# Scarlett A. Scott (codescarlett)
> Scarlett A. Scott (codescarlett) is a senior full stack and DevOps engineer with aerospace, fintech and cloud experience: U.S. Space Force ground systems, ACH/NACHA payment platforms, Kubernetes and AWS. Available for SOC 2, KYC/KYB, FinCEN/AML and ACH payment gateway consulting.

- Role: Senior Software & DevOps Engineer
- Location: United States · Remote
- Availability: Open to senior / lead roles and independent consulting engagements.
- Contact: use the contact form at https://codescarlett.com/contact
- Resume (PDF): https://codescarlett.com/resume/Scarlett_Scott_Resume.pdf
- GitHub: https://github.com/scarlettiron
- LinkedIn: https://www.linkedin.com/in/scarlett-scott-9980a5bb

## Pages
- [Home](https://codescarlett.com): everything on one page
- [About](https://codescarlett.com/about): About Scarlett A. Scott (codescarlett): 13+ years building aerospace ground systems, ACH payment platforms and cloud infrastructure. Principles, skills, education and resume.
- [Experience](https://codescarlett.com/experience): Work history of Scarlett A. Scott: U.S. Space Force missile-warning ground systems at RTX, a production ACH banking platform, enterprise B2B marketplaces, Kubernetes and AWS.
- [Open Source](https://codescarlett.com/open-source): Open source software by Scarlett A. Scott (codescarlett), including TweakTags, a self-hosted inline CMS for Next.js, React and plain HTML, published on npm.
- [Consulting](https://codescarlett.com/consulting): Independent technical consulting from Scarlett A. Scott: SOC 2 readiness, KYC/KYB and FinCEN/AML technical audits, ACH payment gateway architecture and security reviews.
- [Contact](https://codescarlett.com/contact): Contact Scarlett A. Scott about senior and lead engineering roles or independent consulting. Replies within two business days.

## About
I'm a multidisciplinary senior engineer with 13+ years across aerospace, fintech and enterprise B2B platforms. I've been the sole architect of a production ACH platform, built orchestration for an aerospace missile-warning ground system for the U.S. Space Force, and run the AWS and Kubernetes infrastructure those kinds of systems depend on.

I like the niche, oddball problems and the hard, unglamorous parts: debugging production at 2 a.m., getting a NACHA file byte-perfect, passing the pen test, writing the runbook. I lead from inside the code and I bring the whole team along.

**How I got into engineering:** "I eavesdropped on a computer science class, and not even ten minutes in I knew I loved it and wanted to work with software for the rest of my life. And that has never changed for even a second."

## Principles
- **Leave it better than you found it**: Every PR, runbook and handoff should leave the system easier to run than it was before. I fix the flaky test I tripped over, write the doc I wish I'd had, and pay down the debt next to the feature.
- **No one left behind**: I lead by pairing, reviewing generously and sharing context, so the whole team can own production, not just the person who wrote it.
- **Lead by example**: I lead from inside the code. I take the 2 a.m. page, write the tests, document the fix and do the unglamorous work I'd ask of anyone on the team. Standards stick when the person setting them meets them first.
- **Resilience**: Retries, idempotency, graceful degradation and clear failure recovery are designed in from day one, whether it's an aerospace missile-warning pipeline or a payout run.
- **Reliability**: Money and mission data don't get a second try. I build observable, audited, tested systems that do the same correct thing every time, then I own them on call.
- **Light on my feet**: I move between the frontend, backend, infrastructure and compliance without losing pace, and pick up a new stack when the problem calls for it.
- **See the whole system**: I'm a big-picture engineer. Before I build, I need to know who uses the product, what they need and how they'll interact with it, and how every part fits together: not just the services, but the servers and network it runs on, how it's operated, and the people involved. Specialists are valuable; silos aren't. You can't build a good system without understanding the end users and how everything interacts, and people don't do their best work in the dark.

