Automated deployment of infrastructure and reduced its cost by 33%* Reduced the deployment time of our analytics environment from ~1 week to 4 hours by automating the deployment and configuration of Cloudera Hadoop and Apache Cassandra, Geode, and Kafka using Terraform and Chef.* Integrated automation with build system to allow developers to deploy infrastructure as needed.* Designed the usage of Apigee as new API gateway and the secure usage of OAuth 2.Technologies: Apache Kafka, Geode, Spark, and Tomcat, Apigee, Cassandra, Chef, Docker, Git, Gradle, HDFS, Java, Jenkins, Ruby, Scala, Terraform

Reduced spending by $3.5M/yr (~5% of revenue) and decreased overall outages by 80%* Reduced physical footprint by 95% and costs by 50% by designing and implementing physical/cloud hybrid, global data centers, migrating services to the cloud, and reducing the number of hosts by 800.* Consolidated dozens of Oracle database into a set of Oracle RAC clusters resulting in a decrease of average request latency by 67% and a 83% reduction of required licenses.* Converted 1.5M min/day fax service to an IP-based service reducing cost by 80% and adding a DR site.* Profiled and tuned OnStar back office web services, increasing throughput by two orders of magnitude and decreasing requisite server footprint by 75%.* Guided $7M annual budget and managed database, networking, and system engineers.* Developed new monitoring and alerting system that supported 1 second-granularity metrics reporting (down from 5 minute-granularity), long term-trending, and compound metric alerting.* Managed team of 20 and mentored 7 internsTechnologies: Amazon Web Services (AWS), Arbor Networks DDoS defense, BGP, Cisco Nexus (2K, 5K, 7K), ASA, ISR, and ASR, DNS, Dynatrace, Elasticsearch, EMC VMAX and VNX, F5 BIG-IP, FCoE, Google Cloud Platform, HPKP, HSTS, HTTP, InfluxDB, IPsec, Nagios, OpenStack, OSPF, Oracle, Oracle RAC, PKIX, RHEL Linux, SNMP, T.38, TLS, X.509, Xen

Reduced existing HTTP API’s response time by 99.5%* Managed 9-person team responsible for the development and support of the Identity Management product. Reduced bugs by 90% and implemented monthly deployment cadence.* Developed micro-service framework based on Spring that provided a throughput of 7,000 request/sec on 2 CPU cores and 25MB of memory. New HTTP APIs had a 90th decile response time below 50ms.* Implemented a build process using Jenkins, Nexus, Sonar, and Maven and introduced practices like on-checkin build and testing and nightly integration tests. Eliminated build-related deployment failures.* Introduced engineering department to micro-service architecture, globally load balanced services, and distributed storage technologies Riak and Elasticsearch.* Managed team of 9 developers.Technologies: Elasticsearch, HTTP, Identity Management, Java, Jenkins, JPA, Maven, Nexus, OpenID, Oracle, ReST, Riak, SAML, Sonar, Spring

Designed Shibboleth IdP and supported deployments covering 100+M users* Designed and implemented OpenSAML and Shibboleth IdP 2.x and 3.0. New architecture allowed additional security protocols (e.g., OpenID, OpenID Connect, WS-Trust) to be implemented, eased operational load, and reduced HTTP response time by 95%.* Assisted in transition of project from an Internet2-owned project to its own multi-national consortium.* Authored SAML extensions and served as voting member of the OASIS Security Technical Committee.Technologies: Cryptography, Java, OpenID, PKIX, SAML, X.509, XML, XML-DSIG, XML-ENC, WS-Trust

Providing development, training, and support services for Shibboleth.

Led security service development for the LHC Computing Grid (LCG)* Designed and led implementation of Argus, the LHC Computing Grid (LCG) attribute-based authorization system. Decision engine evaluated policies with hundreds of simple and complex predicates against dozens of variables in sub-100ms time at the 95th percentile.* Architected and developed a ReST-based, distributed virtual organization management platform used to support the collaboration in all national and cantonal higher education and research organizations.* Supported Shibboleth deployment covering federal and cantonal public services (e.g., law enforcement), and 100% of higher eduction and research institutions.Technologies: Cryptography, HTTP, Java, OpenSAML, OSGI, PKIX, ReST, SAML, Shibboleth, X.509, XACML, XML

Designed system to securely share data between DC Dept. of Health, Dept. of Homeland Security, NOAA, Dept. of Transportation, MedStar, and GU Medical Center in order to model biological terror events.* Reduced protein comparison job from 29 days to 30 minutes on like hardware.* Participated in the CA-BIG cancer data catalog and IHE XHR inter-company healthcare record exchange standardization process.* Participated in the design of the university's new identity management system.* Participated in the developer of the Shibboleth 1.x IdP.* Participate in development of Apache Santuario.* Managed a team of four developers.Technologies: BLAST, DICOM, HL7, IHE XDS & XUA, Java, JDBC, OpenSAML, SAML, Shibboleth, Tomcat, XML, XML-DSIG, XML-ENC, XPATH

Consolidated five identity management systems (IDM) into one enterprise-wide system, integrated Active Directory with it, and implemented Single Sign-On services across university apps.* Integrated IDM solution with multiple source systems and developed process to reconcile data for overlapping records. * Developed mechanism to push reconciled data to downstream systems. * Developer user-facing self-service tools to allow updating of data and control release/visibility of that data. * Operated OpenLDAP cluster with over 1M entries supporting ~12k requests per second. * Implemented off-site backup for core services. * Managed team of five that developed and operated middleware services including managing the hosts, network, and deployed services..Technologies: SCT Banner, DNS, EJB, F5 BIG-IP, Hibernate, Java, JBoss, JDBC, JMS, JSP, Kerberos, Maven, MySQL, OpenLDAP, Oracle, RHEL Linux, Spring, SSL/TLS, Tomcat, SVN, YourKit

Developed multi-threaded, fast-rendering Portal platform to replace existing system.* Developed uPortal channels* Developed WSRP channelsTechnologies: HTTP, Java, Maven, MySQL, SSL/TLS, uPortal, XML, WSRP

Assisted in development of supply-chain management system for shipbuilding industry.Technologies: AIX, CORBA, EJB, IDL, IIOP, Java, WebSphere