Tom Elliott enhanced session management and security across multiple HMCTS repositories, focusing on robust engineering solutions. In hmcts/sptribs-dss-update-case-web, he developed a user session keep-alive route using Express.js and Node.js, which refreshes session cookies and gracefully handles invalid sessions, supported by comprehensive Jest unit tests to ensure reliability. For hmcts/sscs-case-loader and hmcts/sptribs-case-api, Tom upgraded dependencies, standardized environment variable usage, and refactored OTP authentication flows, leveraging CI/CD pipelines and scripting in TypeScript and Shell. His work emphasized maintainability, traceability, and observability, addressing both user experience and operational concerns with thoughtful, well-tested code changes.