## Work history
### Team Lead · Full Stack Software & DevOps Engineer, Lumber Marketplace LLC (May 2024 to Present, Columbia, TN)
Lead engineer for architecture, hands-on development, DevOps and production operations across multiple high-availability systems. I partner with product, legal, banking and vendors to deliver compliant, secure platforms, and run sprint planning and technical direction for the team.
Stack: Python, Django REST, Celery, Plaid, Next.js, NestJS, TypeScript, Prisma, Stripe, Rust, Axum, Kafka, AWS, Terraform, Docker, GitHub Actions
#### ACH Banking Platform
- Sole architect and developer of a production ACH system processing $200K+ in monthly volume.
- Built NACHA file generation and SFTP delivery, cutting settlement time from 4 days to 1.
- Reduced costs with direct ACH batching ($0.75 per batch, up to $1M).
- Implemented the full payment lifecycle: payments, payouts, refunds and subscriptions.
- Delivered real-time webhooks, KYC/KYB compliance flows, IRS TIN matching and full NACHA compliance.
- Implemented API key auth, IP allowlisting and secrets management; passed third-party penetration testing.
#### B2B Orders & Freight Platform
- Built a high-value B2B order system covering payments, freight booking, shipment tracking, payouts, refunds and inventory.
- Implemented dual payment rails (Stripe + in-house ACH) with automated seller settlements.
- Integrated ArcBest (REST) and TMC (X12 EDI) for automated pickup, delivery and carrier coordination.
- Designed background job pipelines for shipment polling, webhooks and settlement processing.
#### Pro Portals · Seller Portal
- Designed the end-to-end architecture for a seller-focused B2B portal integrating core business systems.
- Built product and variant management with OpenSearch-powered search and filtering.
- Added seller-managed shipping, dynamic mileage pricing, credit terms and a discounting engine.
- Implemented real-time messaging, analytics dashboards and customer access management.
- Deployed the frontend on Vercel with per-seller domains; backend on AWS with CI/CD automation.
#### ERP Integration Platform
- Built a multi-tenant, event-driven ERP integration system that lets customers connect multiple ERP systems at scale.
#### Infrastructure, SRE & DevOps
- Own AWS infrastructure across prod, staging and beta: EC2, RDS, S3, ElastiCache, OpenSearch, Route 53, SES and Cloudflare, all in Terraform.
- Built CI/CD with Docker and GitHub Actions, plus logging, monitoring, virus scanning and vulnerability detection.
- Manage DNS, scaling, uptime and secure deployment workflows.

### Senior Full Stack · Senior DevOps Engineer, RTX Aerospace (Jan 2021 to May 2024, Aurora, CO)
Senior engineer on FORGE MDPAF (Future Operationally Resilient Ground Evolution, Mission Data Processing Application Framework): a platform-agnostic, modular ground system processing OPIR satellite data for U.S. Space Force missile warning and space domain awareness, deployed on-prem and in the cloud.
Stack: Golang, gRPC, Python, Django, Flask, Apache Airflow, Elyra, React, TypeScript, Vue.js, MinIO, PostgreSQL, Keycloak, Kubernetes, Helm, Jenkins
#### Workflow Orchestration Platform
- Led DAG development for complex OPIR processing pipelines with parameterized PRA workflows, templating, retries and structured logging.
- Integrated internal tools and external services into Airflow with logging, monitoring and failure recovery for mission-critical reliability.
#### Centralized Orchestration API
- Built and maintained a Go REST and gRPC control plane, the secure communication layer between platform services and Airflow.
- Implemented authenticated DAG triggering, status tracking, metadata logging, payload validation and resilient error handling.
#### Mission Operations Dashboard
- Co-developed a React/TypeScript operations console for monitoring DAGs, logs, PRAs, alerts and automated workflow events.
- Built the Django REST API behind it, including RBAC, audit logging and Keycloak authentication.
- Integrated the Elyra pipeline editor for low-code AI/ML workflows with MinIO-backed artifacts and direct Airflow execution.
#### Image Dropbox Application
- Sole developer of a packaging and deployment platform for Kubernetes services across on-prem and cloud environments.
- Implemented Helm override support, certificate validation, artifact management and Jenkins-driven automated deployments.
- Delivered a unified UI for redeployments, status monitoring and lifecycle management.
#### Infrastructure & Tooling
- Managed deployment of all services on Kubernetes and authored Helm charts for dev, staging and production.
- Built and maintained CI/CD pipelines in Jenkins, integrated with Bitbucket and Nexus.

