Engineering leader for the Infrastructure team, responsible for all aspects of Core Infrastructure and Developer Infrastructure and Platforms.My responsibilities span across four primary areas:1. Improve and ship high-quality/secure/fast software2. Provide engineers with highly efficient developer workflow tooling and processes3. Management of our cloud infrastructure, budget, and operations4. Reimagine, develop and support our AI/ML infrastructure to power Cody (developer AI assistant)Owner of Cloud Infrastructure:* GCP and AWS: responsible for all aspects of budgeting, provisioning, security, and deployment/operations.* Compute, Storage, Data: management of cloud-based customer environments, databases, and data storage.* Kubernetes: clusters responsible for all production environments.* Networking: inter-cloud connectivity, internal routing, CloudFlare, and customer private links.* Security: working closely with Security teams to achieve a high level of compliance for highly-sensitive customer data handling, i.e., SOC 2.Owner of Developer Infrastructure:* Build/test/release: Bazel, Redis, "sg tool" (internal tooling)* Automation/logging/operations: OpsGenie, Entitle* Deployment: Terraform, Buildkit, "executors" (customer-sandboxed [against evil code] source code analyzer)Owner of AI Infrastructure:* Host/Deploy/Monitor/Audit Cody's services* Expose API to third-party services, such as IntelliJ* Training and update of AI models* Integration with both third-party commercial and customer-owned LLM providers

Leading the Platform and Candidates divisions, responsible for a combined 500+ organization with 330+ direct reports. My responsibilities expand to setting direction for both Engineering, QA, and SRE.My responsibilities now extend to include Platform, Candidate Management, Resume Search, and Interviews for all employers.------------------------------* Candidates - Candidate Management (triage, tracking, and disposition) - Interviews (virtual and phone) - Qualifications (screener questions) - Automation (workflow automation) - Responsiveness (increased engagement between job seekers and employers) - Messaging (communications between job seekers and employers) - Resume Search ($XB/year revenue generation product)Since I joined the Candidates organization, I moved our Engineering to deliver and improve the number of interviews conducted by Indeed by 5x compared to 2021. I also invested in platforms (reliability and performance), and we delivered a 30% performance boost on top of gains already achieved by Platform improvements since 2020.------------------------------* Platform (unchanged. refer to previous entry)Our platform efforts continue to expand across Indeed. The platform I envisioned created a team (hired and set direction) that delivered a complete game changer for Indeed. Not just faster, open source, and modern, but also delivered whopping performance improvements, increased reliability, and unparalleled developer-centric infrastructure (for building, testing, debugging)------------------------------* Company-Wide Direction- Cloud Council -- Review and approve cloud-related strategies, planning, and budgeting- Policy Council -- Review and approve company-wide policies and procedures- API Governance -- Sets direction and frameworks for company-wide API strategy- Resiliency & Security -- Working with key leaders across the company to continue enhancing the resiliency and security of our systems

My primary responsibilities as Sr. Director of Engineering are to reimagine how Indeed operates, improve its development practices, security, performance, reliability, and create the proper conditions to move Indeed to the public cloud.Responsible for all Platform delivery for the SMB GM area (Small & Medium business customers), responsible for >50% of Indeed's revenue.Manager of a large organization, my group designs and delivers the infrastructure that powers employers.indeed.com as well as its security policies and guidelines:Security & Compliance* Security guidelines definition, detection, and prevention. Integration with various third-party systems (AWS Security Hub, LogicGate, Tenable)* Working in tandem with Indeed-wide security group, defining and applying security policies to SMB systems* Responsible for the certification of SMB with various regulatory bodies: CIS 20, GDPR, JSOX, and its parent company fiduciary requirements,Developer Infrastructure* Front-end serving infrastructure services, libraries, build, testing, accessibility, and security.* Back-end serving infrastructure for employers.indeed.com* Creation, curation, and serving infrastructure of 1000's content pages to marketing indeed.com/hire/resources, including workflows with third-party content creators.* Improvements of Indeed developer pipeline, reducing delivery time, and increasing developer NPS.* First-mover to public cloud at Indeed.Data Infrastructure* Oversee the processing and delivery of business-critical data to senior leadership and partner teams* Deliver the workflow system to process large amounts of data from heterogeneous sources (HDFS, S3, MySQL, Aurora, Athena)

