Building Zero Trust Architecture(ZTA) systems at Uber scale with heavy focus on Reliability

• Design/Develop authentication and authorization middleware for service to service and personnel access

• Onboard/Integrate Payments services to strong auth mechanisms to meet PSD2 compliance

• Design & Implement Audit logging pipeline for auth - Petabyte scale - ELK, Kibana, Hive

• Design & Implement backend RPCs for authorization platform (gRPC, thrift over tchannel)

• Design & Implement self service onboarding using Cadence.io

• Built feature for Incremental rollout of authz policies

• Platform Authorization / Secure Service mesh

• Using Gen AI and advanced prompt engineering with various models to build Security Agents for speeding up adoption and help customers debug/resolve issues in minutes (MCP auth tools)

• Use Claude APIs to speed up resolution during auth adoption

[Java/SQL/Swagger/JUnit]

• Lead Engineer for design and development of various Product Security features (Strong Passwords, Password History, Password Expiration, Account Lockout) to get RedSeal into DoDIN APL (Formerly UC APL) product list

• Lead Engineer for design and development of fine grained Access Control features using PostGreSQL Row Level Security

• Lead Engineer for design and development of Data Ingestion REST APIs and backend

• Expertise in DB migrations using Flywaydb

• Scrum master for multiple releases ; Interact daily with UI/UX/Backend/Product teams for collaboratively providing simple solutions for complex customer use cases

A10 Application Delivery Controllers L4-L7

A10 Harmony for Network management and policy enforcements [C, JSON, REST, Python] for ADC, SSLi, TPS solutions

Lead engineer for prototyping and developing A10's Thunder Convergent Firewall

Develop various enhancements for A10's SSLi product. [C, OpenSSL]

• Designed & Developed AppNav-XE solution on IOS XE for ASR, CSR (Cloud Services Router) and ISR router platforms. (AppNav-XE is a component that intelligently distributes traffic from a router to services) Developed control-plane, IOS XE forwarding manager, data plane messaging infra for inter-box communication high availability.

• Lead engineer to fix, assign & track defects, status updates, discuss and fix EFT issues.

• Developed and prototyped Branch Policy/Identity Router paradigm on ISR router platform that distinguishes QoS services such as bandwidth and allows/denies access control , URL filtering, etc for various users based on profiles like employees, guests, visitors. Delivered demo and presentations to various internal organizations [C, IOS, XML, XACML]

• Software Feature Development, Maintenance & Documentation in Cisco IOS ACL, Object-group ACL, IOS IPS, IOS Flexible Packet Matching – a Deep Packet Inspection technology [C, XML]

• Developed several tools for Unit test and other automations such as file conversions [HTML, PHP, TCL/Expect]

• Developed tool using kernel level “pktgen” for performance and throughput measurement [UNIX, bash, pktgen]