Sam Marritz
Solutions Engineer
7+ years exp
Python
SQL
Node JS
JavaScript
API Design: 4/10
Security & Auth: 4/10
Active 7 days ago
Invite to interview
Message
Download CVCV
Overview
Technical skills
Timeline
Roles
Overview
Node.js backend developer at a middle level specializing in pragmatic REST APIs and small service implementations. The strongest proven skill is building and testing authentication and API endpoints, as evidenced by sammypond/project2/config/passportConfig.js and the tests in sammypond/project2/test/*. Limitations include no visible migration history, scarce resilience patterns (retries, timeouts), and little evidence of performance tuning or production-grade observability.
Technical skills
Python
SQL
Node JS• Middle
JavaScript• Junior • 7y+
Node JS
Express
Axios
Passport.js
Bcrypt
Databases
ScyllaDB
Cassandra
PostgreSQL
Frontend
React.js
GraphQL
DevOps
Rest API
WebSockets
QA
Postman
Mocha
Supertest
AI/ML
Claude
Claude Code
Copilot
Cybersecurity
GDPR
HIPAA
PCI DSS• 3y+
Timeline
Enterprise Solutions Engineer
•
Middle
sFOX
•
Full-Time
Support and configure sFOX Connect, a digital asset prime brokerage offering. Work with REST and GraphQL APIs and integrate WebSocket-based trading functionality with institutional partners. Test user flows for varied trading configurations, run deep technical troubleshooting, and debug client-side issues with code snippets.
Rest API
GraphQL
WebSockets
Sales Engineer II
•
Middle
EasyPost
•
Full-Time
Act as a pre-sales technical expert for API-based enterprise shipping and fulfillment solutions. Build custom API solutions for warehouse and distribution-center use cases and support sales teams with technical demos. Serve as the primary technical resource on calls and help drive deal flow through stakeholder relationships.
Sales Engineer, ISV Partner Team
•
Middle
PayTrace
•
Full-Time
Serve as a technical subject matter expert for PayTrace’s B2B payments platform. Support pre-sales technical demos and act as the primary point of contact for developers integrating with the API. Provide guidance on PCI compliance and platform best practices while supporting internal CRM and reporting-related technical requests.
PCI DSS
FormComplete Subject Matter Expert
•
Middle
ZoomInfo
•
Full-Time
Deliver pre-sales demos and support account teams with technical execution for FormComplete implementations. Write custom JavaScript to handle client-side timing and improve form behavior under different loading conditions. Use CSS to target form fields and make the UI responsive and dynamic, while maintaining scalable client-facing technical documentation.
JavaScript
Technical Solutions Engineer
•
Middle
Bright.md
•
Full-Time
Implement and configure a digital primary care diagnostic product (SmartExam) for tenant environments. QA and debug client-side behavior and HTTP response errors during integration and release testing. Work with large datasets using complex database queries and set up single-sign-on tenant configuration via OAuth.
National Taiwan Normal University (NTNU)
Non-Degree Program •
Mandarin Chinese
Portland State University
Bachelor's Degree •
Political Science; Mandarin Chinese
Middle Backend Developer
Confidence: High API Engineer
Node.js backend developer at a middle level specializing in pragmatic REST APIs and small service implementations. The strongest proven skill is building and testing authentication and API endpoints, as evidenced by sammypond/project2/config/passportConfig.js and the tests in sammypond/project2/test/*. Limitations include no visible migration history, scarce resilience patterns (retries, timeouts), and little evidence of performance tuning or production-grade observability.
API Design
4/10
How well APIs are designed
Pragmatic REST endpoints with basic input checks, consistent JSON error responses and simple pagination/limit support; missing versioning, idempotency keys, and formal error contract.
Data Layer & Database
2/10
Working with databases
Simple data access patterns and model-driven tests are present, but no migration history, transaction boundaries, or tuned queries; primary persistence is either Sequelize (scaffold) or a JSON file for a small app.
Scalability & Performance
1/10
Handling load and speed
Little evidence of scalability or performance engineering beyond basic limit params and in-memory operations; no caching invalidation, queuing, connection pooling or rate limiting patterns shown.
System Architecture
2/10
Overall system structure
Reasonable module separation for small apps and sensible folder structure; overall system decomposition is single-service and monolithic rather than designed for distributed systems or runtime configuration management.
Security & Auth
4/10
Protecting data and access
Authentication uses Passport local strategy and there are model tests for password hashing and validation; however secrets hygiene and token lifecycle management are not fully evidenced and a hardcoded API key exists in boilerplate.
Reliability & Observability
2/10
Stability and monitoring
Some basic error handling and client-side try/catch exist, but there is no evidence of systematic observability, structured logs, timeouts, retries with backoff, graceful shutdown, or alerting/metrics.
Expertise
Node.js• Middle
Microservices & API Architecture• Middle
Technologies
Node JS• Middle
PostgreSQL
Express
Bcrypt
Axios
Recommendations
- Build small-to-medium REST services end-to-end (authentication, CRUD, tests) using migrations and a real DB migration history (sequelize-cli migrations) to demonstrate schema evolution.
- Add resilience and observability: implement request timeouts, retries with exponential backoff where appropriate, structured logging with correlation ids, and basic metrics/health endpoints.
- Harden security and secrets hygiene: remove hardcoded API keys, use environment-managed secrets, and add token lifecycle or session revocation strategies for auth.
