@Xeoul

Open to full-time roles · Sacramento / Remote

Vincent Lam Software Engineer

Identity and access management, AI agents and LLM security.

About

I build identity and AI-agent systems where policy, not the model, makes the security decisions.

Experience & education

  1. Sep 2026 – Present Office Technician Office of Legislative Counsel
  2. Aug 2025 B.S. Computer Science Sacramento State University
  3. Nov 2022 – Apr 2024 · Jan – Jun 2025 Student Assistant California Department of Health Care Services
  4. May – Oct 2022 Student Assistant California Housing Finance Agency
Full resume (PDF)

Skills

Identity & access
Zero standing privilege, ABAC / RBAC, OIDC, SCIM, MFA, AWS STS, Cedar
AI & agents
Claude API, tool use, prompt engineering, prompt‑injection defense
Security
Threat modeling (STRIDE), NIST 800‑53 / SOC 2, audit logging, SIEM
Stack
Python, TypeScript, SQL, FastAPI, Next.js, GitHub Actions, Power Automate

Projects

Aegis

Just-in-time access with zero standing privilege
Aegis demo: an SRE's request for admin on the production Kubernetes cluster, allowed by policy, cut from 6 hours to 2, and waiting for a second approver

A just-in-time access platform with zero standing privilege. People ask in plain English, Claude turns the request into structured fields, and Cedar policies decide on real user and resource attributes, so the model never makes the call. Restricted access needs MFA step-up and a second approver, the identity provider drives joiners, movers and leavers over SCIM 2.0, and approved grants become short-lived AWS STS credentials. Recertification campaigns and an audit trail with signed checkpoints cover the rest. 186 tests at 93% coverage, including a Keycloak sign-in in CI.

Python FastAPI Cedar OIDC SCIM 2.0 AWS STS Claude API

Installous

AI stock research app
Installous stock page for Apple: price chart with the previous-close line, and the five-factor Installous score

A personal investing assistant with prices that stream in every second, a five-factor stock score (value, quality, growth, momentum and analyst sentiment), Robinhood-style charts, and a Claude-powered advisor that calls live tools for quotes, fundamentals and news. Two paper-money experiments run on their own: a rules-only AI Fund against the S&P 500, with a five-year backtest, and a live bot that trades SPX iron condors after each close on a 1-3-6 contract ladder, with every order and open position shown live.

TypeScript Next.js Claude API GitHub Actions Yahoo Finance WebSocket

Nagare

Japanese reader that teaches as you read
Nagare's paged reader on page 2 of 坊っちゃん with furigana, and the word 親指 tapped to show its reading, N2 level and meaning

Read from a library that runs from N5 graded readings to full Aozora Bunko novels, or search 10,500 more or import a .txt, .epub or .pdf, in a paged reader with furigana where you tap any word for its reading, meaning and JLPT level. Saved words come back as spaced-repetition flashcards and as quiz cards in a swipeable sentence feed, and any sentence can be read aloud. Text is tokenized in the browser with kuromoji.js against a JMdict-derived dictionary of 22k common words, with progress kept in IndexedDB.

TypeScript Next.js kuromoji.js IndexedDB JMdict Web Speech API

Privacy Blocker

Get your personal data off data brokers
Privacy Blocker dashboard: the California DROP step and the opt-out checklist progress

A local-first tool for California's data-broker opt-outs: an encrypted in-browser vault (AES-256-GCM), step-by-step tracking for about 40 people-search sites, CCPA request emails, and a scheduled GitHub Actions job that emails brokers for you.

JavaScript Web Crypto PWA GitHub Actions Python

Sous Chef

Meal planner and shopping list
Sous Chef on a desktop: the combined shopping list sorted into produce, pantry, meat and dairy sections, with butter checked off

Plan the week's recipes and get one shopping list: servings scaling, US and metric conversion, a list sorted by aisle that skips your pantry, a day-by-day planner, a cook-along with timers, and AI helpers that import recipes and plan meals. Built as a Claude artifact, with a desktop layout and 273 browser checks.

JavaScript HTML/CSS AI parsing Unit conversion

School projects

Project: W.E.M.U 2.0

License and forms system for a state department
Senior project

Built for the Department of Consumer Affairs to manage 3.4 million licenses and forms, streamlining updates across test, development, and production.

Database Management Data Migration Full-Stack

Movie Recommendation Service

REST API and web app
Team project

Full CRUD REST API and front-end movie recommendation app, built with a team using Scrum methodology.

Java Jersey Docker MySQL