Leading Engineering and Operations, Deepfactor Inc.

Leading engineering product development from concept to GA...

Container Security Vulnerability Assessment:Established and lead multi location offshore engineering teams to develop vulnerability assessment solution for containers. This was done by extending Qualys' cloud agent engine for scanning of docker images and containers. Architected sensor design as daemon set on cluster nodes and developed scanning solutions for* Offline and online scanning of docker images and reporting of realtime drift in container images.* Scanning of images during CI stage and gate keeping using K8s admission controller during CD phase.* Scan inventory in docker registry.* Scan windows container images using similar concepts.* Lead integration efforts for Layered Insight's container runtime security solution into Qualys' container security solution.Continuous engagement with customers to determine their needs and drive product roadmap helped us generate 2+ million dollars in revenue with in the 1st yr of operation.Technology Stack included developing sensor in C++11 for deployment in kubernetes (EKS, AKS, GKE), openshift or docker swarm clusters and CI/CD solutions using Jenkins and Bamboo plugins. The backend was 12 factor apps developed in JAVA and Go, with cassandra for NoSQL data store, Kafka for pub/sub, ELK for logs management and puppet for apps delivery.Centralized Application Management System:Lead design of an application orchestration platform to deploy & manage applications on docker enabled hosts. This platform was designed before kubernetes was stable and publicly available. Lead development of file object caching service on CAMS which was used for Qualys' patch management solution along with Ivanti's patch intelligence service.Technology stack included Squid, HAProxy, Kakka, Redis, Puppet, ELK stack and JAVA for multiple microservices.

Lead design, development of FireEye's flagship email protection appliance. Won hackathon with innovative proposal to disarm malicious email. Designed and delivered features like email header analysis, email features extraction, embedded object analysis, embedded URL analysis, email message tracking, and many more. Also, strived to enhance application throughput by optimizing email processing engine.

Implementing new detection for VM and compliance scans, improvising scanning infrastructure for scalability, key-role in implementing and rollout of virtual scanning appliance. Implemented encryption of signature DB, binary obfuscation of ELF objects (symbol table obfuscation).

This position involves developing software modules in C/C++ on Linux/Windows for our product Alchemy. This product provides box solution to provide secure environment to USB device users through its encrypted Vault, secure Remote acces, RSA secure ID (OTP) authentication etc.

I was involved in many projects during my 6 yrs association with Internet Trends (I) Pvt Ltd (ITPL). One of the longest and most challenging project that I worked on was the MPLS/GMPLS/Routing InterEmulator. On this project I got a chance to work on cutting edge networking technologies including optical domain.Later projects with ITPL gave me exposure to security domain, where I got familiarize with encryption and hashing algorithms. I also developed value adding features which gave an edge to the product over competitors.