Cryptography infrastructure.

Previously:

– Authentication, authorization, and use of cryptography.

– Web Foundation: facebook.com availability and resiliency

– Traffic Foundation: global scale optimal service delivery

Availability, performance, and reliability.

Complex Incident Response.

Traffic Engineering.

Availability, latency and security.

• Infrastructural Components

• Near real time MySQL to HBase replication. (Java)

• ZooKeeper based service discovery. (Python)

• Kafka based messaging system with an HTTP gateway. (Scala)

• Content addressable storage for binary large objects on top of HBase used as a CDN origin. (Scala)

• K-ordered, multi datacenter capable, distributed ID generator. (Scala)

• Time series collectors for kernel, JVM, SNMP, and proprietary APIs of appliances. (C, Python)

• Service Delivery

• Frontend serving, caching and load balancing.

• TLS termination.

• Networking

• Data center networking.

• Move from Layer 2 (VLANs) to Layer 3 (IP) leaf and spine with OSPF in the core.

• Diversifying upstream connectivity by becoming multi-homed and establishing MLPEs with BGP at the border.

• OpenBSD based packet filtering and direct server return load balancing.

• Advisory Engineer

• OpenTSDB: An open source, scalable, high performance time series database built on top of HBase and written with Java.

• An N+2 system to serve StumbleUpon badges (around 70% of the all HTTP requests StumbleUpon gets) with very low latency and high availability. Written with Scala.

• Scalability

­ - Bottleneck analysis and refactoring of Java, .NET, and LAMP stack applications.

­ - RDBMS performance work for MySQL and Oracle via engine tuning, sharding, and query refactoring.

­ - Migration of aging conventional OLAP systems to Hadoop and HBase.

­ - Anycast CDNs

• Integration

­ - Peddler of Service Oriented Architecture. SOAP, XML-RPC, and RESTful web services.

­ - Enterprise Service Buses with Oracle Fusion, BEA AquaLogic and Apache ServiceMix.

­ - Message Queue, Business Process Mgmt. and Data Services Platform integrations to ESB.

• Security

­ - Security engineer for software product line and customer proprietary information security projects.

­ - Black box and white box vulnerability assessment, penetration testing, and audit automation.

­ - MSSP operations lead for homeland security, law enforcement, and finance sector customers.

• Business Continuity and Disaster Recovery Planning & Compliance (2006-2007)

­ - BCP and DRP for government information systems.

­ - ISMS auditor for ISO 27000 and PCI-DSS.

• Product Development (2004-2006)

­ - DDoS Mitigation Appliances, Load Balancers with SSL offload.

• Kernel development for OpenBSD based network security appliances.