About

I'm a Marine veteran and software engineer in San Antonio, building secure, data-driven apps in C#/.NET. Right now I'm delivering a DoD certification platform for the U.S. Air Force (AFCEC) with ASP.NET Core, SQL Server, RBAC with LDAP/CAC, and Docker on Iron Bank hardened images. Before that I spent 3+ years at Bonterra building APIs on AWS and fixing security findings. I hold the AWS Certified DevOps Engineer - Professional and CompTIA Security+, and I care about CI/CD, infrastructure as code, and shipping software that's secure by default.

US citizen, USMC veteran, able and willing to obtain a security clearance

Portrait of Evan Williams

Experience

Software Engineer

BALGRO LLC · San Antonio, TX · Oct 2025 - Present

DoD Fire & Emergency Services Certification Program (DODFESCP) for AFCEC, U.S. Air Force

  • Build the DODFESCP backend and web application in ASP.NET Core MVC (.NET 10), replacing a SharePoint and ad-hoc PDF workflow with managed student records, certification assignment, transcripts, and official printable certificates.
  • Implement the data layer with SQL Server parameterized stored procedures and EF Core / ASP.NET Core Identity for Certification, Accreditation, Venue, and related entities.
  • Deliver role-based access control (groups, roles, page permissions) with LDAP and CAC-style authentication, cookie sessions, security-stamp invalidation, session limits, STIG-oriented HTTP logging, and HTTPS.
  • Write xUnit unit tests for business rules using the Arrange-Act-Assert pattern to enforce certification logic and prevent regressions.
  • Implement multi-template PDF generation (PDFsharp / MigraDoc) for certificates and transcripts, including date-based signatures, seal numbers, and single-document packages.
  • Containerize for DoD deployment with multi-stage Docker builds on Iron Bank hardened UBI .NET images, Kestrel TLS, AWS RDS certificates, health checks, and environment-based configuration and secrets.
  • Use AI-assisted development with Cursor in day-to-day engineering work.

Associate Software Engineer

Bonterra · Austin, TX · Mar 2022 - Jan 2025

  • Built APIs for cloud-based case management software using C#/.NET and AWS API Gateway.
  • Developed the Family Referrals feature in C#/.NET.
  • Implemented file attachment handling with AWS Lambda and Amazon S3.
  • Remediated penetration test findings, fixing SQL injection and cross-site scripting (XSS) vulnerabilities.
  • Streamlined Jenkins CI/CD pipelines with automated testing and delivery.
  • Diagnosed and resolved a long-standing data retrieval issue, improving operational performance.
  • Performed code reviews, mentored peers, authored technical documentation, and collaborated in Agile sprints.

Associate Software Engineer

Social Solutions (Bonterra predecessor) · Austin, TX · Oct 2021 - Mar 2022

  • Contributed to case management product development in C#/.NET ahead of the Bonterra transition.

Ground Support Equipment Manager / Maintainer

United States Marine Corps · Nov 2013 - Mar 2018

  • Maintained and managed aircraft ground support equipment, including during Marine Expeditionary Unit deployment operations; trained fellow maintainers and supported high-tempo mission readiness.

Education and training

Codeup

22-week Full-Stack Java Career Accelerator (670 hours), Mar 2021 - Sep 2021

Java SE/EE (Servlets, JSP), Spring, MySQL, Thymeleaf, OOP, TDD

San Antonio College

60 credit hours toward a B.S. in Mathematics, 2018 - 2020

Technical skills

Backend
C#, .NET 10, ASP.NET Core MVC, EF Core / ASP.NET Core Identity, API development, AWS API Gateway, OOP, unit testing (xUnit, Arrange-Act-Assert)
Java
Java SE/EE (Servlets, JSP), Spring Boot, Spring Security, Spring Data JPA, Thymeleaf, Maven, JUnit, TDD (training and projects)
Data
SQL Server (schemas, parameterized stored procedures), MySQL, DynamoDB, Aurora
DevOps & Delivery
Docker (multi-stage builds, Iron Bank UBI images), Jenkins, GitHub Actions, AWS CodePipeline / CodeBuild, Terraform, CloudFormation, Git / GitHub, Trivy, Conftest / OPA, Syft SBOM, Dependabot
AWS
Lambda, API Gateway, S3, DynamoDB, IAM, Cognito, CloudWatch, Elastic Beanstalk, Amplify, AppSync, Bedrock
Security
RBAC, LDAP / CAC authentication, least privilege, secure SDLC, SQL injection and XSS remediation, STIG-oriented logging, HTTPS / TLS
Other
JavaScript, React, Node.js, Python, HTML / CSS; Agile / Scrum; AI-assisted development (Cursor cloud agents)