This is the anonymized public view. Names, employers, and contact details are hidden. If you were given a personalized link, open it to see the full profile.

@ShrekOverflow avatar

@ShrekOverflow

Product Manager · Developer Platforms

Product manager with a decade of experience across developer success, solutions engineering, competitive intelligence, and product architecture. Deep experience in identity and developer-facing security across OAuth 2.0, OIDC, SAML, CIBA, delegated credentials, and AI-era authorization. This anonymized preview hides employer and contact details; full profile available by personalized link.

Contact hiddenX / @ShrekOverflowGitHub (personal)

Experience

  1. Aug 3, 2026 — Present

    Product Manager

    Developer Platform

    Joining WorkOS as a Product Manager on August 3, 2026.

    • Product Management

  2. Oct 2023 — Jul 2026

    Product Architect II

    Identity & Security Platform

    Moved from competitive intelligence into product architecture, then led Auth0's AI-era platform work across Agent as a first-class principal, Token Vault, Connected Accounts, Auth for MCP, CIBA for agents, Cross-App Access, and Advanced Customizations.

    • Provided technical strategy and architectural input across extensibility, CIAM, and emerging AI-driven identity use cases.
    • Designed and implemented successful migration for mission critical customers to Auth0's new platform.
    • Maintained breadth across OAuth 2.0, OIDC, SAML, and emerging identity standards to inform platform decisions.
    • Designed Auth0's Agent principal as a native identity type for interactive, background, and autonomous agents, avoiding brittle user or service-account shims.
    • Defined a task-scoped, just-in-time authorization model where every tool call is an authorization decision, not a static permission grant.
    • Designed the Cross-App Access (XAA) interoperability layer in Auth0 so agents can operate across third-party services.
    • Authored foundational public thinking on agent authorization: 'Agents Can Either Be Useful or Secure' (Feb 2026) and 'Handling Third-Party Access Tokens Securely in AI Agents' (Nov 2025).
    • Designed Token Vault from the ground up: a user-bound credential delegation model for third-party tokens that eliminates the confused-deputy risk of naive userId lookup patterns.
    • Introduced Connected Accounts as a first-class Auth0 concept — external accounts as delegated-access resources, not SSO providers — enabling 'Connect External Account' flows with platform-level security controls.
    • Designed Auth for MCP across third-party client security, external client provisioning, resource parameter support, and On-Behalf-Of flows; introduced the Custom API Client entity so MCP servers carry verifiable identity into Auth0.
    • Expanded CIBA into a backchannel notification and approval model for long-running agent workflows, separating notification from approval so it works without a native app or Guardian push path.
    • Designed Advanced Customizations for Universal Login: full developer control over the UL experience while preserving Auth0's hosted security model, attack protection, and server-side state machine, with an incremental rollout model.
    • Supported large enterprise deals and guided the most complex customer deployments to go-live.
    • Agent Identity
    • OAuth 2.0
    • OIDC
    • MCP
    • Token Vault
    • CIBA
    • XAA
    • Universal Login
    • Product Architecture
    • Product Strategy
    • Technical Architecture

  3. Nov 2022 — Oct 2023

    Staff Engineer, Competitive Intelligence, Auth0 Product Unit

    Identity & Security Platform

    Continued competitive intelligence leadership after relocating to the United States, expanding scope to Okta's combined product unit.

    • Owned the competitive intelligence function for the Auth0 product unit within the combined Okta organization.
    • Delivered competitive analysis and battle cards across Okta's full product portfolio after the merger.
    • Supported strategic sales engagements and executive briefings with in-depth competitive positioning.
    • Competitive Intelligence
    • OAuth 2.0
    • OIDC
    • SAML 2.0
    • CIAM

  4. Jan 2022 — Nov 2022

    Staff Engineer, Competitive Intelligence, Auth0 Product Unit

    Identity & Security Platform

    Promoted to Staff Engineer with ownership of the competitive intelligence function for the Auth0 product unit. Relocated to the United States in November 2022.

    • Promoted to Staff Competitive Intelligence Engineer — primary expert on the IDaaS competitive landscape.
    • Authored and maintained the Competitive Battle Card library adopted by the global Auth0 sales organization.
    • Performed in-depth technical teardowns of competitors across CIAM, B2B, B2C, and emerging identity standards.
    • Delivered innovative demos in emerging CIAM domains: Identity Proofing, Smart Devices, and passwordless.
    • Competitive Intelligence
    • OAuth 2.0
    • OIDC
    • CIAM
    • SAML 2.0

  5. Jun 2016 — Jan 2022

    Early Career at Auth0

    Identity & Security Platform

    Progressed through Developer Success, Solutions Engineering, Product Marketing, and Specialist Solutions Engineering roles — building Auth0's demo platform, shipping the official Cordova SDK, establishing the developer community, and later owning competitive intelligence and enterprise sales architecture across EMEA.

    • OAuth 2.0
    • OIDC
    • SAML 2.0
    • ADFS
    • Node.js
    • Swift
    • React
    • Serverless (Webtask)

  6. Before 2016

    Web Developer

    Various companies

    Built websites and applications for a range of companies, developing the hands-on engineering foundation that led into identity and platform work.

