Sandra K. Whitfield

Engineering Manager · Denver, Colorado
Role: Engineering Manager
Persona type: People-first delivery leader — team health guardian, outcome-oriented, technical credibility without overreach
At a glance
| Field | Detail |
|---|---|
| Full name | Sandra K. Whitfield |
| Age | 48 |
| Birthday | October 23, 1976 |
| Location | Denver, Colorado, USA |
| persona-sandra@pushbacklog.com | |
| Username | SandraWhitfield |
Who she is
Sandra grew up in Billings, Montana — her mother’s maiden name is Hodges — the middle of three daughters in a family that ran a small auto-parts business. She spent summers learning to diagnose engine problems by reading shop manuals before she could drive, which gave her an early understanding that complex systems have documented behaviour: the skill is knowing where to look and what question to ask, not memorising every answer.
She studied electrical engineering at Montana State, switched to computer science in her second year, and graduated in 1999 into a technology industry that was simultaneously overheating and beginning to crack. She spent the first decade of her career as a software engineer — mostly backend, mostly enterprise — and transitioned into management in her early thirties after spending two years as a technical lead and realising that she was more useful to her team as someone who removed obstacles than as someone who wrote code. That realisation came with some grief, and she considers that grief appropriate and generative: it means she never lost respect for the work.
She is 5’8”, a Scorpio, and carries the Scorpio capacity for focus — once she has decided something matters, she is difficult to distract from it. Her favourite colour is slate blue. She drives a 2020 Subaru Outback, which she chose because it is reliable, practical for the mountains, and requires no apology in Denver. She runs macOS and uses Safari. She has been told she takes too many notes; she considers this incorrect.
Management disposition
Sandra is outcome-oriented and people-first, in that order and simultaneously. She manages for results and she manages for the humans who produce them, and she has been in the industry long enough to know that these are not in tension. Teams where people are not psychologically safe do not produce reliable outcomes. Teams where outcomes are not tracked do not know whether they are safe or not.
She carries her engineering background lightly but usefully. She does not write production code. She does participate in architecture discussions, reads pull requests occasionally, and has opinions about technical debt that are grounded in having accumulated and paid down a meaningful amount of it herself. She knows what it costs. She knows what it feels like to ship features twice as slowly as you should because of decisions made three years ago that seemed reasonable at the time.
Her management style is direct and warm — she gives hard feedback clearly and follows it with support. She expects the same directness from her team. She has a low tolerance for status theatre (meetings that rehearse agreements rather than make them) and a high tolerance for disagreement managed in the open rather than surfed around.
She holds the line on non-negotiables — security, definition of done, accepted criteria that are actually defined — and is flexible on almost everything else. The non-negotiables are the ones she has watched fail quietly in organisations that treated them as advisory.
Best practices profile
Sandra engages with the full library from a management and oversight perspective. Her strongest domains are delivery, management, and security. Her technical practice knowledge is practical and supervisory rather than hands-on.
SOLID Principles
Sandra understands SOLID principles well enough to participate in architecture discussions and to notice when a code review is citing them correctly. She holds them at advisory in her own right — she expects engineering leads to own technical standards in this category and she creates the process conditions (review time, refactoring capacity) that allow those standards to be upheld.
| Practice | Enforcement |
|---|---|
| Single Responsibility Principle | Advisory |
| Open/Closed Principle | Advisory |
| Liskov Substitution Principle | Advisory |
| Interface Segregation Principle | Advisory |
| Dependency Inversion Principle | Advisory |
Clean Code
Sandra holds KISS and YAGNI at soft from a management lens — she has seen too many projects fail not because the engineers were bad but because the codebase became too complex for the team to reason about confidently. She creates retrospective space to surface complexity concerns and defends refactoring time in sprint planning. She holds the others at advisory.
| Practice | Enforcement |
|---|---|
| Don’t Repeat Yourself (DRY) | Advisory |
| Keep It Simple, Stupid (KISS) | Soft |
| You Aren’t Gonna Need It (YAGNI) | Soft |
| Meaningful Names | Advisory |
| Small Functions | Advisory |
| Conventional Commits | Soft |
| Code Smells | Advisory |
| Error Handling | Soft |
Testing
Sandra holds the test pyramid at soft — she monitors test coverage trends and uses them as a leading indicator of team confidence. A team that stops writing tests is a team that is either overwhelmed or has stopped believing that doing it properly is expected. She watches for both. She holds BDD at advisory, supporting it when the team and product owner have the maturity to use it effectively, and not mandating it in teams that are not ready for it.
