Sep 2021 – Dec 2025 · 4 yrs 3 mos

• Leading multiple projects related to reverse proxy clusters that handle multi-million QPS, both external and internal gateways.
• Proxy migration projects to improve performance from Apache Traffic Server to HAproxy and Envoy. HAproxy migration provided 10x improvement.
• Optimized deployments and product lifecycle by onboarding multiple products to Kubernetes based workloads and CI/CD pipelines.
• Designed and implemented a high performance TCP server to receive HAproxy logs, generate OpenTelemetry metrics and ship logs to Azure Kusto based logging pipelines.
• Experienced in designing controlplane feature for multiple proxies, like certificate management, datacenter routing etc. Also impemented multiple lifecycle management features in multiple proxies in Go and Python.
• Implement DNS over HTTPS in for a service discovery in Go, initially used by upstream proxies to perform connection drain and later adoped for other workloads.
• Designed and implemented multi-process lifecycle management via systemd with CI/CD pipeline integration in Go to improve resiliency across the team’s tech stack.
• Contribute to multiple opensource projects like HAproxy and Linux.

Apr 2019 – Sep 2021 · 2 yrs 5 mos

• Designed and implemented a Go service that fully automates SSL certificates deployments with zero human intervention using cloud based platforms, Azure Keyvault and Azure Event Grid, resilient to Azure outages by maintaining an internal eventually consistent distributed cache for SSL certificates, ultimately pushed to Edge network.
• Writing Ansible and Terraform manifests to automate daily operations and configuring Azure cloud infrastructure.
• Formalizing a data driven approach to evaluating performance and analyzing locations for new POPs, bootstrapping and managing multiple POPs across the world, optimizing traffic steering to these POPs.
• Implement untrusted POPs network in China which enabled the company to reduce round-trip times.
• Presented a talk titled Traffic Steering at Usenix SRE Con , demonstrating how LinkedIn used RUM (Real user monitoring) to ensure that end-users experience the most optimized experience as a LinkedIn.

Mar 2017 – Mar 2019 · 2 yrs

• • Simplified architecture to discover healthy servers behind reverse proxy by migrating from multi-tier proxy setup to DNS based service discovery, resulting in better resource utilization.

Feb 2015 – Mar 2017 · 2 yrs 1 mo

• Write tools for multi-vendor DNS/CDN strategy to reduce toil and ensure safer deployments.
• Write Continuous Integration (CI/CD) tools to blackbox test DNS/CDN vendors.
• Designed and implemented metric collection softwares to establish SLIs/SLOs in the team and conduct regular meetings with external vendors for strategic planning of requested features.
• Designed and implemented high-volume multi-CDN log ingestion pipeline to optimize engineering time for investigations.
• Redesigned database schema and implemented a Certificate Management System (Flask, MySQL, Bootstrap) that integrates with multiple external and internal Certificate Authorities, and supports multiple algorithms for PKI.
• Tested multiple congestion control algorithms and analyzed the performance impact in various POPs and user locations.

Jul 2014 – Feb 2015 · 7 mos

• Bootstrapped a new product for email by integrating OpenExchange with the company.
• Engineered a centralized logging pipeline using Elasticsearch, Logstash, and Kibana over 6 months, improving MTTR by 50% and reducing log retrieval time from hours to seconds across all mail infrastructure systems.
• Programmed postfix milters to optimize key-value store for dovecot quota tracking.
• Implemented integration tooling to operate Open-Xchange at scale.
• Open source contribution to Grok Debugger (Ruby) and Logstash (Jruby).

Jul 2012 – Jul 2014 · 2 yrs

• Launched server hosting product based on OpenStack to ensure easier operations; easier hardware maintenance due to live migrations.
• Managed mail infrastructure with Postfix, Dovecot, Redis, Postgres and in-house Java apps for the mail-hosting platform.