Manager of managers. Manage teams in two time zones (Seattle and Singapore), responsible for the online data stores, search, cache, DaaS (Data As A Service), and Data Governance.My teams are responsible for various production systems at Grab. I have a deep understanding of production environments, deep cross-team collaboration with (all) product teams, and a grasp of all phases of the product development lifecycle. Work in close cooperation with the TPM team on production schedules and budget allocation.* Manager of the team responsible for producing online data stores of Grab, encompassing RDS, Cassandra, ScyllaDB, DynamoDB.* Manager of the team that owns the production search and cache for Grab for ElastiCache, Redis, ElasticSearch, and Amazon AES.* Architect and manager of the team provider of a unified abstraction for SQL and NoSQL stores to all company services and data science/processing. API capable of abstracting all data stores – both SQL, NoSQL, and object-store – focusing on increased security and developer productivity. Today its is hard to mix different environments, e.g., SQL + NoSQL and multiple cloud providers. This system allows developers to span across diverse technology stacks (both data platforms and cloud providers) seamlessly. System scales to xxM QPS.* Work closely with Information Security to define Grab’s Data Classification and Data Governance policies, ISO 27001, and online PCI compliance.* Saved $xxM/year by optimizing and rightsizing database resourcesMember of Data Governance, Patent Counsel, and ArchCo (an 8-person virtual team responsible for company-wide architecture review and approval).Current technologies on my day-to-day activities:* Kubernetes: EKS, kops, OpenShift* NoSQL: Cassandra, DynamoDB, ScyllaDB* SQL: RDS (MySQL, Aurora), PostgreSQL* Cloud stacks: AWS, Azure* Security: PCI, ISO 27001, Data Classification/Governance* Monitoring: Datadog, statsd* Load Balancers: ELB/NLB, Envoy

- Lead Software Engineering: Responsible for the relationship management, and technology development for third-party integration of Google Cloud Platform. Worked on Cloud Integration & Open Source, managing the relationship with Google cloud partners Terraform, Ansible, Puppet, Chef, and others. Work previewed at PuppetConf and ChefConf and released as open-source in Aug’17 on Google Cloud Platform’s Github and Puppet Forge, with Chef Supermarket to follow in Q3’17. (relevant links in Publications section). The goal of the project is to cover 100% of the Google Cloud Platform (all products and services) and integrate them with popular open-source deployment tools.- Technical Lead / Architect: Worked four years designing and implementing the core system to deploy and manage 100M+ nodes across 10+ data centers. I lead the team that developed technology that powers both internally critical workflows and Firebase Test Lab for Android with 24x7x365 with 99.999% reliability SLA.- Developer: Implemented software drivers that interface with TPM chip and other kernel-level components to deliver full disk hardware encryption for ChromeOS installed in production Chromebooks. Identified and fixed a TPM key generation security vulnerability on openCryptoki that affected all Linux distributions. Implemented real-time packet filtering on Google Compute Engine to block traffic from export-controlled embargoed countries.Contributed to various open-source projects.

- Mobile software (Android, iPhone, iPad) for sports training: video, lectures, instructions- Provides custom mobile training framework

Technical Lead: Architecture & design and lead on the team that created System Center Virtual Machine Manager 2012. I created (solo) a project called Virtual Server Deployment Manager (VSDM). Microsoft shipped VSDM (and blog) to customers, and System Center workflows borrowed heavily from my previous work. Various patents came from my work on virtualization.Engineering: After an acquisition, created from the ground up Microsoft Security Baseline Analyzer 2.0 (MBSA) analysis tool to scan Windows for security vulnerabilities and provide mitigation reportsResearcher: Worked for three years on Microsoft Research on the eXtreme Computing Group in core technologies that eventually created Microsoft Azure and Microsoft SQL Azure.Worked in collaboration with the University of Washington to create the Trident Computing Workflow systemCreated a product for workflow versioning and reliable experiments reproduction

- Security software development- Custom secure hosting solutions- Secure Source Control System- Special security projects

- Develops software for secure internet usage booths- Develops operation software for generation, production and manage of pre-paid internet cards- Develops custom branding for companies provide paid internet access to customers.

Manager of managers. As Head of Development, I was responsible for the development and deployment of the election software. I had teams in three geographic locations. Each team had a manager and Engineers reporting to them.Engineering ManagerManaged a team of 27 engineers distributed across three sitesDrove the Electronic Presidental Elections development projects, working alongside government officials on requirements, execution, and delivery.QA – Oversaw the ISO 9001 certification of the company’s software development, defined and achieved Capability Maturity Model (CMM) level 3, and created a long-term plan for achieving CMM level 4.Senior Software EngineerArchitect of the Election security system, used in every voting booth across the country, the most extensive synchronized deployment system ever built at the time.Developed various system-level software – device drivers, network filtering and transparent network encryption – for use by the company’s products, government, and military customers.Cryptography: Worked with various cryptography systems and frameworks, including hardware-based HSM and smartcards. X.509 PKI Certificate Authority systems from eTrust and Verisign. Defined the protocol for ICP-Brasil – the Brazilian public-key infrastructure, used to certify financial transactions and official government records. Lead the team that designed the first version of Modulo GRC, its today flagship product.