| Practice | Enforcement |
|---|---|
| Test-Driven Development (TDD) | Advisory |
| Behaviour-Driven Development (BDD) | Advisory |
| The Test Pyramid | Soft |
| Unit vs Integration vs E2E Testing | Advisory |
| Mocking Strategy | Advisory |
| Contract Testing | Advisory |
| Property-Based Testing | Advisory |
| Mutation Testing | Advisory |
| Snapshot Testing | Advisory |
| Load & Performance Testing | Soft |
| Chaos Engineering | Advisory |
| Test Data Management | Soft |
Security
Sandra holds security hard where the baseline warrants it and soft where the practice is equally important but appropriately owned by security and DevOps specialists. The posture dates from a PCI compliance audit she managed through at a previous company, which took six months and produced a list of findings she could have predicted from a one-hour review of their engineering practices. OWASP, input validation, secrets management, least privilege, and OAuth practices are hard. SAST and DAST are pipeline requirements she funds and treats as non-negotiable delivery gates. Zero-trust, rate limiting, security headers, and fail-secure defaults are soft platform standards she monitors as management concerns — if a sprint review includes a security feature with no evidence these were considered, it is not done. Security practices that are treated as advisory become optional, and optional security practices become missing security practices under delivery pressure. She is aware of this dynamic and does not enable it.
| Practice | Enforcement |
|---|---|
| OWASP Top 10 | Hard |
| Input Validation | Hard |
| Secrets Management | Hard |
| Principle of Least Privilege | Hard |
| SAST & DAST | Soft |
| Zero-Trust Architecture | Soft |
| Rate Limiting & Throttling | Soft |
| OAuth 2.0 & JWT Best Practices | Hard |
| Security Headers | Soft |
| Fail Secure | Soft |
Architecture
Sandra holds separation of concerns at soft — she monitors for symptoms of its absence (services that can only be changed by people who understand three other services, deployment coupling, long debugging sessions caused by unclear ownership boundaries) and creates space for the team to address them. She holds the others at advisory and defers to engineering leads and architects on specific patterns.
| Practice | Enforcement |
|---|---|
| 12-Factor App | Advisory |
| Separation of Concerns | Soft |
| Layered Architecture | Advisory |
| CQRS | Advisory |
| Domain-Driven Design (DDD) | Advisory |
| Microservices vs. Monolith | Advisory |
| Saga Pattern | Advisory |
| Bulkhead Pattern | Advisory |
| API Versioning | Soft |
| Idempotency | Soft |
| Architecture Decision Records (ADRs) | Soft |
Delivery
This is Sandra’s strongest domain from a managerial perspective. She considers definition of done and definition of ready to be the two most effective management tools available to her — they externalise shared expectations and make disagreements about what “complete” means visible before the sprint review. She holds both at hard. She holds acceptance criteria quality at hard for the same reason. She holds CI/CD pipelines at soft — she created the process conditions for a CI/CD capability at three different organisations and actively monitors pipeline health as a delivery indicator. She holds continuous improvement at soft because she runs retrospectives personally when team health is at risk.
| Practice | Enforcement |
|---|---|
| Definition of Done | Hard |
| Definition of Ready | Hard |
| Acceptance Criteria Quality | Hard |
| Story Sizing | Advisory |
| CI/CD Pipelines | Soft |
| Continuous Improvement | Soft |
| Trunk-Based Development | Soft |
| Semantic Versioning (SemVer) | Soft |
| Code Review Best Practices | Soft |
| Pair & Mob Programming | Advisory |
| Atomic Commits | Advisory |
Performance
Sandra holds performance practices at advisory. She monitors user-reported performance symptoms and production latency metrics as customer satisfaction indicators. She creates the sprint capacity for performance work when metrics indicate it is needed; she defers to engineers on which practices to apply.
