Bill Doss Email & Phone Number

Alpharetta, Ga, Us

Chicago, Il, Us

I used technology that was sold to Mediafly by BIP Wealth, that I developed at UserIQ to build a complex workflow management system that is reusable across the Mediafly application suite. I wrote it in Golang as a series of lambdas, SQS queues, and step functions in AWS. As Mediafly has many legacy code bases, I settled on gRPC as the event generation mechanism into the system. This was to facilitate sending events from any tech stack that gRPC supports. I wrote the first events generated from the legacy code in C#. Furthermore, I designed the work flow interpreter to be data driven and used the command pattern to make pluggable interpreters for each of the nodes in the workflow. This was to allow us to be able to rapidly add new node types to the workflow. Though it meant that I had to be careful with validation of the workflow’s configuration data, as I did not want to allow command injection vulnerabilities to be introduced into the system by this approach. Once this was off and running, I moved to another team whose primary focus was maintaining and replacing an aging EC2 based infrastructure that was designed to join meetings and record them. Technologies used there were python, bash, and node. As part of cutbacks, the company decided to replace this architecture with a paid service.

Atlanta, Georgia, Us

BIP Wealth owned the intellectual property that I had helped architect and build at UserIQ. BIP Wealth kept me employed and busy so that I could start for the company that acquired the technology after the UserIQ closedown. In this role, I created a POC to help establish best practices for the extensive ETLs that the company uses to track the financial transactions undertaken on behalf of their clients. The POC used AWS step functions to shepherd datasets through lambdas. To make the development process easier, I implemented several improvements: 1) A CloudFormation deployment against live AWS.2) SAM CLI command line utilizing localstack docker images to mock AWS services. (Running local allowed for setting breakpoints to easily trace the code.) 3) Unit testing relying on Mockito.4) Using some dependency management, in this case maven.5) Added useful logging.

Dunwoody, Georgia, Us

UserIQ was a Customer Success Management platform. The product had originally been written in rails, with large parts of it having recently been migrated to Golang. Most of what I wrote there was Golang with a little TypeScript. As senior principal engineer, I joined the fray. In that role, I had several responsibilities: - I acted as the architect to several pivotal systems described below.- I wrote POCs of the major working components of those architectures.- I led daily meetings with teams to review code, address emerging problems, and enable the team.- I laid out the work in story form so that multiple teams could consume the work.- I contributed to a collaborative effort to improve our development processes (release and scrum) with an emphasis on sprintly delivery of our releases.- I worked with Design and PO optimize feature ROI.- I instituted technical dependencies pre-grooming to help us be more efficient and cut down on overly lengthy planning meetings with the team at large. The first of the two major architectures was a rules-based system that generated internal gRPC events from the legacy systems' patchwork of technologies. These rules were funneled through a processor (AWS lambda(s) that serviced an SQS queue) that triggered events in response to customer defined rules. I also architected a second major event source component to augment real time events. It was a nightly run AWS lambda that mined our data sources (ClickHouse, and PostgreSQL) for those events that product wanted us to produce that required significant coalescing of data for which real time events would not suffice. The second major architecture was notifications. As I had planned this extended the first by allowing for an entire subsystem of mail delivery (AWS SES), slack integration, and instant in-application notification that were sent in response to. These notifications were based on the user defined triggering systems above.

Tempe, Arizona, Us

I worked as an individual contributor and scrum master on a set of dynamic teams to produce a platform that enables automated discovery of attack surface, allows for review of the findings in a workflow, and provides details of possible exploits that may be utilized in penetration testing. In that role, I worked across teams to help co-ordinate and prioritize efforts; personally built services; championed, designed and built performance and metric improvements. All while being responsible for compiling metrics, retros, velocity reports and executive summary reports to guide the team to the best business outcomes.

San Jose, Ca, Us

I worked on the StealthWatch product suite. The product suite is a traffic analytics platform that detects anomalous/malicious traffic. This detection is done by leveraging simple classifications of hosts and traffic on the network, as well as more complex statistical models. I led the team to create and architect a customizable security check platform in the product. As well as, working on a DSL to extend the flexibility of the custom check. We implemented in C and Java, with a heavy dependence on Docker. The data stores were Postgres, MongoDB, and Vertica. I last worked on a pluggable framework to house machine learning algorithms to auto-classify hosts. This classification of hosts enables the product to better categorize network flow. This was prototyped in R.

Nak Hak Solutions was my own consulting company specializing in security architecture, robust development, and enterprise solutions. [Hewlett Packard Enterprise]I worked on JavaScript static analysis for modeling web page loads to detect security vulnerabilities. (C#) I built and architected parts of a host discovery system for a managed services group. I devised the middle layer to obfuscate requests using a TOR layer. I integrated research groups heuristics and algorithms into the managed services product. (C#, MongoDB, and Solr) I was one of several building a docker-based functional testing framework for security scanning product. (Powershell, VMWare, Docker on Windows 10 and Server 2016.) [Zenergyst]I added google OAuth2 as a secondary login mechanism to a spring boot based application. I had already added functionality to sync google contacts, tasks, and calendar. (Spring Boot, Google APIs, JavaScript) [Zapelo]I built a prototype for an electronic document signing system for a realty company. (Spring, Spring Boot, Liquibase, various free PDF manipulation libraries.) [Echo 360]I participated in architecting and developing a message driven architecture to split up monolithic application into micro-services to facilitate more rapid iteration and participation in the development process. (Scala, Play Framework, Akka, Kafka, and Redis.) I architected a complicated migration for the existing enterprise product to move it from a Roles Based to Access Control List Based model. (I presented the 50+ page document at an internal architecture forum over several days. It covered the modification to the existing user experience, and preliminary tasking across multiple teams.) I also prepared some custom agile training materials at the request of the customer.

