system with managerial features including user roles, access restrictions, and per-user analytics.
• Built a File Health Checker Tool to optimize file management and detect issues.
• Built a File Transfer Tool for extensive file import options.
• Improved analytics, search, and security workflows — added offline screenshot detection with auto-lockout and admin alerts.
• Streamlined user inquiry forms and UI terminology for clarity.
• Upgraded manual access based on roles and added version control for Admin/Superadmin.
• Implemented user-facing Privacy Policy for compliance.

Automated Insurance Verification Platform

• Overhauled the project architecture and implemented core features for insurance verification.
• Built FastAPI backend serving a multi-tenant organization onboarding internal endpoints.
• Created unified schemas using Pydantic (Python) and TypeScript for consistent validation across backend and frontend.
• Developed reusable frontend components and shared modules to improve code maintainability.
• Implemented dynamic forms to support complex, large-scale schemas.
• Established a base theme and unified UI patterns across the application.

PagerDuty Replacement

• Architected and deployed a serverless PagerDuty alternative using Cloudflare Workers and D1 database, supporting multi-tenant incident management with automated escalation policies, on-call schedules, and multi-channel notifications (email, SMS, push, voice).
• Built comprehensive incident lifecycle system enabling triggered, acknowledged, resolved, and suppressed states with real-time notification delivery, retry mechanisms, and complete audit logging across all incident events.
• Developed full-stack application with Next.js web dashboard and React Native mobile client, featuring role-based access control (superadmin/admin/user), team management, and service monitoring with granular permission controls.
• Implemented AI-powered documentation search using Ollama LLM (llama3.2:3b) and Cloudflare Vectorize for 768-dimensional vector embeddings with nomic-embed-text, enabling intelligent incident response guidance and knowledge retrieval.
• Designed normalized database schema supporting organizations, teams, users, services, escalation policies with automated routing rules, schedule layers for on-call rotations, and notification response tracking across multiple channels.
• Created RESTful API with authentication middleware, admin controls, and comprehensive endpoints for incident CRUD operations, escalation policy management, team member assignments, and notification retrieval/retrigger capabilities.

Ad Player & Emulator for Mashgin SMCO Machines

• Improved code quality and compliance by resolving SonarQube violations and implementing stricter coding standards, including TypeScript strict mode configurations and readonly modifiers to enhance type safety and maintainability.
• Led knowledge transfer initiatives by creating technical presentations and Confluence documentation explaining the project system architecture, helping colleagues understand the ad player functionality and DevOps workflows.

VerifyIQ Portal — multi-tenant provisioning & management platform

• Co-architected the multi-tenant provisioning platform that onboards financial-services tenants onto our AI-powered document fraud detection product end-to-end, from cloud infrastructure to per-tenant feature configuration.
• Drove the shared Cloud SQL migration: replaced one database server per tenant with region-matched shared tiers, moved 18 live backends with zero downtime, and retired 20 servers and 33 orphan secrets.
• Consolidated four repositories into a single Nx monorepo (8 apps, 10 libs), extracting shared auth, NestJS, and frontend libraries with gates that stop cross-app drift.
• Cut the PR pipeline from 26 to 12 minutes and made deployments fail loudly on migration errors.
• Led security hardening across the stack: dependency CVEs, PII redaction in error monitoring, endpoint access control, API-layer feature flags and SAST remediation.
• Repaired the tamper-evident audit log and the admin session lifecycle.
• Shipped core tenant flows (application intake, document upload, PDF preview) feeding our LLM-based fraud pipeline, and the shared component library used by both frontends.

Boost Library — internal Claude marketplace, knowledge hub and MCP gateway

• Designed and built an internal marketplace distributing Claude plugins, skills, and MCP servers to engineering teams from a single catalog.
• Built MCP servers exposing internal systems as governed tools, plus a tool builder that turns any internal HTTP service into a typed MCP tool.
• Made the gateway harness-agnostic: plugins, skills, and agents served as MCP prompts and resources to any MCP client, with the catalog answering per-plugin and per-file whether a toolkit runs in the client you actually use.
• Built the knowledge hub replacing ClickUp Docs and Confluence: one page tree across team, repository and product spaces, per-space roles, and an activity log merging page revisions with the audit trail behind a single cursor, filtered per viewer.
• Replaced per-engineer API tokens with one-click OAuth across ClickUp, GitHub and Google Workspace/Cloud: popup consent, refresh tokens in the managed vault, per-person grants so every tool call still runs as the engineer who triggered it.
• Drove production hardening: real OAuth client, managed secrets, CSRF state protection, least-privilege IAM, surface-based entitlements, and per-provider domain allowlists in the tool gateway.

AI Harness (Hermes-based)

• Building an autonomous coding harness on the Hermes agent that takes a ClickUp ticket from assignment to opened PR.
• Shipped the first slices: scheduled ticket-to-repo mapping, an MCP bundle that lets the agent open PRs, and a web front-end with a human approval gate for dangerous tool calls.
• Wired it into ClickUp MCP and GitHub so the loop closes without manual handoff.

Boost Modules — published private design system and shared package

• Stood up the company's shared package registry: an Nx workspace publishing versioned packages privately to npm with lint-enforced module boundaries.
• Unified two drifted UI forks into one tokens package (three brand themes) and a 27-component library, documented in Storybook.