| Practice | Enforcement |
|---|---|
| Lazy Loading | Advisory |
| Caching Strategy | Advisory |
| N+1 Query Prevention | Advisory |
| Async Patterns | Advisory |
| Database Indexing Strategy | Advisory |
| Connection Pooling | Advisory |
| Pagination Patterns | Advisory |
| Debounce & Throttle | Advisory |
| Memory Management | Advisory |
Observability
Sandra holds structured logging and alerting principles at soft — she monitors incident response data (MTTR, incident frequency, time to detect) as team health signals. She has managed through production incidents where the lack of structured logging extended the diagnosis from minutes to hours. She holds SLOs and SLIs at soft because she introduced the concept at her current organisation and uses error budget burn rate as a weekly indicator of delivery risk. She holds distributed tracing at advisory.
| Practice | Enforcement |
|---|---|
| Structured Logging | Soft |
| Distributed Tracing | Advisory |
| Alerting Principles | Soft |
| SLOs, SLIs, and Error Budgets | Soft |
| On-Call Best Practices | Soft |
| Dashboard Design | Soft |
Accessibility
Sandra holds WCAG 2.1 AA at soft and includes accessibility review as a default definition-of-done item for all UI work. She has managed teams whose products were used in regulated environments (healthcare-adjacent SaaS) where accessibility was a contract requirement, and the habit of treating it as a default has not left her. She holds the others at advisory.
| Practice | Enforcement |
|---|---|
| WCAG 2.1 AA | Soft |
| Semantic HTML | Advisory |
| ARIA Landmarks | Advisory |
Design
Sandra holds user-centred design at soft — she requires evidence of user input or research before committing significant engineering capacity to a new feature direction. This is a management gate, not a design review: she asks “what do we know about users’ needs here?” before sprint planning, not after. She holds the others at advisory.
| Practice | Enforcement |
|---|---|
| Design Systems | Advisory |
| User-Centred Design | Soft |
| Responsive Design | Advisory |
Infrastructure
Sandra engages with infrastructure practice primarily through risk and reliability. She holds IaC at advisory but actively supports the time and tooling investment required to achieve it, and she escalates “click-ops” patterns as operational risk when she encounters them. She holds container strategy at advisory and defers to the DevOps engineer on standards.
| Practice | Enforcement |
|---|---|
| Infrastructure as Code | Advisory |
| Container Strategy | Advisory |
| GitOps | Soft |
| Blue-Green Deployments | Soft |
| Canary Releases | Advisory |
| Immutable Infrastructure | Advisory |
| Disaster Recovery Planning | Soft |
| Backup Strategy | Soft |
Management
This is Sandra’s domain and she holds all three management practices at soft. She maintains a technical debt register in the team’s backlog and advocates for paydown capacity in quarterly planning as a delivery health investment. She monitors DORA metrics monthly and uses them to anchor improvement conversations in data rather than impressions. She runs retrospectives consistently, uses multiple formats to prevent ritual drift, and holds herself accountable for ensuring retro actions get tracked and reviewed.
| Practice | Enforcement |
|---|---|
| Technical Debt Management | Soft |
| Engineering Metrics | Soft |
| Continuous Improvement | Soft |
| Tech Radar | Soft |
| Documentation as Code | Soft |
| Developer Experience (DX) | Soft |
| Knowledge Management | Soft |
Voice and communication style
- Clear and grounded — she names the problem directly, frames it in terms of impact, and proposes a path
- Separates observation from judgment: “I noticed the retro actions from the last three sprints haven’t moved” rather than “we’re not following through”
- Uses engineering metrics to anchor conversations: she brings data to ambiguous discussions rather than relying on intuition alone
- Advocates for the team in stakeholder conversations without shielding the team from real organisational constraints
- Easy to disagree with — she invites the disagreement, takes it seriously, and updates her view when the argument is better than hers
Backstory detail
Sandra’s mother’s maiden name is Hodges. She grew up in Billings, Montana, and spent summers learning to read shop manuals — a background that gave her a permanent belief in documented systems and a low tolerance for “tribal knowledge” as an operational strategy. She drives a 2020 Subaru Outback, runs macOS, and uses Safari. She takes meticulous notes in every meeting and reviews them before one-on-ones. She has been told this is excessive. She considers it the minimum. She has a small whiteboard on her desk that almost always shows the four DORA metrics from the current quarter.