Wesley Sutton Email & Phone Number

Boston, Ma, Us

San Francisco, California, Us

Los Altos, California, Us

[DB Consolidation] I proposed, architected, designed, and implemented a new database architecture to simplify the per-org database architecture that immediately saved $100k's of dollars per year in AWS DB cluster costs. I used Row Level Security (RLS) to ensure patient data (PHI) and organization data safe. Only developer on the project.[Billing Service] I implemented fax service to facilitate Medicare billing for patient prostate biomarker tests

Boston, Ma, Us

Core Platform Services - Identity Access Management (IAM)[Chair of Security Steering Committee] I created, orchestrated and chaired a company-wide steering committee to address numerous security gaps including exposed secrets, vulnerable endpoints, and PII leaks.[Platform Redesign] I contributed fundamental architectural aspects of a full platform rewrite to consolidate the microservice code and platform components to a more maintainable and scalable architecture [PII Datastore] I designed and implemented a secure tax ID storage service. DynamoDB + blowfish encryption. The system was designed to issue a global customer ID once the customer's legal name and TIN have been validated via IRS.[IAM / User Management] I architected and implement the user management system from the ground up. This included storing and maintaining sensitive customer profile/configuration information and integration with Auth0.[Partner SSO Integration] I integrated several partners with our Auth0 IDP to provide seamless partner user SSO (OAuth 2.0) login into the internal systems. The unique Indigo user ID is packed into the JWT access and ID tokens with optimal efficiency for user info retrieval (UI requests to the API).[External API Design] I initiated and defined the architecture for seamlessly allowing external API access to specific internal endpoints to expose the APIs for partner, self-service integration. Led the authorization and security aspects of this effort.[Soft Skills / Leadership] Technical Leadership, Cross-functional Team Leadership, Partner Relationship Management, Team Building, Mentorship

Cambridge, Ma, Us

[IpV6 Global Routing Architecture for Cloud Providers] I was lead author on a product architecture design that utilized IpV6 for AWS Direct Connect from Akamai to AWS and between Azure and GCP datacenters. The goal was to to reduce Customer egress cost from AWS cloud-based origins by utilizing CDN backbone network routing through redundant on-ramp providers using IpV6. The Customer would have the ability to control the routes.References:- IpV6: https://www.akamai.com/blog/trends/10-years-since-world-ipv6-launch

Cambridge, Ma, Us

[Distributed (Blockchain) Ledger Wallet Processor] I worked closely with MUFG to interpret and develop the wallet system design from specification to implementation. This was a first of its kind system and requirements. I designed and implemented 100% of the initial wallet engine framework. A single instance processed 100k+ transactions per second.Full ISO 8583 protocol implementation (no third-party libraries). Subsequently the blazingly fast (10M tps) payment ledger was spun off as a joint venture with MUFG: GO-NET. Principal Software Engineer track.References:- GO-NET Joint Venture: https://www.akamai.com/newsroom/press-release/akamai-mufg-announce-joint-venture-for-blockchain-based-online-payment-network

Cambridge, Ma, Us

[Application Load Balancer (ALB)] I implemented the first OSI Layer-7, session-level Application Load Balancer (ALB) before Google or Amazon had released their equivalent ALB offerings. This utilized advanced proprietary DNS capabilities to provide "session-level stickiness" while also providing administrator control of the flow and load balancing as a fallback.[Edge Redirector (ER)] I proactively conceived and implemented a significant optimization in Akamai's highly utilized Edge Redirector (ER). The optimization resulted in two orders of magnitude increase in the number of rules that could be executed at the Edge. As part of the improvements, I created a CSV rule syntax that allowed bulk upload of ER rules.References:- Application Load Balancer: https://techdocs.akamai.com/cloudlets/docs/what-app-load-balancer- Edge Redirector: https://techdocs.akamai.com/cloudlets/docs/what-edge-redirector

