Led the development of TrustGate/TrustMesh edge, a distributed data plane that provides secure connectivity and access control using VPN and Proxy mechanisms. TrustGate is a crucial component of Ubyon's identity-based zero-trust solution. Significantly, after a 9-month staging trial, our TrustGate successfully entered production in a Fortune 500 company.Built a distributed management and control infrastructure, include the following components:-. Developed TrustGate bootstrap OS.-. Implemented a distributed DNS system.-. Created the Ubyon secure token service.-. Established a distributed configuration using ZooKeeper.-. Implemented centralized route distribution.-. Developed the Envoy xDS control service.Developed TrustLink, a lightweight HTTPS reverse connect program designed to facilitate connectivity between two network boundaries.Managed both development and production kubernetes environment, implementing the following key initiatives:-. Implemented GitOps and ArgoCD for all CI/CD pipelines.-. Designed an "app of apps" framework, empowering individual micro-service owner to independently deploy their own services.Oversaw IT infrastructure to ensure stability, security, and scalability.

Software Defined WAN team: We centralized network control by bringing routing and security orchestration into the cloud, revolutionizing the traditional approach. I led and built the overlay tunnel orchestration between access points and VPN aggregation boxes, which was one of the two main flagship features in the SDWan solution. We achieved the GA milestone in 16 months. By the time I left to start my Ubyon startup adventure in August 2020, the SDWAN solution had reached 100M in revenue run rate.

Acropolis Hypervisor team: We built a hypervisor based on KVM/Qemu and tightly integrated with Nutanix distributed storage. I helped to build the dynamic resource scheduler. I also pioneered to build an OVN based overlay network infrastructure that led to the SDN solution for Nutanix DRaas product.

Pioneer Engineers and Architect on Juniper next-generation data center network products - QFabric• Platform lead that first inside Juniper ported JUNOS routing engine platform into XLR MIPS based processor.• Led QFabric simulation effort. Adopted virtualization QEMU/KVM to meet the large scale distributed system simulation challenge. This is a 128 Top-of-Rack switches and 3-stage CLOS fabric simulation system. Simulation functionalities include control plane provisioning and data plane forwarding. Forwarding chipset simulation supports both Broadcom as well Juniper in house forwarding ASICs. • Data plane architect that drives Packet-Forwarding-Engine (PFE) infrastructure and forwarding feature development for QFX switching platforms from QFX3500 to QFX5100, which are Broadcom Trident/Trident2 based Top-of-Rack (TOR) and Fabric. This is the switching product line that helped CDBU penetrate into Amazon AWS and Google global CDN infrastructure. • Drove design of Network Traffic Analytic (micro-burst monitoring) framework that successfully demonstrates to customer.• Currently drive Juniper next generation switching fabric. • Initiated Deep Network Analytic (DNA) project on Linux based platform for layer 7 application level network visibility. First framework used QosMos as Deep Packet Inspection engine, Redis as local in-memory data store, Nodejs as back-end for RESTful APIsInventor of multiple tools that have now been mainstreamed by developers, systest and customer technical support, leading to significant cost reduction in terms of “time” and “dollars”. • Distributed debugging tool, fvty, used by developers, systest, and JTAC to triage complex issues in complex QFabric distributed system in a time-efficient manner. • Python based QFabric unit test framework for developer to regression control plane as well as data plane• QEMU/KVM infrastructure for developers/systest to simulate next generation switching fabric end-to-end, up to 128 TORs and 128 Servers.

Lead on Wimax Subscriber Station board bring-up and kernel development• Led driver development for ARM-based subscriber platform. • Ported and customized Linux 2.6 kernel. Designed and developed DSP and Modem driver for MAC application.Key developer to Wimax Subscriber Station MAC software• Toook charge of MAC data path development. Adopted lock-free design principle to meet real-time constraint on data path. Data path development includes MAC PDU construction and transmission, bandwidth allocation, ARQ, and HARQ etc.• Designed and implemented data scheduler to compliant with 802.16e QoS service parameters.

Technical lead on MSM8600 dual-processing chipset driver integration• Drove Hardware Abstraction Layer (HAL) design/implementation effort between software driver team and hardware verification/integration test team. Brought in BSP data scheme to encapsulate variations in MSM board layouts.• Led integration effort of L4 kernel (Linux version) OS and Qualcomm Mobile Station Software onto modem ARM9 processor. Integrated chip driver including interrupt controller, clock regime, GPIO, serial port connection, and bootstrap code etc. • Worked on WinMobile integration on Scorpion Application processor (ARM v7 architecture). Key contributor to CDMA 2000 GPS project. • Implemented peaks processing algorithm to improve jammer detection. • Redesigned CDMA MAC layer including Call Processing, System Determination, and MUX modules to bring GPS protocol layer into modem software