Brooklyn, Ny, Us

Wireless generation (now Amplify) is a company that has over ten years of experience in developing tools, systems, and services that help educators improve student learning. It has development offices in Durham, NC; New York, NY; and Alpharetta, GA. I was hired as an architect. In that role, I built systems to secure student data, handle authentication in either online or offline modes, and handle other enterprise concerns. Afterwards, I was promoted to a development manager and began assembling a team. When I left, I managed three teams. As a manager, I helped to build the hiring process for the Atlanta office. I and three other managers hired approximately thirty developers over the course of 18 months. We were very selective, resulting in solid teams, thus making everyone's life easier. I managed three teams concurrently of a total of 15 developers, contractors, and QA. That is one remote team, and two local teams: eReader, DRM and Security/Common Components. I acted as scrum master across all the teams. I was involved in architecture, proof of concepts, documentation, demos, and frequent discussions with other teams and stakeholders. The Security/Common team has developed libraries on iOS, Android, and Angular Web applications that allow for easy sharing of data in a secure, scalable, online or offline fashion. These are used to manage and coordinate a suite of client applications running cooperatively. The DRM team developed a fully featured DRM system that is used in an embedded fashion within lessons as well as a standalone reading library experience. This process involved negotiations with several publishers and stakeholders within the company. It handled audio and book content. The eReader team used the DRM team's APIs to secure licensed content and display to the user. Additionally, integrations between the eReader and games teams were frequent. I also helped to architect a messaging system for analytics on reading usage based on Kafka.

Compliance 360 was acquired by SAI Global just prior to my start there.Both are in the GRC (Governance Risk and Compliance) market space. They made tools to help companies meet their compliance needs in highly regulated industries like health care, insurance, and financial services. During my brief time there, I worked on a JavaScript framework that could dynamically generate grids using Kendo. I realize that this is a very short time to work at a location. While interesting work, I left for an incredible but unsolicited opportunity at Amplify.

Savannah, Georgia, Us

TMX Finance was a financial services company that saw explosive growth and rapid expansion into new markets while I was there. I was proud to be a part of not only the product that we built but also the high-energy development teams that I had a hand in constructing. I was hired as a developer for TitleMax but moved quickly to make myself a subject matter expert on NServiceBus, the backbone of architecture then under development. I also improved the re-usability of the application by adhering to a number of SOLID principles. Including a novel JavaScript publish-subscribe model that allowed for decoupling the client side behavior of a number of our server controls. After this, I was tapped as a development lead on the EAL project. My duties entailed coordinating the efforts of four other developers to design, develop, and build complicated work flows to support the business. It should be noted that the Scrum process was followed. This adds the responsibility to the lead position of very close coordination with the business in planning features. I was eventually asked to lead that team and two other four man teams as the development manager for the EAL project. This later led to other projects within TMX as well. Throughout my time at TMX, I produced, built consensus for and executed plans to: improve the security stance of the application, improve the performance of the application, and make the product more extensible. Additionally, while managing I continued to aid in the technical diagnosis and resolution of production application problems. Though the code was not of my creation, my expertise as a trouble shooter was needed to identify and then correct several memory leaks, race conditions, and performance bottlenecks within other parts of the application.

Palo Alto, California, Us

HP ASC was a branch of HP that was created when HP acquired SPIDynamics. SPIDynamics and HP ASC developed software to assess web applications and web services for security vulnerabilities. As a developer, I architected two major infrastructure initiatives. Support Channel was the first of these. I worked with the business to develop the requirements. I built the client library, web service, and web application pieces required. Support Channel was designed to be used in multiple products, upload debugging information, suggestions, and logs up to a support web site. The second of these initiatives was a licensing client, web service, and web portal. Again, I worked with the business and support group to gather the requirements, decide on the design, and build the application. This licensing system was done prior to the acquisition of SPIDynamics but was built to be extremely extensible due to a data driven design. Later this license library was one of two license libraries that were in the final running to become HP's only licensing scheme for all of their software. I also worked on a team of Developers working on a product called DevInspect. DevInspect was written in C# and performed static and dynamic analysis of ASP.Net web applications for vulnerabilities. I became the subject matter expert on static analysis for that team. Following this, I worked on the enterprise web application known as Assessment Management Platform (AMP). I also was a major contributor on the reporting platform for that product. It should be noted that this was part of the application that actually allowed the customer to write their own reports and design surfaces within the application. After AMP was released, I joined the common components team on a research project dedicated to JavaScript analysis for discovery of vulnerabilities. Upon completion of this task, I worked on several memory and performance improvements to the existing core consumed by all HP ASC software.

Armonk, New York, Ny, Us

ISS developed applications to improve the network security stance of their users. Product types developed there included IDS/IPS, port scanners, anti-virus, and enterprise management applications. Most of my work at ISS entailed enterprise management applications. I developed an oracle/Solaris port of an application written for a Microsoft OS. I also wrote several ETL applications for the enterprise in C ++. I received a World Class Achievement Award from the CEO for my work on the enterprise licensing library for Site Protector -- the enterprise product that handled command and control for all the other products that ISS developed. I eventually became the lead on the core command and control component for SiteProtector. I received a second World Class Achievement Award for my work in developing an Active Directory configuration integration, as well as a novel worm tracking feature that I designed and implemented.

Seattle, Wa, Us

Attachmate developed software to interface applications with mainframe data sources. In positions at Attachmate, I maintained a product called CrossTalk and developed/maintained the build and install for an application called Presentation Server. CrossTalk was a terminal emulator application. Presentation Server was a collection of COM controls and tools for a customer to use in their own web applications to interface with mainframe data sources.