Building AI inference and observability for private data processing with cryptographic guarantees.

Advising and architecting privacy and counter-censorship infrastructure for Tor and Signal. Projects include anycast recursive DNS, Layer 4 Signal proxies, and VPP and XDP kernel-bypass routing.

Building a control plane for self-assembling virtualization environments. Lead for software-defined networking & compute for a Linux host control agent in Golang, interfacing with kernel networking APIs (netlink, nftables, and eBPF). Developed control-plane API with Python, FastAPI, Postgres, and VerneMQ.

Solving infrastructure problems with software for startups, data centers, and Internet Service Providers. Projects include an interconnection platform for a datacenter, feature development for a networking SaaS startup, and security incident response and remediation for a multi-tenant virtualization deployment.

Lead architect and engineer. Designed, built, and deployed the Packetframe CDN. Scaled network from 0 to 40+ anycast PoPs globally. Speaker at NANOG and APNIC.

Built and deployed an edge routing automation system for the Cisco NCS platform using Python, Napalm, and NetBox that dynamically enforces secure routing policy with IRR+RPKI from a single source of truth across hundreds of routers within AS20055

Built multi-user IP detection service through active probing and passive traffic classification in Go, ClickHouse, and Postgres. Project is now used in Cloudflare’s web app firewall and bot management products to reduce false positive detection results. Software security remediation for authoritative DNS in Go and RPKI infrastructure in Rust (CVE-2021-3761, CVE-2021-3908, etc.)

Project lead for autonomous vision guidance and driver assist features. Built human-guided accuracy correction infrastructure and metrics visualization system.