Scott Rossillo
Staff Site Reliability Engineer at Peloton Interactive
New York, New York, United States
Summary
👤
Senior🎓
Top SchoolScott Rossillo is a Staff Site Reliability Engineer and platform architect in New York with 14 years of hands-on experience building resilient, cloud-native systems and developer tooling. He designs multi-cluster Kubernetes ingress and service-mesh solutions, authors Rust-based operators and webhooks to prevent bad configs from reaching production, and has led rapid cluster replacement and migration efforts at Peloton. Equally comfortable in application and security engineering, Scott has contributed meaningful fixes and Spring Security integrations to the widely used Keycloak project, improving token handling, CSRF protection, and SSO behavior. His background spans re-architecting monoliths into microservices, building Kotlin libraries and GitHub Actions to standardize microservice delivery, and creating native SDKs and identity platforms at Smartling. Known for pragmatic architecture and a preference for shipping safety-first automation, he blends deep systems knowledge with practical developer experience.
14 years of coding experience
22 years of employment as a software developer
BS Computer Science, BS Computer Science at Loyola University Maryland
Github Skills (21)
keycloak10
authorizations10
javascript10
expressjs10
saml10
oid10
user-authentication10
authentication10
spring-security10
java10
javas10
authorization10
nodejs10
api-design9
restful-api9
Programming languages (9)
Github contributions (5)
keycloak/keycloak-nodejs-connect
Aug 2016 - Jan 2018
Role in this project:
Back-end Developer
Back-end DeveloperContributions:5 commits, 6 PRs, 19 comments in 1 year 5 months
Contributions summary:Scott primarily focused on improving the Keycloak NodeJS adapter, particularly addressing issues related to authentication and token management. They implemented fixes for redirect URL generation during login and added a feature to allow for an overridable function for redirecting to login. Furthermore, the user addressed a critical issue where access tokens were not being renewed automatically and fixed session corruption issues. These changes involved modifying core authentication logic and testing procedures.
keycloak/keycloak
Apr 2015 - Jul 2016
Open Source Identity and Access Management For Modern Applications and Services
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:14 commits, 18 PRs, 20 comments in 1 year 3 months
Contributions summary:Scott primarily focused on enhancing the Spring Security adapter for the Keycloak project, demonstrating expertise in integrating security features. Their contributions involved adding and improving the Spring Security adapter, including client-to-client authorization and CSRF protection. They also implemented improvements related to Spring Security's SSO and the integration of the adapter with classpath loading and other features. These changes suggest the user played a key role in securing and improving integration of the Keycloak project with Spring Security.
oidcauthorizationidentity-and-access-managementaccess-managementsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.