Nicholas Nick Mika

About Nicholas Nick Mika

Ambitious Software Engineer committed to formulating innovative solutions to challenges while optimizing processes. Polished in developing and implementing critical application features while maintaining a security-focused mindset. Logical and analytical leader familiar with the OWASP Top Ten, security tools, penetration testing, threat modeling, and relevant security technologies.Before, during, and after writing code, I review my work against OWASPs Top 10/Web Security Testing Guide to check for any relevant areas of exposure and potential flaws in both mine and the surrounding code. I apply the same checks when reviewing my peers’ code during code reviews and design discussions.I am a security practitioner first and an engineer second.I have 8.5 years of experience working at an industry-leading Identity and Access Management provider; thus, I am well-versed in IAM: • Various Identity Stores (LDAP, Active Directory, Azure AD, Cloud Directory) • Automated User Provisioning/Lifecycle Management with Dynamic License Assignment • SSO via SAML, OAuth/OIDC, WS-Fed/WS-Trust • Partner Federation (Allowing authentication somewhere else, applying authorization at the Identity Provider) • Dynamic Multi-Factor Authentication • Mobile Device ManagementI fully designed, implemented, and maintained critical product features from conception to future support.

Experience

1. Software Engineer-ii Platform

   JobNimbus

   Aug 2025 — Present · Lehi, UT, US

   Architected and implemented a Resource JWT authentication system for secure file access across the platform, replacing legacy token-based authentication and improving security posture for file services handling customer documents- Led cross-service migration of admin authentication to Lambda Authorizer headers, coordinating changes across 5+ microservices (auth-backend, jncore-monolith, dotnet-monolith) to standardize authentication patterns- Developed and maintained the auth-backend Lambda Authorizer service in TypeScript, implementing support for multiple principal types including company-only tokens for the Engage product line- Built core authentication infrastructure in.NET including the Auth.ContextTools NuGet package, adding correlation ID propagation for distributed tracing across services- Executed security vulnerability remediation across authentication services, addressing high-severity findings and removing deprecated authentication endpoints- Extended file service authentication in the.NET monolith to support resource JWTs for attachments, invoices, and document templates, enabling secure signed URL generation Contributed to infrastructure-as-code using Terraform for API Gateway configuration and CloudFront routing rules- Collaborated across frontend and backend teams to integrate resource JWT authentication into React applications (invoices-frontend) and Node.js services (document-builder) Technologies: TypeScript.NET/C#, AWS Lambda, API Gateway, Terraform, NestJS, JWT/OAuth, Couchbase, GitHub