Tommy Murphy
Cloud Platform
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolTommy Murphy is a cloud platform and security-focused software engineer with 14 years of experience building and hardening distributed systems. He has led key and secret management efforts at Google (including Secret Manager and HSM/KMS integrations) and now drives cloud platform work at Citadel. Tommy combines deep Go and backend expertise with practical DevOps skills—his open-source contributions include reliability and security improvements to the widely used secrets-store-csi-driver and PKI work in Cloudflare’s cfssl. He founded DigitalOcean’s application security team, deployed Vault-based secret and PKI solutions, and has a track record of improving latency, availability, and secure-by-default platforms. Comfortable in both hands-on engineering and technical leadership, he also brings uncommon operational experience from leading Air Force security and test programs. Based in New York, he blends production-scale engineering with a strong security-first mindset.
14 years of coding experience
16 years of employment as a software developer
BS, Computer Science, Computer Engineering, 3.67, BS, Computer Science, Computer Engineering, 3.67 at University of Virginia
Github Skills (20)
kubernetes10
cert10
csr10
go10
certificate-authority10
x50910
cryptography10
kubernetes-pods10
pki10
ca10
container-storage-interface10
csi10
testing9
rbac9
dockers9
Programming languages (11)
Github contributions (5)
kubernetes-sigs/secrets-store-csi-driver
Jul 2020 - May 2022
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
Role in this project:
Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:3 releases, 176 reviews, 59 commits in 1 year 10 months
Contributions summary:Tommy contributed to the secrets-store-csi-driver by implementing features and improving the reliability of the system. Their work involved passing parameters related to service accounts, which helps plugins with workload identity. They also refactored and enhanced the system's security by moving secrets sync to its own role. Furthermore, the user added support for provider paths under /var/run and increased maxCallRecvMsgSize to handle large secret mounts and worked on cleaning up code related to best-effort socket cleanup.
azure-keyvaultkubernetes-secretsstorescsimount-multiple-secrets
cloudflare/cfssl
Apr 2016 - Jun 2016
CFSSL: Cloudflare's PKI and TLS toolkit
Role in this project:Back-end Engineer
Back-end EngineerContributions:7 commits, 6 PRs, 8 comments in 2 months
Contributions summary:Tommy primarily contributed to the `cfssl` project by refactoring and improving the CSR (Certificate Signing Request) functionalities. Their work involved modifying existing code for CSR generation, parsing, and CA certificate handling. Key contributions include integrating the BasicConstraints extension into CSRs for CA certificates and refactoring existing code to use new functionalities. This user also implemented and tested various updates to the signer to integrate CA and pathlen constraint verification.
sslpkicloudflaretlsgo
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.