I lead the strategic development of Fastly’s security product suite, including the Next-Gen Web Application Firewall (WAF), Bot Management, and other key security initiatives. My role involves enhancing detection capabilities, refining security signals, and advancing rules to address emerging threats. I partner closely with cross-functional teams across engineering, product, and customer success to drive innovation and ensure seamless delivery of cutting-edge security solutions. While contributing directly to technical execution, I also work to align our product strategy with both customer needs and industry demands, ensuring our solutions provide robust protection and high performance.

I led the development and growth of HAProxy's product suite, including the reverse proxy/API Gateway, Kubernetes Ingress Controller, and a globally distributed SaaS Application Delivery Network (ADN/CDN) platform. My focus was on aligning product roadmaps with the executive vision and ensuring that our solutions addressed the evolving needs of enterprise customers and the open-source community.◆ Drove the launch of major products like the HAProxy Kubernetes Ingress Controller, enabling seamless integration between external clients and Kubernetes clusters.◆ Spearheaded the creation of HAProxy Edge, a globally distributed ADN SaaS solution offering high-performance application delivery services at scale.◆ Partnered with cross-functional, globally distributed teams to bring products to market and ensure consistent collaboration across engineering, marketing, sales, and support.◆ Designed a product demo system that increased customer acquisition by 50%, helping to drive significant business growth.◆ Engaged with the open-source community, enterprise customers, and industry analysts (Gartner, IDC, 451 Research) to ensure our products aligned with market needs.◆ Showcased HAProxy products through public speaking at conferences, webinars, podcasts, and blog posts.

I helped manage approximately 400 CentOS Linux servers for several high traffic properties primarily dealing with video (FMS, HLS, CDN). This included maintaining high traffic configurations for Apache, NGINX, and Zeus web server. I architected, implemented, and maintained a security policy across the entire infrastructure to protect against intrusions and minimize the attack surface. This included implementing chroot jails, a hardened kernel with Role Based Access Control (RBAC), and developing custom (C based) patches for the bash shell for centralized command history logging. I also helped architect an IPS solution that used a combination of snort and BGP (Quagga) which aided in blocking threats across the entire network, which included mitigation of DDoS. I developed a custom AWS autoscaling solution to dynamically scale application and load balancer resources based on connection counts, which was not possible to achieve with the standard AWS Auto Scaling feature.

I architected and implemented an Active Directory forest with a site-to-site VPN that connected domestic and international offices. I implemented open-source measures to prevent malware and spam, which saved the company approximately $20,000 per year. I was responsible for handling the day-to-day IT tasks, which included managing company-wide accounts, structuring company policies and procedures, and maintaining network-wide security updates.

I redesigned the full network architecture and configured all of the workstations to use Active Directory with restricted access. I implemented a network-wide VPN for securely accessing internal resources. I also managed company-wide accounts, structured company security policies and procedures, implemented disaster recovery preparation and maintained network-wide security updates.