Edge & Application Networking

- Led alpha & GA launch of security controls for Google Cloud Console and Cloud APIs. -- Wrote design doc for and implemented the customer-facing control plane REST API. -- Planned tasks around launch requirements & prioritized an approval-heavy database schema change to unblock team members working on other project tasks in parallel. -- Worked with engineers and infrastructure across many product areas, including Cloud Console, Google Workspace, and Google Accounts. -- Ran a mailing list for alpha feedback from customer engineers. -- Used by 75+ companies including several Fortune 500 enterprises.- Migrated 217k peak QPS of outgoing RPC calls to get per-user data from a newer service. -- Latency and correctness were both critical. Google Accounts called our service in the hot path of every Google product page load from enrolled customers. And incorrect data could have led to thousands of customers locked out of their emails and calendars. -- Dark launched to compare data correctness and latency. Called the new service in a detached C++ thread to prevent blocking our original response even if latency was worse. -- Found & fixed a race condition in a new library dependency that could hang the thread despite cancellation.- Implemented a dynamic user-facing error page for access denied events, a major user touchpoint for our product, later used as a springboard for several other features.

- Implemented a wizard to guide users through a Security Key firmware update that required human touch. 35,000+ Google employees followed my wizard, which brought FedRAMP compliance to all Google engineers with production access.

- Designed & implemented an internal fork of an SSH Android app (ConnectBot) that connects to employee work desktops without a VPN. -- Tunneled SSH traffic over Google’s unique WebSocket SSH relays. -- Stored sensitive SSH keys in the secure element using Android Keystore to prevent exfiltration. -- Upstreamed SSH SHA2 hash support to the open-source ConnectBot project.- Implemented features for Google’s single sign-on Java web backend and for SSO client libraries in Java, C++, Python, and Go.

- Secured execution of user-supplied IPython notebooks using Docker containers.

- Implemented REST API for a Java-based A/B testing library.- Designed and implemented an easy-to-use Django middleware for A/B testing.

- Added features to a web-based QA testing tool using Python and Django.