Jan 2022 – Jul 2025 · 3 yrs 6 mos

• Microsoft Defender Cloud Protection
• Owning complex set of micro services behind Microsoft Defender for Endpoint enabling Behaviour Analysis of millions of Samples to provide global protection, via runtime behaviour of samples from endpoints in secure labs. There is continuous orchestration of Virtual machines where samples are executed for their behaviour analysis, scalling services at run time. The services run in Public Cloud, Gov Cloud, Air Gapped scenarios. Where needed there is compliant centralized processing of data (data in motion).
• Roles and Responsibilities
• Led Architecture and Product Road map for Dynamic Analysis Space and presenting the same to leadership.
• Designed for Hybrid Env - In-Azure and On-Prem connected via V-Net Peering and Azure Virtual WAN.
• Led Business and Protection ROI of the Service. Delivered services now deeply integrated within the Microsoft Defender ecosystem, protecting millions of endpoints globally (US, UK, Australia, Switzerland, India) including presence in Air Gapped Environments like US GovCloud, DoD.
• Played hybrid roles-Architect, People Manager, Technical Guide, and Coach-Growing new tech leaders in team.
• Multiple Stake holder Management
• Improved Live Site culture, Root Cause Analysis quality, Work life balance and Cross team collaboration across Geo.
• Led Design Reviews, Security Revies, Secure Coding Practices, Quality Code Reviews, high Code Coverage via unit tests using Microsoft Fakes.
• Led Hiring, developing, and recognizing talent, building a high-performing team

Jun 2019 – Dec 2021 · 2 yrs 6 mos

• Microsoft Defender Cloud Protection
• Owned Bootstrapping, stabilization and maturity of the Microsoft Security India team, building scalable microservices for cross-platform malware runtime analysis (macOS, Linux, Android, windows).
• Led development of these highly available, secure services using C#, .Net Framework/.Net Core, Service Fabric Clusters, Event Hubs, Service Bus, Azure Tables, Blobs, EV2 Deployment, CI/CD, Geneva Monitoring, Dashboards and Alerting.
• Lead a team of 8 engineers, grew talent internally, drove several feature releases, and successfully aligned multi-team efforts across product and security

Nov 2017 – May 2019 · 1 yr 6 mos

• Windows Networking, Data Centre Networking – DNS Protocol & DNS Policy
• Contributed extensively to the Windows Networking stack, focusing on core DNS and DNSSEC Protocol. Made core protocol-level contributions to the DNS service and advancing the capabilities of Windows Server through innovations like DNS Policies—a feature introduced in Windows Server 2016 that enabled dynamic traffic management and split-brain DNS. Implemented iDNS for internal name resolution on top of data centre stack. Lead contributions in the design and development of these enhancements and hold three patents related to my work in this space. These innovations empowered IT admins with granular control over DNS query behaviour and made foundation for modern, policy-driven networking in Windows environments
• Roles and Responsibilities
• Designed and did implementation of multi-tenant DNS server features (isolation, performance, resource throttling). US Patent 10356038.
• Led design reviews and creation of design documents for new features. Participated in architecture and design discussions with cross-team architects (Azure Storage, SQ)
• Developed Understanding of Azure networking (VNets, Private Endpoints, Network Resource Manager) to enable i-DNS.
• Implemented control plane APIs (via REST) to configure and manage DNS Tenants, their zones and Management.
• Worked with internal service discovery mechanisms and DNS resolution paths in Azure
• Led High Volume Live Site team in Azure Networking, needed to go deep into unknown network stacks. Authored and reviewed Playbook/TSG for Live Site handling.
• Unit and integration tests for DNS functionality.
• Developed automated functional tests to simulate large-scale DNS workloads for Multi Tenant Servers. Did Denial of Service testing.
• Used packet capture tools (Microsoft Network Monitor, Wireshark) for network traffic analysis and debugging.
• Root cause analysis of production live site incidents (Post Incident Review participation)

Oct 2016 – Oct 2017 · 1 yr

• Projects: Implementation of a Sales module for Small and Medium Businesses (Sales SMB) in Dynamic CRM suit. The project involved implementation of business logics, creation of User Interfaces, testing and stabilization.
• Roles and Responsibilities
• Requirement analysis and estimation in coordination with Program Manager.
• Authoring Design Document of Sales SMB Component. Customization of CRM forms, views, dashboards using JavaScript, HTML, and CSS.
• Integration with external systems via REST/SOAP web services.
• Development of custom workflows and actions to support business processes
• Preparation of unit test cases using MSTest framework.
• Mentoring and providing technical guidance to junior team members and new joiners.
• Performing environment setup, configuration, and deployment of CRM solutions. Supporting post-deployment stabilisation and issue resolution in production.

Mar 2011 – Sep 2016 · 5 yrs 6 mos

• Project: Implemented multiple features in Core DNS Protocol, DNS PowerShell cmdlets, RPC API, DNS MVC UI including DNSSEC support, Zone Scopes, DNS Policy as part of Windows Networking team. DNS Policy was one of the top features of Windows Server 2016
• Roles and Responsibilities:
• Designed and implemented core features of the DNS Server protocol stack in C/C++, including DNSSEC, DNS Policies, Zone Scopes, and Authoritative Cache for Windows Server 2016.
• Led the end-to-end design and development of DNS Policy feature, enabling fine-grained traffic control, geo-aware responses, and query filtering—recognized through two filled patents.
• Developed high-performance, multi-threaded server components, handling UDP/TCP socket programming, concurrency control, synchronization, and resolver logic to ensure DNS protocol compliance (RFC adherence).
• Contributed to DNSSEC features like Zone Signing, Key Rollover, NSEC, NSEC3 implementation.
• Owned and maintained the legacy monolithic DNS Protocol Stack, modernizing its design while preserving backward compatibility and system stability.
• Integrated telemetry, metrics collection, and logging mechanisms for monitoring DNS query latencies, error rates, and server health.
• Conducted extensive Performance, Scalability, and Reliability (PSR) testing, including fuzz testing, unit testing using Microsoft Fakes, and system-level load testing to validate service readiness.
• Expert in debugging and diagnostics technique using advanced tools such as WinDbg, Time Travel Tracing, remote debugging, XPerf, and crash dump analysis to troubleshoot complex production and development issues.
• Collaborated on the integration of DNS with Windows Active Directory, ensuring secure and seamless directory-aware DNS functionality.
• Performed code reviews, design reviews, and rigorous deployment processes into the Windows codebase, ensuring high-quality deliverables aligned with release standards.

Dec 2009 – Mar 2011 · 1 yr 3 mos

• Project: Worked as part of Image processing Team of GE CT Scan Unit at John F Welch
• Technology Centre, Bangalore.
• Roles and Responsibilities:
•  Contributed to the software stack used in CT scanner systems
•  Implemented test case for Image Processing Modules
•  Involved in update of Medical Documents as per Document Change Control Process for FDA and other
• Audits

Jul 2008 – Nov 2009 · 1 yr 4 mos

• Project: Worked as part dev team implementing agent based and agentless mode of Symantec Control Compliance Suit.
• Roles and Responsibilities:
• Worked on the Control Compliance Suite, helping enterprises manage and enforce security policies and compliance across systems.
• Collaborated on scalable compliance rule engines and automation tools for large enterprise environments.
• Implemented features using C++, TCL, Unix Daemon.
• Worked on bug fixes, stabilization.
• Also did internship in Symantec as part of Last semester (Jan 2006 to May 2006)

Jul 2006 – Jun 2008 · 1 yr 11 mos

Jan 2006 – Jun 2006 · 5 mos