### Contract Senior Software Engineer, OneClick Healthcare Payments (now Hello Payments) (Mar 2020 to Aug 2021, Remote)
Hourly contract work on a Python ACH and card payment processing platform serving healthcare providers and clinics.
Stack: Python, Django, Celery, Redis, AWS, DynamoDB, Keycloak
#### Payments platform
- Built and maintained backend APIs for secure transaction initiation, validation, reconciliation and settlement across ACH and card networks.
- Implemented robust error handling, idempotent transaction workflows and financial reporting.
- Ensured HIPAA and PCI-DSS compliance: encryption in transit and at rest, access controls, audit logging and secure handling of PHI and payment data.

### Contract Full Stack DevOps Software Developer, Stray Technology LLC (Feb 2018 to Jan 2021, Remote)
Collaborated directly with government and commercial clients to gather requirements, define specifications and support onboarding, integration and implementation, primarily in C++.
Stack: C++, REST APIs, WebSockets, Payment gateways
#### Government Software Contracts
- Developed and maintained specialized software for government contracts, primarily in C++, adding other technologies as project requirements demanded.
- Worked on proprietary 'black box' software, internal systems and custom applications built to specific contractual requirements.
- Worked directly with clients to gather requirements, establish scope, clarify specifications and coordinate implementation, onboarding and delivery.
- Designed, developed and tested software components and integrations to support varied client and project needs.
#### Financial Technology & Payment Systems
- Developed and maintained software for fintech contracts, including payment gateway systems and integrations.
- Implemented REST APIs and WebSocket services connecting applications to external financial systems.
- Gathered business and technical requirements and coordinated integrations, implementation and onboarding directly with clients.

### Lead Full Stack Software Engineer, SDH Federal Construction Inc. (Jun 2012 to Mar 2018, On-site)
Started by building the company's internal ERP-style business platform, then led its government software contracting division as the company expanded beyond federal construction, owning projects across the full contract lifecycle from quoting to customer handoff.
Stack: Python, Django REST, React, Stripe, Mailgun, Twilio
#### Government Software Contracting Division
- Led the software contracting division, owning projects across the full contract lifecycle: evaluating opportunities, preparing quotes, development, testing, delivery and customer handoff.
- Worked directly with government and commercial clients to gather requirements, define scope, clarify technical specifications and coordinate onboarding and delivery.
- Evaluated requirements, estimated development effort and prepared technical proposals for government software contracts.
- Designed, built, tested and delivered custom software to contract specifications while staying hands-on in engineering.
#### Internal ERP & Business Platform
- Began as a junior engineer building an internal ERP-style application for billing, bookkeeping, financial records and daily operations.
- Built backend services and REST APIs in Python and Django REST with a React frontend for staff and customers.
- Integrated Stripe payments, payment-verification webhooks and automated billing reminders via Mailgun and Twilio.
- Developed authentication, account management and financial reporting to support operations, tax prep and auditing.
- Automated manual business processes, improving recordkeeping efficiency and reducing billing discrepancies.

