• Leading effort to implement Zero Trust security model across all Appian environments.• Helped lead Security Engineering team in developing custom security detections, used by Security Operations team.• Implementing Okta SSO system for access to department resources, including using Okta Identity Engine to integrate with CrowdStrike EDR to assess endpoint security posture.• Working with department leadership to define strategic goals and roadmaps.• Working with vendors and VARs to acquire and support various security-related products.• Led maturation of software engineering practices on Security Engineering team.• Created training program for onboarding recent hires onto Security Engineering team.• Mentoring junior engineers.• Attended various security conferences and events, e.g., SANS events, Security BSides, and OWASP events.• Leader in Infosec Chapter learning group. Studied web app security (among other topics) using Kali Linux, DVWA, and various CTF platforms.• Extensively involved in team recruiting.

• Led effort to implement Zero Trust security model across all Appian environments.• Helped lead Security Engineering team in developing custom security detections, used by Security Operations team.• Implemented Okta SSO system for access to department resources, including using Okta Identity Engine to integrate with CrowdStrike EDR to assess endpoint security posture.• Designed and implemented high-availability HashiCorp Vault cluster for secrets and access management. Hardened deployment against vulnerabilities. Deployed on Amazon Web Services (AWS) platform, managed with Terraform.• Using Vault, created system to use permissioned PKI certificates to enable secure SSH to sensitive endpoints. Used Terraform, Ansible, and Bash scripting.• Created system to scan GitHub repositories for secrets (e.g., API keys, AWS credentials, passwords), and worked with code owners to remove found secrets. Used Groovy, Bash, Docker, and Jenkins.• Remediated public data exposure in enterprise Google Calendars. Used Python and Google Cloud Platform (GCP) APIs.• Managed AWS VPC resources with Terraform infrastructure-as-code (IaC).• Loaned to Engineering department to work with teams in securely implementing Kubernetes-based cloud-native platform for Appian customers.• Helped investigate security alerts using AlertLogic SIEM, ExtraHop, CrowdStrike, and AWS Security Hub and GuardDuty.• Worked with department leadership to define strategic goals and roadmaps.• Worked with vendors and VARs to acquire and support various security-related products.• Led maturation of software engineering practices on Security Engineering team.• Mentored junior engineers.• Attended various security conferences and events, e.g., SANS events, Security BSides, and OWASP events.• Leader in Infosec Chapter learning group. Studied web app security (among other topics) using Kali Linux, DVWA, and various CTF platforms.• Extensively involved in team recruiting.

• Worked on enterprise-wide CI/CD infrastructure and DevOps systems.• Designed scheme for automated storage and retrieval of secrets using Hashicorp Vault.• Created system for automatically updating Docker containers used for automated testing with latest version of Firefox browser.• Created department-wide Git hooks framework for code linting and auto-formatting.• Wrote Ansible scripts for managing Mac mini build cluster.• Maintained and modified department-wide Gradle CI build system.• Streamlined Webpack configurations for JavaScript build system.• Helped implement Android testing system using Google Cloud Platform Firebase framework.• Used Grafana to track build metrics.• Led squad Kanban standup meetings.

DevOps and IT infrastructure consulting

Responsible for acquisition, configuration, and operation of school IT systems, including classroom technology, on-premise network, and cloud-based systems. Systems included:• Cisco Meraki and Aruba Networks devices• Instructure Canvas learning management system (LMS)• Google Suite productivity tools• Zoom videoconferencing• Rocket.Chat messaging platform hosted on DigitalOcean cloud provider• Student and teacher laptops (Windows, Mac OS, Chrome OS) and mobile devicesWorked with Head of School and Director of Admissions to facilitate overall educational goals:• Modern, technology-facilitated learning experience• Remote learning available to students regardless of location• Secure, safe, and reliable network environment• Compliance with FERPA directives

• Hunter/HAVSM: Designed and implemented new service-bus architecture for vehicle-specific module (VSM) software for Hunter UAV, in order to enable future system expansion and improve maintainability. Used C++, Visual Studio, LMDB, Windows, VMware, Linux.• Hunter/Automated Testing Framework: Proposed and created framework for performing automated regression testing on HAVSM UAV software. Included set of GUI tools. Led team of developers in implementation phase. Used Python, Qt, Eclipse, Jenkins, ClearCase, pyUnit, Nose, XML, XSD, Windows.• Hunter/HAVSM: Set up Jenkins nightly build system and automated code quality inspections for team. Used Jenkins, Bugzilla, Clearcase, SonarQube, Cppcheck, Parasoft C++Test, Windows.• CTF Metrics: Implemented web-based system to visualize processing cluster performance metrics. System helped identify cluster bottlenecks and resource limitations. Used Java servlets, JSP, Spring, JavaScript, SQL, ActiveMQ, XML, XSD, JFreeChart, Eclipse, JUnit, Ant, Linux.• SEDB: Technical lead on key system regularly used by over 5000 analysts to aggregate, analyze and visualize data. Desktop client interfaced with over 30 data sources, and pushed results automatically to ESRI ArcMap, Google Earth, Excel, i2 Analyst’s Notebook, and Renoir. Reduced analysis time from hours to minutes. Maintained daily contact with end users. Used Java Swing, ESRI ArcObjects, Microsoft COM, XML, Eclipse, NetBeans, Windows, Linux.• HT & FJ: Helped development teams solve long-standing threading and multiprocessing issues, using Python threading and XML-RPC on Linux.• SMW: Developed middleware components to allow legacy stand-alone signal processing environment (X-Midas) to connect to enterprise-level signal processing systems. Created testing platform to exercise middleware components. Evaluated commercial and open-source JMS for performance and load capacity. Used Java, Fortran, C, XML, JMS, Swing, JFreeChart, OpenMap, Eclipse, NetBeans, Linux.

• Smart Floor: Developed a novel “smart floor” prototype using pressure sensors and user modeling in order to determine user identity and location using a single footstep. Work accepted for publication at major competitive conference (ACM CHI 2000). Used Win32 C, load-cell sensors, A/D converters, and Visual Studio.• Aware Home: Helped design and implement the Aware Home laboratory. Investigated impacts of ubiquitous and pervasive computing in domestic environments. Worked on indoor location-tracking systems using smart floor tiles and wireless radio tags. Used Win32 C and Visual Studio.• Student Labor Exchange: Supervised and led design and development team on web-based system that facilitated bartering of services between students. Work presented at research conference.• Savoir Tour Guide: Helped develop voice-only location-aware mobile campus tour guide with portable computer, differential GPS, and cellular network connection. Used Java and Symantec Café, Windows.

• Investigated detection of mobile user state using wearable computer.• Prototyped wearable computer for mobile data collection and analysis. Used embedded PIC micro-controller, wireless radio link, and custom Win32 application developed in C using Visual Studio.

• Designed and prototyped infrared IrDA hardware for Palm Pilot. Wrote IR test application for PalmOS using C and CodeWarrior IDE.• Helped design infrared-to-Ethernet bridge hardware. Reverse engineered existing IR-to-Ethernet product.

• Designed and developed neuroimaging acquisition and analysis software used for fMRI brain imaging, functional analysis, and visualization. Used C, C++, shell scripting, AVS visualization toolkit, Unix.• Designed and implemented near real-time parallel neuroimaging processing system in collaboration with Pittsburgh Supercomputing Center. Successfully authored grant application for supercomputing time. System reduced fMRI analysis time from many hours to near real-time. Used C and PVM distributed computing libraries on Cray C90 and Cray T3D, Unix.