Scott Francis
Senior Cloud Security Engineer at Splunk
Seattle, Washington, United States
Summary
👤
Senior🎓
Top SchoolScott Francis is a Senior Cloud Security Engineer with 17 years of software and cloud experience, currently focused on securing FedRAMP-rated Vault and Okta integrations at Splunk. He brings deep hands-on expertise in HashiCorp Vault migrations, FIPS 140-2 YubiKey programming, and building auditable automation for high-assurance AWS GovCloud environments. Scott’s background spans embedded firmware, game and publishing platforms, and cloud-native monitoring, giving him a rare blend of low-level instrumentation and large-scale infrastructure skills. He consistently drives measurable operational improvements—such as shortening firmware release cycles and automating large-scale repo sanitization—and shapes compliance evidence gathering during audits. An active back-end contributor to OAuth implementations (notably work on googleapis/signet), he combines practical cryptography knowledge with concise documentation and developer influence. Based in Seattle, he is valued for turning complex security and compliance requirements into reliable, automatable systems.
17 years of coding experience
17 years of employment as a software developer
Bachelor of Arts, Computer Science, Bachelor of Arts, Computer Science at Washington State University
Stackoverflow
11reputation
2kreached
1answer
0questions
Github Skills (10)
ruby10
user-authentication10
authentication10
server10
oauth10
server-side10
testing9
sh6
shell6
unix6
Programming languages (5)
Github contributions (5)
googleapis/signet
Aug 2011 - Oct 2011
Signet is an OAuth 1.0 / OAuth 2.0 implementation.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:13 commits in 1 month
Contributions summary:Scott primarily focused on implementing and refining the server-side components of the OAuth 1.0/2.0 implementation. Their contributions include modifying server logic, adding and modifying code related to authenticating requests, and incorporating user-supplied Procs in server operations instead of using strings. Furthermore, the user addressed code formatting issues and added clarification to the wording. Their work demonstrates a strong understanding of the underlying authentication mechanisms.
signetoauth-2authenticationoauth2-provideroauth2
mechazoidal/opendotgl_rb
May 2019 - Jun 2019
Contributions:49 commits, 1 branch in 1 month
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.