Thomas Herrmann

• Spearheaded the design and execution of a centralized secure attachment system, mitigating a critical unauthorized access risk for legal contracts across the Bloomberg ecosystem.
• Engineered a custom RBAC and audit logging layer to ensure regulatory compliance, transitioning the organization from open internal access to a strictly governed, "least-privileged" read/write model.
• Architected a Federated Module architecture for contracts portal (9 sub-apps), decoupling deployment cycles for 5 pods and eliminating unintentional cross-team rollbacks.
• Established the "Golden Path" migration playbook, enabling 20+ engineers to transition to independent release cycles, reducing deployment friction and eliminating the need for pre-release coordination between pods.
• Founded and chaired the Web Application Security Guild, establishing the organization-wide "Web App Security Best Practices" and evangelized these strategies across the firm through technical presentations.
• Operationalized a security on-call rotation, providing proactive code audits and vulnerability assessments to standardize security posture across all web properties.
• Served as the technical lead for web development, setting best practices, advocating for new technologies, and authoring documentation.

• Led integration of Spec Doctor functionality from a CLI into the SafeChange Console dashboard, enhancing usability and improving workflow.
• Spearheaded migration from PHP/Hack to React/GraphQL, significantly improving application performance and developer experience (devX).
• Founded Configuration Products UX group to build a component library, promoting consistency and fast development across internal apps.
• Optimized C++ and Python API endpoints, drastically improving data querying efficiency for internal dashboards.
• Collaborated directly with product customers to gather requirements, define features, and resolve technical issues.
• Mentored and trained new engineers, including bootcamp and intern hires, fostering a culture of knowledge-sharing and growth.

• Facilitated project updates by creating a multi-selection feature with persistent state for search results, streamlining the user workflow.
• Developed a PHP/Hack script to securely enable cross-platform posting from email to Workplace via a customized Chronos job.
• Crafted a breadcrumbs component for seamless user navigation through projects within the Unigraph dashboard.
• Contributed to the design and development of the modernized Unigraph dashboard and its UI components.

• Architected an internal reporting suite allowing sales teams to rapidly view report data, accelerating workflows and increasing sales.
• Developed a library centralizing common components and boosting development efficiency across engineering teams.
• Defined unit tests with Jest and React Testing Library, focusing on a lightweight, user-centric testing structure.

• Engineered GraphQL prototyping functionality to dynamically generate schemas and resolvers from databases and REST APIs.
• Configured exportable Apollo Servers with GraphQL Playground for developers to test data graphs.
• Managed a team of four engineers, leading daily standups and project management using agile methodology.

• Engineered a full-stack event ticketing system using Next.js and Payload CMS, deployed via Vercel’s global edge network, and built with Shadcn and Tailwind CSS to create a modern user interface.
• Integrated Stripe webhooks to manage secure ticket payments and leveraged Resend API to automate ticket delivery via emails, creating a seamless end-to-end user experience.

SUNY Purchase

B.A. in Journalism

Certification

AWS Certified Cloud Practitioner