Maksym Mishchenko
Software Engineer II @ Microsoft Security
Summary
Software Engineer II at Microsoft Security, working on Identity & Application Governance. 5+ years of experience building backend systems, developer tooling, and security-focused infrastructure across financial services and enterprise software. Originally from Ukraine, based in Prague.
Experience
Microsoft Security
2025–NowSoftware Engineer II — Identity & Application Governance, Prague
- Build Identity & Application Governance capabilities that support secure enterprise access and application-governance workflows.
- Translate governance and trust-boundary requirements into backend systems, automation, and practical security controls.
EPAM Systems
2022–2025Software Engineer → Senior Software Engineer — investing platform DevEx, licensing & package management
- Built developer-experience tooling for an investing platform, including licensing libraries for license validation, package management, and license accountability.
- Improved manual licensing workflows, reducing tickets handed to human reviewers by 70%.
- Partnered directly with developers to troubleshoot issues, gather feedback, and turn recurring pain points into library and workflow improvements.
Stora Enso
2019–2022Java Developer — CI/CD regression gates, invoice processing, WebSphere MQ
- Built the Selenium regression-test suite used as a CI/CD pull-request gate for the whole team before pull requests were approved.
- Worked in a two-person team on the invoice-processing system, expanding it to support an additional department and coordinating requirements directly with the PM.
- Owned delivery beyond implementation: deployments, testing, on-call outage support, WebSphere MQ integration work, and test-coverage improvements.
Selected Projects
mcpgate
Security gateway for MCP tool calls with policy enforcement, audit trails, and reverse-channel prompt-injection defenses.
mmishchenko.dev
This portfolio — built with Next.js 16, MDX blog with interactive animated components, RSS feed, and automated devlog publishing pipeline.