Kernel and Hypervisor engineer with special emphasis on security and vulnerability mitigation, live-patching, performance, and scalability.

Linux kernel engineer and security researcher

Kernel engineer working on a live public cloud, including mitigation of security issues (CVE) and re-enforcement of hosts using live-patching for QEMU and KVM that I created. I developed Linux kernel and hypervisor features, diagnosed and repaired critical kernel bugs, and performed forensic analysis of crashed and disabled systems.

Authored Linux Foundation KVM course for developers-how to build KVM into your hardware appliance. I trained engineering teams on KVM, QMU, and libvirt developmemt.Offered training in association with the Linux Foundation.Consulted with organizations on Linux, kernel, and hypervisor technologies.

Lead technologist for Linux Hypervisor, OpenStack, and Docker development.I have led IBM's efforts in open-source virtualization software including the Xen and KVM hypervisors.During this time I made important contributions to upstream Linux, Xen, KVM, and QEMU. I worked with engineers from Linux distributors to have our teams collaborate on the features IBM needed.I built a small team of kernel engineers into a 60+ effort to ready KVM for Power and Mainframe platforms.

Senior Engineer, x86 servers, systems management, security.I oversaw systems management software design for IBM servers. I was also the lead developer for Pegasus CIM server software, and developed the discovery software used by all IBM hardware systems management, from appliances to the Watson supercomputer.I lead the corporation into developing the Pegasus CIM broker and was the lead contributor for three years. This is an open-source C++ daemon that provides systems management. It is multi-platform and multi-threaded. I wrote the thread and thread pool libraries and the connection broker. I implemented an embedded version of the Service Location Protocol in C for one of IBM's service processors. I then extended this code to run on all of IBM server platforms and to this day all of IBM's servers and service processors run my SLP implementation.

I wrote management applications and back-end infrastructure for a disaster-recovery storage system. My discovery protocol was standardized by the IETF.