# Levi Schuck

me@levischuck.com | Sun Prairie, WI | [https://levischuck.com](https://levischuck.com)

## Summary

Seeking remote leadership role in security or platform engineering. Engineering Manager who secured payment systems and cut oncall incidents by 90%. Reduced workforce cycle times 20x and enabled non-technical QA to deploy independently. Shipped a risk engine that neutralized a card-testing botnet with near-zero false positives. Author of open-source libraries like tiny-cbor (800k+ downloads/wk).

## Experience

### EatStreet — Madison, WI

**Engineering Manager & Team Lead** | Feb 2021 - Present
- Hired and grew a **9-person remote platform team** from junior to autonomous engineers, including performance management and PIPs. Directed platform architecture that cut other teams' build times from **5 min to 15 sec** and gave QA self-service deploys. Project recognized at the executive level.
- Designed an **interchange model** across 5 POS platforms to resolve data incompatibilities. Mentored the team through implementation. **Error rates improved from 30% to under 1%**.
- Built a **real-time risk engine** on Redis to prevent further automated (500 card tests per minute) payment abuse. Profiled timing, account age, and API patterns. **Near-zero false positive rate**.
- Secured **JetBrains AI for every engineer**. Evaluated Copilot and Cursor on own time; identified safe patterns. New contributions started shipping with **test coverage via AI generation**.
- Core monolith took 10–15 min to build and dev environments broke weekly. Directed Docker, build caching, microservice templates, and SPA infrastructure. **Frontend waits fell to seconds**.
- Incomplete captcha coverage and no email verification enabled credential stuffing and bot abuse. Redesigned **unified auth across web, mobile, and restaurants** with OAuth for a key partnership.
- Built a **tokenized payment API** to strengthen card data handling. Directed app teams across mobile and web to migrate. Offloaded card data from infrastructure, **reducing PCI scope**.
- New teams stalled on architecture and deployment. Embedded directly, diagnosed blockers via 1:1s, and built reusable project templates. **New projects launched in days instead of weeks**.
- Built **PCI Level 2 compliance program** from scratch; passed year-over-year QSA audits.
- Deployed **YubiKeys for 50 privileged staff**; enforced WebAuthn policy across OneLogin and AWS.
- Created a **bug bounty program funded by C-level** with severity criteria, SLAs & payouts ≤ **$1,500**.

**Sr. Software Engineer** | May 2017 - Jan 2021
- Owned end-to-end integration for **Order with Google** (Search/Maps food ordering) as a pioneer partner, driving **30%+ of company revenue** for years.
- Scaled order pipeline from single-server to clustered architecture for **3x pandemic traffic surge**.
- Built custom HTTPS infrastructure serving **3,000+ restaurant domains for $60/mo** vs $2,700/mo.
- Rebuilt security after data breach — **bcrypt migration, encrypted bank data**, HaveIBeenPwnd checks.

### Epic Systems — Verona, WI

**Software Developer | Jun 2014 - March 2017**
- Designed HL7 integration for reference lab orders and results, processing **10,000+ tests/month**.
- Represented clinical lab in **cross-org HL7 councils**, aligning report standards for patient safety.

## Education

**Brigham Young University** — B.S. Computer Science - 2014

## Projects

**[tiny-cbor](https://www.npmjs.com/package/@levischuck/tiny-cbor)**
Light weight CBOR encoder / decoder in TypeScript - 800k+ downloads per week and is a dependency of the [Passkey demo by Google Chrome Labs](https://github.com/GoogleChromeLabs/passkeys-demo/blob/85b229598a1076a0d43446ba4a0f75f793cbfb21/package-lock.json#L989).

**[tiny-webauthn](https://webauthn.levischuck.com/)**
WebAuthn and passkey library built from the ground up on web standards.

**[render-html](https://www.npmjs.com/package/@levischuck/render-html)**
Rendering HTML to SVG or PNG on Cloudflare Workers with Yoga, Satori, and ReSVG.

**[JaneTLS](https://github.com/levischuck/janetls)**
Mbed TLS wrapper and more for the Janet programming language.

## Skills

**Programming Languages**
***Expert***: Java, JavaScript, TypeScript; ***Proficient in***: C, Rust, Python

**Databases, Services, and Cloud Infrastructure**
***Expert***: AWS ECS & Fargate, IAM, KMS, Route53, Secrets Manager, Systems Manager, SQS, CDK, Cloudflare Workers
***Proficient***: AWS ACM, CloudFormation, Cloudwatch Logs, Events, Alarms, Elastic Load Balancing, Lambda, Lambda@Edge, SNS, Let's Encrypt ACME, MySQL, Redis
***Competent***: AWS DynamoDB, CloudFront, PostgreSQL

**Other Technologies**
Git, Atlassian Jira, Confluence, GitHub, Mac, Linux, Docker, IntelliJ, VS Code, Cursor, Claude, AWS CDK, Vite, React, OAuth, OpenID Connect, Zebra ZPL, Epson ESC/P, WebSerial, WebUSB

## Awards

**Eagle Scout** (2010)
Boy Scouts of America
Organized and led 20 people in a project to restore a historic cemetery from the civil war era.

## Charity

**Two Ferrets 501(c)(3) - EIN 88-2475838** — 2022 - Present

As Director of Technology for a $130k/yr non-profit, I architected the online and on-site infrastructure for a convention of 2800. This included direct reporting to the board of directors, annual budgeting, spending authority, and managing a team of 6. We've raised $122,000 in charity for a local domestic animal welfare organization since I joined the mission.

## Publications

**[Pre-Release reviewer for LATKE: A Framework for Constructing Identity-Binding PAKEs](https://dl.acm.org/doi/10.1007/978-3-031-68379-4_7)** (2023)

**[Pre-Release reviewer for Base64 Malleability in Practice](https://dl.acm.org/doi/10.1145/3488932.3527284)** (2022)

**[Technical Editor for The Rook's Guide to C++](https://rooksguide.org/)** (2013)