My team has four key business objectives:Azure Host OS is the most secure cloud operation systemMy team drives virtualization architecture for new hardware and software-based security features in Azure's Host OS. Azure Host OS is the software that defines a "VM" boundary on Azure, providing hardware compute resources (CPU, memory, I/O) to customers and multi-tenant isolation. I work with silicon vendors to define future architecture to provide defense against modern attack techniques, eliminating classes of threats.Workloads are most secure on the Azure CloudThe Azure Host virtualization stack exposes underlying hardware capabilities to Azure customers. My team builds the technology to provide customers with a two-way security boundary, providing multi-tenant isolation but also isolation from the underlying Host virtualization stack (confidential computing). My team works with CPU and device vendors to define future confidential computing architecture. Azure Host evolution for modern hardware accelerators (Azure Boost)Azure Boost is Microsoft's 1P network and storage smart accelerator, providing industry leading network and storage performance. My team evolves Azure's virtualization architecture to support hardware offload and bring new hardware support to Azure customers transparently.Securing Windows and Windows Server platformThe Windows kernel provides the software platform for isolation of applications. My team works with hardware architects to build modern kernel and virtualization-based security to Windows 11 and Windows Server 2025.

I lead the Modern Compute Architecture team, a team of PMs and TPMs in the core operating systems (virtualization, kernel, and silicon) enabling platform security for Azure and Windows, redesigning compute and virtualization. My team has three key charters:Confidential Compute Platform LeadershipArchitecting compute infrastructure for Azure and the silicon industry. Our vision is to remove Azure and CSPs from the trust boundary, and from the path of tenant data while at rest, in transit, and in use.Azure Cloud and Windows Core OS SecurityDefining silicon architecture and designing platform security for future of exploit mitigation for Windows and Azure.Azure Virtualization Evolution for Modern DevicesRedesigning the virtualization stack for modern security, improved COGS and performance, and agility. Our software powers the virtualization of Microsoft’s network and storage offload (Azure Boost)

Windows Subsystem for AndroidCore platform and partner co-engineering PM enabling Android Apps on Windows 11. Delivered public preview.Silicon EnablementDriving silicon security strategy in the Windows kernel/virtualization stack. Hardening paging security and securing the stack and heap from memory safety vulnerabilities.Hardware-enforced stack protectionUtilizing Control-flow enforcement technology (CET) hardware extension, the Windows kernel proactively prevents return-oriented programming (ROP) based exploits.

Windows 10 on ARM (Always Connected PCs)Shipped 2 generations of Windows 10 Qualcomm Snapdragon PCs, including 1st party Surface Pro X in core Windows on ARM team. Shipped Virtualization-Based Security (VBS) on by default for ARM architectures and led co-engineering with IHV and ISVs for the ARM64 application ecosystem.Virtualization Based Security (VBS)Virtualization-based security utilizes Hyper-V to partition secure regions of memory to utilize as execution environments, hosting security solutions and storing secrets. VBS offers virtual trust levels which contains an isolated user mode and secure kernel to run secure code.Azure Host reliabilityEnhanced fundamentals of Azure host OS by improving diagnostic collection and decreased interruption rate.