## Open source
### TweakTags (Live)
Bolt a CMS onto a site you already have instead of rebuilding the site around one. Put a data-tweaktags-* attribute on any element, sign in, flip on edit mode and change text, rich text, images and video right on the live page. Content saves to your own database and every visitor sees the saved version, with no rebuild and no redeploy. Under the hood it's a framework-agnostic browser engine, pluggable database and auth adapters, and a security model built like a payments system: rotating refresh tokens, CSRF protection and server-enforced roles.
Stack: TypeScript, React, Next.js, Node.js, PostgreSQL, MySQL, SQLite, AWS Cognito, AWS S3, npm
Type: Inline CMS / visual editor
Runs on: Next.js · React · plain HTML
Databases: Postgres · MySQL · MariaDB · SQLite
Auth: Built-in JWT or AWS Cognito
Packages: 15 on npm (@tweaktags)
License: MIT
- One attribute makes an element editable: no dashboard to learn, no content model to design, no rebuild.
- Self-hosted: content and users live in your database, not a third-party service.
- Published on npm with a live, no-signup demo and a full documentation site.
#### Editing
- Edit in place on the live page, in a full-screen popup editor that lists every tag, or from a traditional full-page admin panel.
- Plain text, rich text and media tags: images and video sources swap in, and containers get cover backgrounds.
- A draggable edit bar with batch save, confirmations and in-page help. Superusers create tags and manage users from the same bar.
- The optional <Editable> React component is sugar; the attribute alone works on any HTML.
#### Architecture
- A framework-agnostic browser engine crawls the page and watches for new nodes, so client-side routing just works. The React and vanilla JS UIs both sit on top of it.
- Pluggable database adapters for Postgres, MySQL, MariaDB and SQLite, each tested in CI against real servers across every supported version.
- Multi-tenant: many sites can share one database and user pool, and the tenant is decided by the server so a browser can never pick or fake one.
- Serverless-aware connection pooling, and presigned S3 uploads so files go straight from the browser to your bucket.
- Split into 15 scoped packages, so an app installs only the driver, auth and UI it actually uses.
#### Security
- Short-lived access tokens with rotating refresh tokens. Replaying a used refresh token revokes the whole login family, and strict mode blocks revoked sessions immediately.
- Tokens in httpOnly cookies with double-submit CSRF protection on every write.
- Server-enforced roles: editors can only change existing content, and the last superuser can't lock everyone out.
- bcrypt password hashing, parameterized queries, and script and injection filtering on saved content.
- Optional AWS Cognito login for teams that already have a user pool.
- Docs: https://tweaktags.codescarlett.com/
- Live demo: https://tweaktags.codescarlett.com/demo
- GitHub: https://github.com/scarlettiron/tweaktags
- npm: https://www.npmjs.com/package/tweaktags
### Frankie Stealth Record (Open sourcing soon)
Automatically records Teams, Zoom, Google Meet, Slack huddles, Webex, Discord and OBS calls and writes a transcript with each speaker's name next to what they said. Everything stays on your machine unless you choose to sync to your own S3 bucket. No account, no cloud service. Includes an Android app for phone calls.
Stack: Python, Android, PowerShell, Bash, AWS S3
- Detects call start and stop on its own; no buttons to remember.
- Local-first: recordings and transcripts never leave the device by default.
- One install script per OS that sets up Python and audio tooling automatically.
- GitHub (coming soon): https://github.com/scarlettiron/frankie-stealth-record
### VM Tool (working title) (Open sourcing soon)
Placeholder: a developer tool for provisioning, managing and tearing down virtual machines. Final name, description and repository will be published when the project is open sourced.
Stack: TBD
- Details coming soon.
- GitHub (coming soon): https://github.com/scarlettiron/vm-tool

## Personal projects
### Remote Viewing Security Camera System (Archived)
A full stack camera system with an asynchronous local home server. Users view cameras remotely and get a text alert when an unknown person is on the property, without camera IPs ever being exposed publicly.
Stack: Python, Django Channels, React, Redis, WebSockets, OpenCV, asyncio, Twilio, AWS S3, Raspberry Pi, ESP32-CAM
- Camera units connect to a custom async WebSocket server that keys each unit's socket by ID for fast lookup.
- Frames run through OpenCV object detection; unknown faces trigger an SMS to the head of household and the frame is stored in S3 with an incident record.
- Remote viewing relays frames from the local server through a remote server over sockets, so cameras are never publicly reachable.
### Lotus (Archived)
A web platform where creators sell posts, scheduled live classes and subscriptions, with real-time messaging and peer-to-peer video.
Stack: Django REST, Django Channels, React, Redis, Stripe, PostgreSQL, AWS S3, WebRTC
- Payments through Stripe payment intents and subscriptions; all media stored in S3.
- Instant messaging over sockets with Django Channels and Redis; video calls and live classes over peer-to-peer connections.
- Weighted, ranked search across posts and profiles using PostgreSQL trigrams and search vectors.

