Enterprise - Cloud Optimization and Security Team* Worked on 4+ products over 3 years, as part of a fast-paced emerging products group, leveraging a wide variety of Akamai technologies including cloud-based services, caching, data deduplication, network optimization, and customer premise VMs / physical appliances.* Implemented optimizations to the TLS MITM (man-in-the-middle) daemon to avoid expensive overhead when origin certs were invalid, when the cert signing service was down, or when client machines were heuristically determined to be missing required certs.* Designed and implemented the policy library and accompanying JSON configuration that was integral to the critical data path of multiple products to apply optimization and security policies to flows. The library used the configured policy and the result of the classification engine to determine the appropriate policy for each flow.* Designed and implemented the software responsible for the network configuration of Linux-based systems that were deployed on customer premises and managed remotely.

High Performance Market Data Team* Worked closely with a team to develop a high-performance subscription-based market data distribution platform with an emphasis on high throughput and low wire-to-wire latency. The code was originally implemented in C and re-architected and implemented in C++. The server handled multiple TCP and/or multicast UDP data streams over sockets and used a multi-threaded pipelined architecture on multi-core Linux servers.* Made significant contributions to performance analysis and identified multiple throughput bottlenecks and latency sources in the legacy architecture. This led to many fast-path optimizations and bug fixes as well as significant design improvements when re-architecting the server.* Implemented client session manager module to handle authentication, access control, license enforcement, feature support, subscription state, and other client session state.* Contributed to the design and implementation of multicast loss recovery mechanisms, including gap filling, retransmission requests, and snapshots.* Designed and implemented a load-balancing system to direct clients to the most-appropriate market data server that meets their subscription criteria. The load-balancer issued auth tokens that were verified by the servers using SHA1 HMAC, eliminating the need for synchronous communication.