# Omer Shapira > Kernel & Low-Level Systems Engineer | Apple C1 Modem & Memory Safety | Early LinkedIn | RFC 9318 Location: Sunnyvale, California, United States Profile: https://flows.cv/omershapira Kernel and systems software engineer with 30+ years building and debugging large-scale infrastructure. Focus on networks and security. Santa Clara. Past 5 years at Apple: • kernel networking stack and C1 modem baseband integration from pre-silicon. • Debugged kernel panics from registers only. Led adoption of bounds-safety Clang compiler extensions (CHERI-inspired): started solo on early compiler, debugged miscompilations and additional panics. • Drove team of 8 across >500k LOC in kernel networking. Hardened memory safety and fixed ~30 critical vulnerabilities. • Extended Wireshark with Darwin diagnostics and HTTP/3 improvements. • Designed tighter baseband-TCP integration mechanisms, wrote specs, and implemented prototypes. • Analyzed Darwin TCP under harsh cellular conditions. Co-chaired IAB network quality workshop and co-authored RFC 9318. Meta (Facebook): • Core contributor to predictive video CDN and high-scale QUIC/HTTP3 infrastructure for global video delivery. • Introduced EMPG metric for CDN egress efficiency; led team of 3 that saved millions by right-sizing POPs. • Designed and implemented ultra-low footprint QUIC/HTTP3 client stack for mobile, reducing load time. • Added ServerPush to HTTP/3 (first to open-source) • Researched QUIC performance and reliability issues. • Built cache size estimation system based on Cache Calculus research • Improved Instagram Live PSR and latency, leading to increased engagement. Early LinkedIn (first 500). • Growth Tech Lead. • Replaced failing address book importer with failure-oblivious, restartable design (Zeppelin). • Scaled membership 75M → 350M without redesign. • Traffic and Edge infrastructure, manager. • Established and lead a new team focusing on the network edge traffic optimizations. • Early adopter of SPDY protocol for HTTP resource multiplexing (HTTP2 precursor). Pre LinkedIn: • Protocol reverse engineering. • Data Leak Protection. • Mitigating software/media piracy on peer-to-peer networks via side channels. • VxWorks-based operating system development for intelligent network switches. • Wire-rate protocol analysis and online TCP performance analysis. Open to principal-level roles in kernel security, memory safety, modem/baseband systems, or complex low-level infrastructure challenges in the Bay Area. Open to remote. ## Work Experience ### Staff Software Engineer, Core OS Networking @ Apple Jan 2021 – Present | Cupertino Kernel networking stack and C1 modem baseband integration from pre-silicon stages. • Debugged kernel panics from registers only • Led adoption of -fbounds-safety (CHERI-like Clang extensions): started solo on raw compiler, debugged miscompilations and additional panics, then drove team of 8 across >500k LOC in kernel networking • Hardened memory safety and fixed ~30 critical vulnerabilities • Extended Wireshark with Darwin diagnostics and HTTP/3 support • Designed and prototyped tighter baseband-TCP integration mechanisms • Analyzed Darwin TCP stack behavior under harsh cellular conditions Co-chaired IAB workshop on network quality and co-authored RFC 9318. ### Owner @ Sunny vista records Jan 2024 – Present ### Staff Software Engineer, Traffic Infrastructure @ Facebook Jan 2016 – Jan 2020 | Menlo Park Core contributor to predictive CDN and high-scale QUIC/HTTP3 infrastructure for global video delivery. • Introduced EMPG metric for CDN egress efficiency; led team of 3 to instrument entire fleet, identified key factors, and delivered insights that saved millions by right-sizing POPs • Designed and implemented ultra-low footprint QUIC/HTTP3 client stack for mobile platforms • Added ServerPush to HTTP/3 (first open-sourced implementation in Proxygen) • Built head-of-line blocking detection and reporting in QUIC stack; used results to optimize last-mile video delivery • Designed QUIC Partial Reliability approach for skipping byte ranges to enable faster ABR video transitions; contributed to HTTP/3 rollout • Early member of Facebook Video Protocol team; drove initial integration into traffic infrastructure • Built cache size estimation system based on Cache Calculus research • Improved Instagram Live PSR and latency via CDN cache priming ### Director, Systems Infrastructure @ Wealthfront Inc. Jan 2015 – Jan 2016 Building software to democratize the investment industry. ### Manager, Edge and Traffic Infrastructure @ LinkedIn Jan 2013 – Jan 2015 Building the next generation traffic infrastructure platform. Founded the team and hired the core technical contributors, coached key contributors towards Staff level positions. Led the team to implement SPDY and SDCH at the network edge; to build a content distribution network (CDN) and to investigate additional use cases for edge computing. Triaged bugs, mentored engineers, improved development process, gave multiple presentations around the world. Representative projects: Adopting Shared Dictionary Compression for HTTP/S (SDCH): http://engineering.linkedin.com/shared-dictionary-compression-http-linkedin ### Tech Lead, Consumer and Infrastructure XFN projects @ LinkedIn Jan 2012 – Jan 2013 | Mountain View Led a crosscutting rotational team focused on high impact horizontal initiatives within the Consumer and Infrastructure Group at LinkedIn. - Collaboration with stakeholders in the Operations, Development and Project Management teams in LinkedIn - On-boarding and mentoring new LinkedIn hires - Establishing and improving effective knowledge management practices - Building good rapport, maintaining sense of urgency, setting the charter of the team - Planning, executing and following through the different projects - Responsible for R&D on-call for C&I services ### Tech Lead, Growth @ LinkedIn Jan 2009 – Jan 2012 | Mountain View, CA, USA Growth Tech Lead at LinkedIn. Catalyzing the technical excellence on daily basis. My typical day includes mentoring colleagues and providing hands-on guidance with respect to high scalability and performance characteristics. I contribute to thought leadership on variety of projects. ### Tech Lead, DB Protocol Analysis and Replay @ Enteros Jan 2008 – Jan 2009 Leading development of a portfolio of database-centric load testing tools: - Real Database Traffic Analysis. We developed a techology allowing customers to create load testing scenarios based on real world database traffic. - Support for all TNS/TTC data types, including user defined types - Support for all TNS/TTC code pages - Automatic detection of missing capture fragments - Automatic reassembly of TCP flows, supporting all well known TCP heuristics - Model Based Business Transaction Monitoring - Techology allowed correlating business activity across different application servers ### Senior Software Engineer, Content Analysis and Classification @ RSA The Security Division of EMC Jan 2007 – Jan 2008 Working on the automatic content classification based on machine learning methods. I focused on life-cycle of ML-based content classifiers, fingerprinting classifiers, the Policy Engine as well as prototyping certain aspects of the system. Technologies: Machine Learning, Computer Security. ### Team Lead, P2P Protocol Analysis and Optimization @ Skyrider Jan 2005 – Jan 2007 Skyrider attempted to fight internet piracy by subverting P2P controling mechanisms. Since the Russinovich/Sony rootkit controversy, we switched our attention to the social aspect of P2P, and attempted to monetize the P2P market. My accomplishments in the position: - Built real time search platform that served 70M requests a day - Improved performance of the system by 40% - Led development of unique technology that allowed real time profiling of high scale production systems using statistical CPU sampling and BFD analysis - Led development of tools used for Skyrider Research, including - P2P research stack, which allowed emualtion and research of different P2P strategies. The software was written in Python and supported massive scalability through use of continuations - Gnutella crawler, which enabled our research team to discover important characteristics of Gnutella P2P dynamics. - Acted as Python expert: http://research.microsoft.com/en-us/um/redmond/events/iptps2007/papers/shakedgishtankelshavitt.pdf Developed platform for P2P monetization on Gnutella network, called Super Ultra Peer. - Managed onsite engineers and directed offshore team in Ukraine ### Sr Software Engineer, Core OS @ Radware Jan 2004 – Jan 2005 Operating system development for Radware family of network devices. VxWorks based. Network Control Plane. ### Software Engineer, Protocol Analysis and Enterprise Monitoring Systems @ Mercury Interactive Jan 2000 – Jan 2004 Linux kernel development. High speed traffic capture for real time network performance analysis. ### System Engineer @ Ben Gurion University Jan 1997 – Jan 2000 Provided system administration/helpdesk services to university users (many different UNIX versions), maintained production server software (mail, WEB), developed in-house network/user monitoring software. Managed backups, acted as local Linux expert. ### Software Engineer @ Israel Defense Forces Jan 1995 – Jan 1997 Served in a computer unit of intelligence corps. Information security and software development. Computer networking. ## Education ### Math in Computer Sciense Ben-Gurion University of the Negev ## Contact & Social - LinkedIn: https://linkedin.com/in/oesh - Portfolio: http://www.linkedin.com --- Source: https://flows.cv/omershapira JSON Resume: https://flows.cv/omershapira/resume.json Last updated: 2026-04-12