Mark Roach Email & Phone Number

West Hollywood, California, Us

Los Angeles, Ca, Us

Mountain View, Ca, Us

2014-Present - Technical lead of Access Backend SRE team Team is responsible for running security/authorization systems and device inventory pipeline, making access decisions for all internal network and system access.- Led team of 12 SRE on 2 continents- Designed and led implementation of large integration testing system for all authorization services, providing A/B validation of components (in C++. Go, and Python)2012-2014 - Access SRE team Before splitting into two teams, Access SRE was responsible for authorization systems, as well as all secure gateways (http proxies, VPN, SSH bastions), SSO, and password management tools.Implemented release automation for all services- Defined SLOs/SLAs and implemented monitoring2012-2015 - BeyondCorp Core Team BeyondCorp is a zero-trust network model spearheaded by Google and seeing rapid adoption industry-wide.- Designed and implemented firewall-based tracking of network traffic for over 50,000 workstations on 3 platforms- Designed and implemented analysis pipeline to group traffic by category and certify devices for migration to unprivileged networks (described in USENIX articles, links below)2009-2013 - Developer and Technical lead (starting 2011) of CorpDB CorpDB is Google’s all-encompassing (Ruby-on-Rails based) system for managing DNS, DHCP, users, groups, machine access policies, and service configuration. - Migrated from Apache/Rails on bare-metal machines to Google’s internal production cloud system.- Implemented a full REST API and Python clients (becoming the main contributor to an open source ActiveResource project in the process, links below)- Implemented the DHCP configuration system for all Google corp machines

Charlotte, Nc, Us

- Deployed and managed hundreds of Linux, AIX, HP-UX, and Solaris web, application, and database servers- Wrote automation tools to aid in enterprise-wide system administration tasks- Designed, built, and documented AIX I/O virtualization environments

- Built and maintained Linux-based servers for small/medium businesses including mail (Postfix/Cyrus), authentication, web servers, and file/print servers- Wrote LDAP/Kerberos administration software to allow customers to easily manage user accounts

Us

- Built and administered Linux servers. Services on these systems included: DNS & DHCP, Samba, CUPS, Apache, ProFTP, Postgresql, Site-to-site VPNs, Iptables, Radius, SSL certificate and CRL management (openssl & openldap), Squid proxy, SMTP Servers, NFS- Planned and Managed network infrastructure for 30 offices across 6 states. This included ordering services from ISPs, acquiring and configuring appropriate network equipment, and ongoing monitoring of all sites- System automation using Perl, Python, bash, etc.- Wrote helpdesk call tracking software- Wrote document imaging client and server software to support scanning of 100,000 documents per month, and lookup/retrieval/printing with group access controls