Andrew Danforth Email & Phone Number

Seattle, WA, US

Seattle, WA, US

Stamford, CT, US

• Directed strategy and architecture for device activation, provisioning, and management platforms supporting 30+ million CPE nationwide. Mentored engineers on software architecture and best practices, performed design.
• Liaison for product and service teams, project management organization, as well as other stakeholders. Guided internal teams through translating product requirements into a cohesive set of use cases and technical.
• Drove adoption of TR-069 for CPE Management. Led ACS selection process including requirements gathering, RFP development, response analysis, onsite vendor evaluation, and final platform selection. Created requirements.
• Designed and developed systems and internal web services to support a centralized customer web portal for home network management. Deployed an abstraction layer in front of the TR-069 platform to provide a common.
• Served as IP networking and provisioning SME during launch of inaugural pure IPv6 set top box. Guided and educated video engineering team during migration to a pure IP platform. Designed and implemented a zero touch.
• Designed and developed national DHCP platform utilizing an intermediary relay to abstract backend server topology from network elements. The solution drastically reduced operational complexity and handled a sustained.

Stamford, CT, US

• Designed and developed geo-redundant dynamic device provisioning infrastructure responsible for provisioning 11.7 million DOCSIS cable modems and 5 million PacketCable MTAs.
• Lead architect and co-developer of PacketCable 2.0 device provisioning system. Worked closely with colleagues to understand business and technology needs. Analyzed requirements and use cases to design a highly.
• Worked with IPv6 leads across the engineering organization to identify strategy, architecture, and deployment plans.
• Designed and implemented IPv6 provisioning infrastructure enhancements. Performed lab proof of concept development and testing. Suggested DOCSIS specification improvements that were incorporated by CableLabs.
• Developed boot-time configuration mechanism for embedded home gateways. Developed XML configuration document syntax and authored corresponding schema for use by hardware vendors.
• Designed, prototyped, and productized a dynamic CMTS association solution that enables detection and prevention of cloned DOCSIS cable modems.

Stamford, CT, US

• Designed and developed a modular framework for profile-based automated server operating system installation and configuration.
• Designed and developed DNS-based walled garden system for subscriber notification and quarantine.
• Designed and implemented real-time MAC to IP address mapping system. Developed server software that indexes DHCP lease information and exports it via standard query API. System is still in production today and stores.

• Conducted security assessments, design and code reviews, and performed penetration testing for Fortune 500 companies. Focused on web applications, enterprise systems, and network infrastructure.
• Lead the technical delivery of mid-size client engagements.
• Authored technical content of deliverables such as engagement reports, timelines, analysis, analytical process, and recommendations. Responsible for maintaining the high quality deliverables and conveying results in a.
• Advised clients on secure software design and development processes.
• Performed security research and vulnerability analysis for internal and external clients.
• Developed penetration test tools and methodologies.

Princeton, NJ, US

• RCN acquired Erols and I moved from software development to systems security around the same time.
• Provided security input to systems and network architecture. Made policy decisions regarding access, design, and proper implementation. Performed risk assessment and planning with systems staff.
• Deployed enterprise firewall infrastructure providing protected Internet access for corporate resources.
• Developed a flexible management solution for defining access to all network resources. Centralized all account information and developed software to synchronize it with bastion hosts, TACACS servers, and SecurID servers.
• Maintained firewalls, access lists, and security services.