- Add performance and scalability work: introduce caching with an invalidation strategy or simple rate limiting, and include one measured optimization with before/after metrics.
Junior Frontend Developer
Confidence: Medium App Engineer
Frontend-focused developer (middle level) building small full-stack JavaScript apps with Express and React. The strongest proven skill is implementing end-to-end feature flows with auth and tests as shown by config/passportConfig.js and test/auth.test.js. There is limited evidence of advanced performance optimization, sophisticated accessibility on custom widgets, or large-scale architecture and scalability work.
UI Component Architecture
3/10
How interface parts are built
Basic component boundaries and composition are present (React components and separate DOM script), but there is no evidence of a custom design system, advanced composition patterns, or custom hooks managing complex lifecycles.
Responsive & Cross-browser
4/10
Works on all screens and browsers
Responsive layout and mobile usability are considered via CSS grid, media query, inputmode and autofocus, but there is no evidence of advanced cross-browser feature detection or RTL/i18n readiness.
Performance Optimization
1/10
Speed of the interface
Minimal explicit performance work; no bundle analysis, code-splitting or virtualization. There are small, pragmatic choices such as fetch options but no measured optimizations.
Accessibility & Semantics
2/10
Usable for everyone
Basic accessibility and semantics are present (proper form controls, disabled states and visible error/loading messages), but there is no evidence of ARIA on custom widgets, keyboard focus management for dynamically created elements, or automated a11y checks.
State Management & Data Flow
3/10
Managing data in the app
Reasonable server-client data flow and basic server-state discipline are shown: input validation, error handling, mapping of upstream API responses, and end-to-end tests for auth flows. There is no evidence of advanced cache invalidation, optimistic updates with rollback, request cancellation, or state machines.
Evidence
sammypond/rain-check/server.js: input validation for zip codes and try/catch with appropriate HTTP error responses
sammypond/project2/test/auth.test.js: integration tests exercising auth endpoints and redirects
sammypond/burger-stacker/src/App.js: local React state management for ingredient stack operations
UX & Visual Polish
4/10
Look and feel quality
UX attention is visible via loading and error states, clear messages, and polished CSS for the weather UI, improving perceived performance and clarity. However, there are no advanced UX patterns like undo, progressive hydration, or sophisticated skeletons.
Expertise
React• Junior
HTML & CSS• Junior
Technologies
GraphQL
React.js
Passport.js
Recommendations
- Build small-to-medium full-stack features that combine Express APIs with React frontends, especially auth and CRUD flows.
- Implement interactive single-page UI components and client-side integrations that require clear loading/error states and tests.
- Work on polishing accessibility for custom widgets and add keyboard/focus management and ARIA attributes.
- Incrementally add measurable performance work such as bundle analysis, code-splitting, and request cancellation for fetches.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Junior QA Engineer
Confidence: Medium API QA Engineer
Full-stack JavaScript developer and QA practitioner (middle level) focused on API integration testing and simple React front ends. The strongest proven skill is writing integration tests for Express authentication flows using Mocha and Supertest as exercised by the authentication test suite. There is little evidence of CI/CD integration, test infrastructure like factories or mock servers, contract/schema validation, or performance testing.
Test Automation Frameworks
3/10
Building automated tests
Basic test automation using Mocha/Chai with Supertest and DB setup; lacks fixtures, factories, mocking or parallelization.
Evidence
sammypond/project2/test/auth.test.js: uses supertest to exercise endpoints and has before hook syncing db.sequelize
sammypond/project2/test/user.test.js: model tests using mocha/chai for validations and instance methods
sammypond/project2/package.json: devDependencies include mocha and supertest and a test script
Test Coverage & Strategy
3/10
What and how to test
Includes negative-path and boundary checks for models and authentication flows but assertions are simple and there is no risk-based tagging or property-based testing.
API & Integration Testing
3/10
Testing how parts work together
Integration-style API tests hit the running Express app and use a real Sequelize test DB; no schema/contract validation or explicit retry/idempotency scenarios.
Evidence
sammypond/project2/test/auth.test.js: supertest requests against app with expectations on Location and status codes
sammypond/project2/index.js: Express route handlers implementing REST endpoints and Sequelize interactions
sammypond/project2/test/user.test.js: before hook calling db.sequelize.sync({ force: true }) to prepare DB
Performance & Load Testing
Testing speed under load
Not evidenced in public code
Bug Reporting & Analysis
Finding and describing bugs
Not evidenced in public code
CI Test Integration
1/10
Running tests automatically
Local npm scripts for linting and tests exist but there is no CI pipeline, artifact collection, matrix runs or quarantine mechanics.
Expertise
SDET & Test Engineering• Junior
Technologies
JavaScript• Junior • 7y+
Rest API
Postman
Mocha
Supertest
Recommendations
- Expand integration tests with explicit schema/contract validation (e.g. JSON Schema checks) and stronger assertions instead of relying on redirect checks alone.
- Introduce test data factories or fixtures and isolate tests with testcontainers or dedicated test DB instances to avoid global state and make tests parallelizable.
- Add CI pipeline configuration with per-test artifact capture (logs/screenshots), targeted retries for flaky tests, and selective runs for changed code paths.
- Adopt contract/property-based tests for critical APIs and add mutation or coverage tools to quantify test effectiveness.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories: