• Directed strategy and architecture for device activation, provisioning, and management platforms supporting 30+ million CPE nationwide. Mentored engineers on software architecture and best practices, performed design and code reviews.• Liaison for product and service teams, project management organization, as well as other stakeholders. Guided internal teams through translating product requirements into a cohesive set of use cases and technical requirements, assessed their feasibility, and designed solutions to meet them. • Drove adoption of TR-069 for CPE Management. Led ACS selection process including requirements gathering, RFP development, response analysis, onsite vendor evaluation, and final platform selection. Created requirements incorporating TR-069 standards and proprietary enhancements for five classes of CPE. • Designed and developed systems and internal web services to support a centralized customer web portal for home network management. Deployed an abstraction layer in front of the TR-069 platform to provide a common services interface also utilized by Customer Care systems.• Served as IP networking and provisioning SME during launch of inaugural pure IPv6 set top box. Guided and educated video engineering team during migration to a pure IP platform. Designed and implemented a zero touch authentication solution for pure IP set top boxes using TR-069 and X.509 client certificates, eliminating the need for subscribers to manually authenticate to receive video service.• Designed and developed national DHCP platform utilizing an intermediary relay to abstract backend server topology from network elements. The solution drastically reduced operational complexity and handled a sustained load of 15,000 requests per second.

• Designed and developed geo-redundant dynamic device provisioning infrastructure responsible for provisioning 11.7 million DOCSIS cable modems and 5 million PacketCable MTAs.• Lead architect and co-developer of PacketCable 2.0 device provisioning system. Worked closely with colleagues to understand business and technology needs. Analyzed requirements and use cases to design a highly available device provisioning platform enabling real-time dynamic MTA configuration. Collaborated with chipset manufacturer to validate reference MTA firmware during development cycle.• Worked with IPv6 leads across the engineering organization to identify strategy, architecture, and deployment plans. • Designed and implemented IPv6 provisioning infrastructure enhancements. Performed lab proof of concept development and testing. Suggested DOCSIS specification improvements that were incorporated by CableLabs.• Developed boot-time configuration mechanism for embedded home gateways. Developed XML configuration document syntax and authored corresponding schema for use by hardware vendors.• Designed, prototyped, and productized a dynamic CMTS association solution that enables detection and prevention of cloned DOCSIS cable modems. • Member of a small team that defined requirements for next-generation embedded home gateway devices.• Recognized by peers and management as an innovator and key contributor to architecture and design initiatives. Recipient of 2011 peer recognition award for exceptional teamwork.

• Designed and developed a modular framework for profile-based automated server operating system installation and configuration.• Designed and developed DNS-based walled garden system for subscriber notification and quarantine.• Designed and implemented real-time MAC to IP address mapping system. Developed server software that indexes DHCP lease information and exports it via standard query API. System is still in production today and stores approximately 25 million leases supporting upwards of 10,000 queries per second.

• Conducted security assessments, design and code reviews, and performed penetration testing for Fortune 500 companies. Focused on web applications, enterprise systems, and network infrastructure.• Lead the technical delivery of mid-size client engagements.• Authored technical content of deliverables such as engagement reports, timelines, analysis, analytical process, and recommendations. Responsible for maintaining the high quality deliverables and conveying results in a clear and coherent manner.• Advised clients on secure software design and development processes. • Performed security research and vulnerability analysis for internal and external clients.• Developed penetration test tools and methodologies.

RCN acquired Erols and I moved from software development to systems security around the same time.• Provided security input to systems and network architecture. Made policy decisions regarding access, design, and proper implementation. Performed risk assessment and planning with systems staff. • Deployed enterprise firewall infrastructure providing protected Internet access for corporate resources.• Developed a flexible management solution for defining access to all network resources. Centralized all account information and developed software to synchronize it with bastion hosts, TACACS servers, and SecurID servers.• Maintained firewalls, access lists, and security services.