NACL convergence assurance
Led distributed firewall software enforcing inter-security-domain access restrictions with P99 propagation under 60 seconds.
AI-aware infrastructure leadership
Software & systems engineering leader with 25 years of experience building and leading cross-functional teams, architecting scalable infrastructure services, and transforming operations into productized automation systems.
Impact vectors
Led distributed firewall software enforcing inter-security-domain access restrictions with P99 propagation under 60 seconds.
Built lifecycle and server reimaging ecosystem with P99 turnaround below 15 minutes and P99 success rate of 99.9%.
Owned resilient BGP/Anycast DNS architecture with client-side caching, serving 20M queries and routing 1M upstream.
Drove stable and observable NTP/Chrony infrastructure, including precision time protocol proof of concept for time-series workloads.
Operating pattern
My work centers on converting raw fleet signals into reliable decisions: observe, classify, predict, remediate, and continuously improve through automation-first engineering.
Scalable server state collection for operational excellence, compliance, asset analytics, and self-service investigation across large production targets.
Real-time feature engineering and online ML training on event streams, designed for unsupervised learning, RLHF loops, ensemble scoring, and confidence-bound signals.
Fault management, out-of-band connectivity remediation, firmware monitoring, server reimaging, MFA access infrastructure, and secure change operations.
CISSP and CEH certified leader with deep experience in STRIDE threat modeling, TLS deprecation, secrets management, vulnerability response, and operational controls.
Core domains
Team building, manager mentoring, operating mechanisms, incident command, portfolio strategy, production readiness, and organizational execution.
DNS, NTP/Chrony, Syslog, provisioning, firewall management, server observability, service discovery, Kubernetes migration, and cloud enablement.
Python/Go automation, real-time ML signals, anomaly detection, server trend analysis, asset intelligence, fault prediction, CI/CD systems, and toil reduction.
CISSP, CEH, AWS Solutions Architect, RHCE, TLS operations, secrets management, vulnerability management, OSQuery, and software hygiene.
Career timeline
Leads Infrastructure System Software Engineering across critical distributed services at large fleet scale, covering observability, provisioning, fault management, access infrastructure, DNS, and time services.
Led software engineers building distributed infrastructure services across on-prem and cloud, including firewall management, automated provisioning, reimaging, and MFA integration.
Led SRE for QuickBooks Online, driving AWS migration, deployment automation, performance tuning, incident management, DR operations, and operational excellence.
Owned Linux engineering escalation, OS security, RHEL customization, Python automation, Puppet migration, virtualization, and datacenter hardware setup.
Supported Yahoo Mail operations, security, BCP, production monitoring, alerting, root-cause prediction, patching, and high-availability operations.
Built early foundation in Linux, Unix, Windows, datacenter operations, web/database systems, monitoring, troubleshooting, and technical training.
Credentials
Contact