Cariad Eccleston
Hello! 👋 I'm Cariad — pronounced carry-add.
I'm a senior software engineer at digiLab in Exeter, United Kingdom, where I build Python backends, deploy infrastructure to AWS, and keep an eye on security.
Employment
digiLab
Uncertainty Engine
I contribute to the design, development, and reliability of the Uncertainty Engine: a SaaS machine learning platform that models complex simulations and quantifies uncertainty, so safety-critical industries like fusion energy can make decisions from sparse or noisy data.
Security
I wrote the proposal for our single sign-on service, then designed and built it. This allows our customers to log in just once to access every application, and saves our engineers the effort of rolling their own authentication every time.
The service follows the backend-for-frontend pattern: refresh tokens are held server-side in Redis, with Lua scripting for atomicity, and never reach the browser. Users log in through OAuth 2.0 and OpenID Connect, with PKCE, against Cognito.
I also wrote our hardening pattern for services, which the single sign-on service adopted: containers run as non-root with a read-only root filesystem and all Linux capabilities dropped, sit behind a WAF with rate limits, and refuse to start if misconfigured.