Worked on backend and infrastructure features across the supabase/cli and external-secrets/external-secrets repositories, focusing on Go, Kubernetes, and Docker. Delivered server-side functions download unbundling in supabase/cli, allowing developers to choose between API-based or Docker-based workflows, while refactoring code for clarity and expanding test coverage to ensure reliability. In external-secrets/external-secrets, implemented OIDC-based authentication for Pulumi, enabling Kubernetes ServiceAccount token usage and removing static credentials to enhance security and automate credential rotation. Prioritized maintainability and developer experience by consolidating CLI flags, improving documentation, and managing token expiration, demonstrating a methodical approach to secure, automated deployment and robust backend development.