Open to full-time roles · Sacramento / Remote
Vincent Lam Software Engineer
Identity and access management, AI agents and LLM security.
About
I build identity and AI-agent systems where policy, not the model, makes the security decisions.
Experience & education
- Sep 2026 – Present Office Technician Office of Legislative Counsel
- Aug 2025 B.S. Computer Science Sacramento State University
- Nov 2022 – Apr 2024 · Jan – Jun 2025 Student Assistant California Department of Health Care Services
- May – Oct 2022 Student Assistant California Housing Finance Agency
Skills
- Identity & access
- Zero standing privilege, ABAC / RBAC, OIDC, SCIM, MFA, AWS STS, Cedar
- AI & agents
- Claude API, tool use, prompt engineering, prompt‑injection defense
- Security
- Threat modeling (STRIDE), NIST 800‑53 / SOC 2, audit logging, SIEM
- Stack
- Python, TypeScript, SQL, FastAPI, Next.js, GitHub Actions, Power Automate
Projects
Aegis
Just-in-time access with zero standing privilege
A just-in-time access platform with zero standing privilege. People ask in plain English, Claude turns the request into structured fields, and Cedar policies decide on real user and resource attributes, so the model never makes the call. Restricted access needs MFA step-up and a second approver, the identity provider drives joiners, movers and leavers over SCIM 2.0, and approved grants become short-lived AWS STS credentials. Recertification campaigns and an audit trail with signed checkpoints cover the rest. 186 tests at 93% coverage, including a Keycloak sign-in in CI.
Installous
AI stock research app
A personal investing assistant with prices that stream in every second, a five-factor stock score (value, quality, growth, momentum and analyst sentiment), Robinhood-style charts, and a Claude-powered advisor that calls live tools for quotes, fundamentals and news. Two paper-money experiments run on their own: a rules-only AI Fund against the S&P 500, with a five-year backtest, and a live bot that trades SPX iron condors after each close on a 1-3-6 contract ladder, with every order and open position shown live.
Nagare
Japanese reader that teaches as you read
Read from a library that runs from N5 graded readings to full Aozora Bunko novels, or search 10,500 more or import a .txt, .epub or .pdf, in a paged reader with furigana where you tap any word for its reading, meaning and JLPT level. Saved words come back as spaced-repetition flashcards and as quiz cards in a swipeable sentence feed, and any sentence can be read aloud. Text is tokenized in the browser with kuromoji.js against a JMdict-derived dictionary of 22k common words, with progress kept in IndexedDB.
Privacy Blocker
Get your personal data off data brokers
A local-first tool for California's data-broker opt-outs: an encrypted in-browser vault (AES-256-GCM), step-by-step tracking for about 40 people-search sites, CCPA request emails, and a scheduled GitHub Actions job that emails brokers for you.
Sous Chef
Meal planner and shopping list
Plan the week's recipes and get one shopping list: servings scaling, US and metric conversion, a list sorted by aisle that skips your pantry, a day-by-day planner, a cook-along with timers, and AI helpers that import recipes and plan meals. Built as a Claude artifact, with a desktop layout and 273 browser checks.
School projects
Project: W.E.M.U 2.0
License and forms system for a state department
Senior project
Built for the Department of Consumer Affairs to manage 3.4 million licenses and forms, streamlining updates across test, development, and production.
Movie Recommendation Service
REST API and web app
Team project
Full CRUD REST API and front-end movie recommendation app, built with a team using Scrum methodology.
Contact
Email is the quickest way to reach me.