## Consulting services
### SOC 2 Readiness & Audits
Get audit-ready without stalling your roadmap.
- Gap assessment against SOC 2 Trust Services Criteria
- Access control, logging, change management and vendor review
- Cloud and CI/CD hardening (AWS, Kubernetes, GitHub Actions)
- Evidence collection plan and remediation roadmap
Ideal for: Startups and SaaS teams preparing for a first Type I or Type II.

### KYC / KYB Technical Audits
An engineer's review of how your identity and business verification is actually built.
- Code and architecture review of KYC / KYB onboarding flows and verification states
- Verification vendor integrations (Plaid and similar): webhooks, retries and edge-case handling
- IRS TIN matching, beneficial-ownership and screening data pipelines
- PII encryption, access control, retention and audit logging
Ideal for: Engineering teams at fintechs, marketplaces and payment platforms that onboard users or businesses.

### FinCEN / AML Compliance Reviews
Engineering-side review of your BSA/AML controls.
- Customer due diligence and risk-rating handoff from onboarding
- Transaction monitoring and alerting design
- Audit trails, record retention and reporting pipelines
- Practical fixes your engineers can ship
Ideal for: Fintechs, marketplaces and money-movement platforms.

### ACH Payment Gateway Consultation
Specialist help with ACH, from NACHA files to settlement.
- Architecture for direct-to-bank ACH and NACHA file generation
- Payments, payouts, refunds, returns and subscriptions lifecycle
- Plaid, Stripe and bank / ODFI integrations
- Settlement-time and per-transaction cost reduction
Ideal for: Teams moving money who want lower fees and faster settlement.

### Security & Infrastructure Audits
A second set of eyes on the systems that can't fail.
- Pen-test preparation and remediation (API keys, IP allowlisting, secrets)
- PCI DSS and HIPAA data-handling review
- Terraform, Kubernetes and network configuration review
- Observability, incident response and recovery planning
Ideal for: Any team handling payments, PHI or sensitive data.

## Skills
- Languages: Python, TypeScript, JavaScript, Go, Rust, C++, Java, SQL, Bash, Sass
- Frameworks: Next.js, NestJS, React, Vue.js, Node.js, Express, Django, Django REST, Flask, Gin, Axum, Spring Boot, Redux, Apache Airflow
- Payments & Fintech: ACH / NACHA, Plaid, Stripe, KYC / KYB, IRS TIN matching, Reconciliation & settlement, QuickBooks, ERP integration, EDI / X12
- DevOps & Cloud: Kubernetes, Helm, Rancher, Docker, DDEV, Terraform, Ansible, GitHub Actions, Jenkins, AWS EC2, AWS ECS / EKS / Fargate, AWS VPC & VPN, CloudWatch, Elastic Load Balancer, Cloudflare, DataDog, Vercel, Nginx
- Data, Storage & Search: PostgreSQL, AWS RDS, DynamoDB, Prisma, Sequelize, Django ORM, SeaORM, MinIO, OpenSearch / Elasticsearch, Redis / ElastiCache
- Realtime & Events: Kafka, gRPC, WebSockets, Socket.IO, WebRTC, Event emitters, Celery, Webhooks, Live data sync
- Security & Compliance: SOC 2, PCI DSS, FinCEN / AML, NACHA compliance, HIPAA, OAuth2, Auth0, Keycloak, LDAP, AWS IAM, AWS KMS, HCP Vault, ClamAV, OpenVAS, Wireshark
- AI & Data Pipelines: Elyra pipeline editor, Airflow DAG orchestration, DAG Factory, AWS Bedrock, OpenCV, AI/ML workflow automation, PRA workflow execution, Metadata tracking
- Practices: System architecture, Team leadership, CI/CD automation, Infrastructure as Code, Distributed microservices, Asynchronous system design, TDD & automated testing, SSDLC, Agile & Scrum, Cost optimization, B2B e-commerce
- Tools: Kibana, Kythera, Cypress, Postman, Hookdeck, Linux

## Education & certifications
- Bachelor of Science, Cyber Security, Western Governors University (Expected Jul 2028)
- Bachelor of Science, Computer Science, Harvard University (2015)
- AWS Certified Cloud Practitioner, Amazon Web Services (Aug 2025)

Contact: https://codescarlett.com/#contact