Stuart Steele Email & Phone Number

Austin, Tx, Us

New York, New York, Us

Continuing on with where I left off! Lots of Kubernetes on bare metal, secure networks, GovCloud, FENCES and other DoD stuff :).

Neuhausen, Schaffhausen, Ch

Takeaways: RFID, inventory cycle counting, traffic and vehicle counting, on-site premise provisioning, remote device management, at-scale messaging, and secure device provisioning.At Sensormatic, I managed infrastructure, security, compliance, monitoring, incidents and outages, customer first response, RFP negotiation, on-site networking, capability planning, long-range financial planning, and procurement. I operated five cloud applications out of Google Cloud Platform, ran the development stack for the engineers, and protected the company from cyberattack. I brought monthly GCP costs down from $1M/month when I started, to $550K when I left, against an increase of 30% in customer base. I brought the DataDog monitoring costs down from $1.2M/year to $700K per year, and reduced tooling costs by 20%. I shepherded the company through its initial SOC2 type 1, followed by two unqualified SOC2 type 2 certifications.

New York, New York, Us

Takeaways: SBIR DoD. air-gap Kubernetes on bare metal, self-contained Kubernetes deployment system, operators for Kubernetes workloads.NALEJ deploys and manages containerized applications in the cloud or on the edge, moving workloads on demand across the deployment space. NALEJ deploys to Kubernetes on cloud providers, in data centers, and onto bare metal, establishing the infrastructure and platform where they don’t already exist. The system is pre-configured to provide backing services to audit, log, monitor and inspect network traffic, allowing department of defense or government customers to satisfy a large subset of NIST SP 800-171 and -53 security controls out of the box.I designed three primary related software systems which work together to deploy and manage arbitrarily complex application systems. The first prepares infrastructure such as bare metal, private cloud operating systems or public cloud providers to host an application adaptation platform. The second system installs and configures the adaptation platform, which provides a complete Kubernetes cluster, block, filesystem and object storage, object-to-volume mapping, roles and credentials, and a container registry. The third system deploys containerized applications to the Kubernetes platform, deploys monitoring, networking, logging and auditing services, connects the applications to the services, deploys a federatable local identity manager, and connects the deployed applications to the identity manager for single sign-on, authentication, authorization and auditing. Applications can be manifest-, Helm chart- or operator-installed and managed: we put them into an application catalog and annotate them with our configuration system to perform the deploy-time service linking and identity management integration.

New York, New York, Us

I managed the product line for an Air Force customer on the defense side, providing the automated deployment, management, monitoring and auditing infrastructure to deploy their program workloads to unclassified locations. On the Agile side, I wrote the roadmap, managed the projects, created epics and Gantt charts, and kept the developers on task. On the structured side, I prepared long-term project plans, high level technical design documents and critical path project plans.In 2022, I made substantial progress on the effort to deploy to classified locations, upgrade technical documentation, and develop air gap capabilities to allow for enclave deployment, redeployment, software update and installation decommissioning on the high side of an air gap environment.

Takeaways: Kubernetes micro service application on AWS, with an API, and vendor API integration.At Jewelbox, I designed a cloud-based loyalty mobile app for restaurants, with API integration into NCR point-of-sale systems.I researched the market for loyalty apps, prepared a product plan, and made contact with restaurant point-of-sale system vendors to explore integration. After deciding that there was a potential market, I designed, wrote and deployed a microservice application with API and database support in Kubernetes for deployment onto Amazon Web Services. The web application was written in Python, with Django as the application engine. The mobile app was written in Swift for iOS.

Takeaways: designed and delivered first carrier-grade Passport system, carrier-grade Wi-Fi expert, 3G, 4G, 5G telecom, packet core, network handoff and AAA, converged Wi-FiAT&T Wi-Fi designs, deploys and manages Wi-Fi networks. While there, I wrote or designed many of the core and distributed systems. I wrote or designed these major systems:AAA and IdentityEdge authentication - Captive Portal, WISPr, 802.1X legacy framework, 802.11u and PasspointRoaming – RADIUS roaming with 3rd party telecom subscribersIdentity Management - SAML, OAuth, XACML and federation with partner identity providers for system user connection with two factor supportDevice Management – RADIUS and TACACS framework for devicesCellular OffloadPasspoint edge integration – transparent user device connection using SIM credentials onto Wi-Fi networks, providing complete security and avoiding the irritating captive portal interruptionTechnology: RADIUS at the edge, Diameter in the core, Diameter routing, 3GPP reference points, HLR, HSS integration, Diameter routing, MPLS transport over AVPNBilling and Invoicing – comprehensive cycle billing and invoice presentationVenue Configuration – hierarchical model of each locationOrganization and Tenancy – metasystem to model venues within organizationsNetwork Device Management, Monitoring and Topology – comprehensive device monitoringConference System – Scheduled Wi-Fi and network services for meetings at hotels and conference centersMonitoring Agent – real-time monitoring and management of network devices in the edge networks using SNMP, vendor API, CAPWAP interfacesGateway – user access management at the edge: Firewall, Routing, Marking, QoS, Bandwidth Shaping using Linux Netfilter and componentsUser Configuration – complete user network provisioning framework at the gatewayData Streaming – agents at the edge, streaming to ingestion pointsEndpoint Encryption – user and application certificate management with IPsec, PKE, IKEv2

AT&T Wi-Fi provides Wi-Fi and network management to commercial customers. As a senior technical architect, I continued to design many of the systems that ran the business. I worked a great deal to integrate legacy systems with AT&T systems. I wrote device management and configuration systems, element monitoring systems, billing and billing integration systems, and worked on the team to integrate acquired companies into the AT&T business unit.

Us

Primary takeaway: Prime contractor DoD. CORBA, C++, distributed repositories, hardware abstraction, distributed systems debugging and diagnosis, efficient RPC, and distributed systems architecture expert.Overwatch was part of the Department of Defense's Future Combat System (FCS) program. I wrote C++ code on Linux here, in a service-based CORBA system. Additionally, I traveled to the lead integrator's (Boeing's) site regularly to integrate releases with the rest of the FCS system.

Design, development, data modeling, integration of on-demand network software. Designed and wrote core billing, provisioning and data ingestion systems.

Telecom billing software

Generally, small business management software.

Banking software.