Seattle, Wa, Us

* Elastic Compute Cloud (EC2) development.* Team Lead for vCenter Plugin (12 developers): Team lead for initial design, development, and deployment of AWS Management Portal for vCenter plugin. The plugin provided seamless control over a Hybrid Cloud network with drag and drop migration from "on-prem" VMware images of virtual machines into the AWS EC2 network by converting to the EC2 proprietary VM disk image format without any loss of data or configuration.* Market Penetration: The product initial GA release prompted an immediate response from the CTO of VMware (https://octo.vmware.com/dont-be-fooled/).* Hybrid Cloud Management Patent: As part of this innovation, I submitted and was issued lead author on two patents for Hybrid Cloud technology: * https://patents.google.com/patent/US9531719B1 * https://patents.google.com/patent/US9778952B1* https://aws.amazon.com/ec2/vcenter-portal/

San Mateo, Ca, Us

* Multicast Cloud/Cluster Framework: Redesigned the existing TCP-based architecture with a multicast, distributed master-worker cluster framework to allow optimal load balancing and throughput. This includes plans and near future implementation of network operations managed high-availability (HA) capabilities using Pacemaker/Stonith. Google Protocol Buffers is used for message encoding/decoding.* Image Processing: Replaced and optimized the server-side image processing engine with a resulting 20x speed up in image processing and a net financial savings of $20k per year in license fees. This also significantly improved the user experience through reduced response time and significantly improved image quality.

Tokyo, Jp

* Co-located Equity Algorithmic Trading System: Core developer for large-scale, high-frequency, low-latency (sub- millisecond) trading system framework used for all algo trading for Americas. One of two developers that resurrected and ported the trading engine from London to US environment. Helped optimize critical trading path for direct market access (DMA) through smart order router (SOR) reducing total latency from 5000μs to 200μs. This SOR is estimated to be one of the fastest, lowest-latency, SORs in the industry. Owned and managed: static data store interface, algo monitor GUI, and database. Worked closely with trading and service desks to develop requirements and design. TIBRV multicast infrastructure.* Command and Control/Monitoring Applications: Sole developer for the suite of command and control applications to monitor and control the trading system. This includes ownership of the high-speed, in-memory (kx) database for storing real-time order state information critical to real-time order state monitoring. Optimized the order “upserts” logic: cost reduction from O(n) to O(log n). Optimized the Java based GUI from 300ms to 3ms refresh rate for 250,000 active orders.

* Trading System (Europe): Lead developer for developing requirements for migrating existing domestic system to large block, dark pool equity trading in the European markets; implemented FIX 4.4 session handler for reporting trades in European* Trading System (Contra Targeting): Developed contra targeting functionality in core large-block, dark-pool trading system* Infrastructure: Migrated transport layer from TCP/filequeue to TIBRV multicast; maintained trading system components

New York, Ny, Us

* TCP/IP Infrastructure (B-Pipe): Developed a TCP/IP socket based subscription service for customer metering; implemented an extensive Perl module for permissioning external customers* Multicast Infrastructure (B-Pipe): Independently redesigned and implemented the primary market data transport layer of the quote delivery framework to be compatible with multicast; redesigned and implemented the market data service proxy (extensive socket level development – TCP/IP, UDP/IP, multicast, UNIX sockets)

* Intraday Pricing Transformation: Developed an application for using IDC/Comstock’s wire protocol to collect, transform, and upload intraday pricing data for select hedge fund securities into an Oracle database using SQL API

Beaverton, Or, Us

* High Bandwidth UDP/ATM Packet Generator: Designed and implemented a high bandwidth, multithreaded stress-testing application to deliver configurable packet information via Ethernet/ATM interfaces; throughput rate: 800Mb/s* ATM Proxy: multithreaded client-server application for routing connections to the correct high-speed ATM link* Wireshark/Ethereal Plug-in: Implemented raw Ethernet data parser to provide a visual display of EGCP packet contents* Large-scale Telecom Monitoring Software: Implemented parsers and state-machines for MGCP, EGCP, SIP, and RUDP protocols