    • Web Development
    • JavaScript
    • Node.js
    • PHP
    • Full-Stack

  7. 2020 — 2025

    Advisor & Engineering Contributor

    Realtime Infrastructure Startup

    Advisor since founding to a realtime WebSocket-as-a-service platform (now sunset). In 2024, stepped in hands-on to rebuild the message pipeline, scaling a single node from 200 to 20,000 messages/second while still running sandboxed user code on every event.

    • Rearchitected the realtime message pipeline to deliver a sustained 100x single-node throughput gain.
    • Kept per-event extensibility intact: custom user code executes in an isolated sandbox on every message without sacrificing throughput.
    • Realtime
    • WebSockets
    • Performance Engineering
    • Sandboxing
    • Systems Design

  8. 2025 — Present

    Independent Engineering & Research

    Independent

    Personal research and engineering at the edge of what's now possible with AI-assisted development: codec design, low-level drivers, and systems experiments written up at arewecooked.dev.

    • GRIT (Grid Residual Image Transport): a purpose-built streaming image codec for a Thunderbolt KVM — coarse grid sample first, then residual bytes allocated by cell complexity, running on the GPU without a DSC ASIC.
    • Turbowave: a follow-on codec experiment exploring wave-based transforms for low-latency streaming.
    • Built a custom NCM (USB networking) driver, going below the application layer into device-level systems work.
    • A deliberate experiment in what a single engineer can ship with modern AI tooling and a clear spec.
    • Codec Design
    • GPU
    • Systems Programming
    • Drivers
    • AI-Assisted Engineering

Skills

Identity & Protocols

  • OAuth 2.0
  • OpenID Connect
  • SAML 2.0
  • CIBA
  • ADFS
  • Zero Trust
  • CIAM
  • Identity Proofing

Product Architecture

  • Agent Identity
  • Token Vault
  • Delegated Authorization
  • MCP Authorization
  • Cross-App Access (XAA)
  • Entity Modeling
  • API Design
  • Security Modeling

Engineering

  • Node.js
  • TypeScript
  • Swift / iOS
  • React
  • AWS Lambda
  • Serverless
  • GPU / Systems (GRIT)

Practice

  • Product Architecture
  • Competitive Intelligence
  • Developer Experience
  • Technical Strategy
  • Enterprise Sales Support
  • Technical Writing
  • Community Building

Projects

LatestTinkerPledge

Co-founder · tinkerpledge.org · 2026 — current

A public pledge and proposal tool for making AI access an employee benefit, framed around individual agency rather than productivity mandates. People-first positioning, no mandates, and a generator that helps anyone make the case to their team. Built with Eva.

  • Movement
  • AI for Everyone
  • Product
  • Writing

On Agent Authorization (Public Writing)

Technical writing · Feb 2026

Why the features that make AI agents useful are the same ones that make them dangerous — and why the answer isn't restricting agents but changing the curve entirely through task-based, context-aware authorization.

  • AI Agents
  • Authorization
  • Security
  • Technical Writing

On Secure Token Delegation (Public Writing)

Technical writing · Nov 2025

Why userId-parameter credential storage creates a confused-deputy risk by design, and how a credential-based delegation model eliminates it cryptographically.

  • Token Vault
  • OAuth 2.0
  • AI Agents
  • Security
  • Technical Writing

Identity Management in Modern Applications (Published book)

Published book · Apress, Jan 2020

A comprehensive guide presenting the identity management landscape to developers building modern applications. Covers OAuth 2.0, SAML, OpenID Connect, WSFed, and practical architecture patterns — with an accompanying reference application.

  • OAuth 2.0
  • SAML
  • OIDC
  • WSFed
  • React
  • Node.js

Sign In with Apple — Day-Zero Implementation

Technical writing · Jun 2019

Demonstrated serverless extensibility by implementing Sign In with Apple support within days of its launch. Documented the nuances and challenges of the protocol for the developer community.

  • OIDC
  • Serverless (Webtask)
GRIT — Grid Residual Image Transport

OSS Experiment · X · June 2026

A purpose-built streaming image codec for a Thunderbolt KVM. GRIT sends a coarse grid sample first, then allocates residual bytes by cell complexity, running entirely on the GPU without a DSC ASIC — outperforming ProRes and HEVC on game and desktop content, and going automatically lossless on 3K desktop frames.

  • Codec Design
  • GPU
  • Systems Programming
  • Streaming
Stop comparing MCP to your shell

Technical Writing · X · March 2026

Why comparing MCP tools to shell commands misses the point: the real boundary is the protocol's identity, governance, and observability model, not CLI ergonomics.

  • MCP
  • CLI
  • Security
  • Governance
  • Observability
Wormhole - VPN

OSS Experiment · X · May 2026

Wormhole is a VPN implemented using Cloudflare Workers, written during a flight to prove Cloudflare Workers can be used for a VPN as capable as Palo Alto, but 15x faster.

  • VPN
  • Cloudflare Workers
  • Systems Programming
Turbowave

OSS Experiment · arewecooked.dev · 2025

A follow-on codec experiment exploring wave-based transforms for low-latency streaming — lossless GPU accelerated entropy coder using rANS.

  • Codec Design
  • Signal Processing
  • Streaming
Custom NCM Driver

arewecooked.dev · 2025

A custom NCM (USB networking control model) driver — going below the application layer into device-level systems programming, written up with the rest of the tinkering at arewecooked.dev.

  • Drivers
  • USB / NCM
  • Systems Programming