Nathaniel Yocom Email & Phone Number

North Bend, Wa, Us

North Bend, Wa, Us

San Francisco, Us

Supporting and advising the incredibly smart team at Natoma (https://www.natoma.id) as they solve hard problems in the increasingly important space of non-human identity.

Pushing on technology to simplify, streamline, and support collaborative, and cutting-edge BCI research with the https://mindgardenai.com team.

San Francisco, California, Us

Sabbatical / break, during which I:Created the following collection of open source utility libraries for Linux in .net: - https://www.nuget.org/packages/Nfw.Linux.FrameBuffer - https://www.nuget.org/packages/Nfw.Linux.Hid - https://www.nuget.org/packages/Nfw.Linux.JoystickAdded support for the Microsoft X-Box Adaptive Controller to the Linux Kernel (including now accepted upstream patches): - https://github.com/nate-yocom/xpad-xacResearched, prototyped, and developed a PoC raspberry pi device + software which extends the Microsoft X-Box Adaptive Controller with assistive features for external joystick input: - https://github.com/nate-yocom/xac-assistRe-connected with family, friends, and passions - technical and otherwise!

San Francisco, California, Us

As a Senior Software Architect at Okta, I led the design and development of critical identity and access management as well as PAM solutions: - IAM Permissions Framework: Architected the permissions feature framework for Identity-as-a-Service (IDaaS) within the DDA team, enhancing the core infrastructure of Okta’s platform. - Custom Admin Roles: Architected, designed, and participated in implementation of the Custom Admin Roles feature, providing organizations with granular administrative controls. - Advanced Server Access (ASA): Architect for the ASA feature team, including the development of RDP/SSH session recording capabilities to enhance security and compliance. - Privileged Access Management (PAM): Initiated the architectural design and ideation of Okta’s initial PAM offering, laying the groundwork for future product development.

San Francisco, California, Us

As CTO, managed the Cloud Operations Department and IT departments. Also provided technical leadership and oversight of product development, working daily alongside Centrify’s engineering teams with a hands on approach to product development. Remit included net new PoC development, architectural feedback, and vision setting. Notable accomplishments include:- Drove innovative new functionality in machine credential management and PAMaaS interaction (Delegated Machine Credentials) from PoC to initial v1- Architected and built PoC of customer managed delivery for Centrify's PAMaaS service with minimal product changes and streamlined deployment methodology- Provided leadership through a two year transformation period post PE acquisition, including spinout of a new company (Idaptive), contract and legal negotiations for IP split, and effecting the technical split of a platform SaaS product, including live site migration of customers - Provided leadership and direction setting around internal Cloud Operations dog-fooding, reduction of technical debt, and further architectural and procedural improvements through DevOps and automation with tools such as Terraform, Jenkins, Saltstack, etc- Provided leadership and acted as technical resource during FedRAMP process, resulting in Centrify being the first PAM SaaS product with a FedRAMP Medium ATO

San Francisco, California, Us

- Manage the Office of the CTO team- Lead security assessment and auditing efforts across entire company portfolio of products, including implementing a public Bug Bounty program- Lead and implement consolidation of several code bases from C# and C++ into a single Golang code base for maximum cross platform compatibility and shared code- Implemented a custom high performance service in C# to route traffic between cloud service platform and on premises components without requiring firewall exceptions or ports being opened. This allowed Centrify to replace an external service dependency and increase speed of communication over 20 fold.- Provide technical, design and architectural leadership to Engineering Department and leaders- Implement open source plugin for Hashicorp’s Vault.io product – authenticates user’s against Centrify Cloud service: https://github.com/hashicorp/vault-plugin-auth-centrify

San Francisco, California, Us

- Architect and implement core features of identity management (IaaS), SSO (SaaS), enterprise mobility management (MDM) and privileged identity management products using C#, ASP.NET, Azure/AWS- Lead continued security assessment efforts for existing as well as future product development- New product and feature development, technical leadership for engineering leads, interfacing with enterprise customers- Architect and implemented cloud based reverse HTTP proxy, integrating SSO with VPN'less access to on-premise web applications using cloud platform

San Francisco, California, Us

- Architect and implemented core features of a multi-tenanted cloud service and platform using C#, ASP.NET, Azure PaaS, ServiceBus, Table and Blob Storage, AWS Aurora, EC2 to provide zero down time deployment and management of an always on SaaS security service.- Created PoC for Windows security product providing role based access control and management (Centrify DirectAuthorize for Windows), including LSA plugin in C++ and C# agent/service- Lead efforts to engage with security community and resources to ensure engineering best practices, and product security through both process refinement as well as direct analysis of product and product code.- Lead successful efforts to transition development and engineering team strategy to include Agile practices with a goal of faster and more consistent delivery and iteration- Provided technical leadership and management during creation and growth of an engineering team to support new product and company direction/investment in cross section of enterprise identity and cloud services, including team growth and management from IC to over 30 engineers, and creation of a new corporate office in Bellevue, WA.

Us

- Implemented core network architecture and community features in MAG for the Sony Playstation 3 (PS3) platform, including support for a 256 simultaneous multiplayer first person shooter gameplay experience which won a Guinness World Record for "Most Players in a Console FPS"- Lead a group of engineers in the creation and implementation of network architecture and community support features in SOCOM4 Navy Seals for PS3- Lead efforts to reduce memory usage and code complexity across company products and projects- Helped to direct and shaped current and future projects through design and implementation of core architecture components, including initial engine porting and development for early PS Vita prototypes.

San Francisco, California, Us

- Helped design and implement an industry first product for secure, distributed, network auditing and recording of user session traffic (Centrify Server Suite's Auditing features for Unix and Windows)- Contributed to development and design of core product for integration with Active Directory, providing single sign-on, security, and role based access control. (DirectControl/DirectAuthorize)

- Develop a GPL replacement for Microsoft's GINA architecture (pGina - http://www.pgina.org), allowing for authentication using a plugin architecture- Develop pGina plugins for authentication via PAM, NIS, LDAP, POP3, ... etc.- Contracted to create and develop a Windows and Linux login solution (GINA) for use with a proprietary fingerprint reader using C/C++, including a Linux driver and PAM module.- Contracted to create and develop a Windows login solution (GINA) for use with a Phidgets USB based RFID reader, allows authentication and user mangement with RFID tags, using C/C++.

- Develop web based IMAP email client using PHP with an emphasis toward groupware functionality- Develop a MAPI based LDAP Address Book provider- Develop a MAPI Message Store for groupware functionality with Microsoft Outlook against a custom (non-Exchange) server based on Open Source technology such as OpenLDAP and Apache

Tacoma, Wa, Us

- Manage collection of Solaris servers and PCs running Linux and Windows as office, development, web servers, and laboratory machines.- Notable Accomplishment: Created and developed an internationally recognized and used replacement GINA library for central authentication via limitless methods (LDAP, NIS, etc.) using C/C++.