Sep 2017 – Apr 2020 · 2 yrs 7 mos · Zurich, Switzerland · On-site

• Responsible for developing the open-source Cilium agent (cilium.io, a kubernetes CNI plugin), user tooling, and infrastructure.
• o Contributed to cilium, a kubernetes CNI written in Go.
• o Developed the DNS rules subsystem for Cilium, allowing egress rules with wildcard domain names as L3 targets accounting for DNS TTLs and overlaps between pod DNS requests on a single node.
• o Co-developed the initial kubernetes-CRD-backed Cilium security-identity allocator supporting cluster-wide coordination without an additional storage backend.
• o Mentored and advised other engineers working on all aspects of cilium-agent and the developer stack.
• o Maintained the CI system, based on Jenkins, Vagrant and Docker.
• o Introduced the initial metrics subsystem for cilium-agent.
• o Supported customers running cilium and kubernetes in production clusters ranging from 10-100s of nodes.
• o Extended existing packet-level logging in cilium-monitor to better handle high-load environments.

Jun 2014 – Aug 2017 · 3 yrs 2 mos

• Responsible for infrastructure, operations and reliability.
• o Migrated all inter-service communication to a Envoy based mesh.
• o Migrated the entire server fleet to new security role/policy scheme.
• o Led development of internet-egress auditing and report system based on AWS Redshift & Flowlogs and written in Terraform, Scala and Python.
• o Developed tooling in Ruby to configure and operate our CDN infrastructure.
• o Co-developed a Jenkins/Docker test and deploy pipeline now used by all of Stripe.
• o Developed the test/deploy tooling for an experimental immutable-infrastructure project.
• o Participated in and led the response, planning and implementation to DDoS attacks on Stripe at the nginx edge tier.
• o Surveyed internal customers on needs, expectations and projections of the infrastructure team.
• o Co-investigated alternative database storage engines to stabilise internal legacy services.
• o On-call and responsible for the stability and reliability of all Stripe infrastructure.

Jan 2014 – Jun 2014 · 5 mos

• o Gitsync(github.com/raybejjani/gitsync): a p2p git-repository syncronisation daemon co-authored in Golang.
• o Shuwa : collaborative where-to-eat webapp co-written in Backbone and Tornado.
• o Kintacts: an iOS contact list for loved ones. Backend co-developed in Golang, app in Objective-C.
• o Disposhell(disposhell.com): Containerised development environments/shells as a service. Prototype built with Python, Bash, Docker and dirty-hacks.

Aug 2011 – Dec 2013 · 2 yrs 4 mos · San Francisco Bay Area

• Senior engineer responsible for a security & performance CDN serving 20+ Billion requests a day.
• o Designed, developed and maintained CloudFlare’s current DNS server infrastructure, RRDNS, in Golang that serves authoritative DNS for over 1 Million domains and proxies DNS traffic for partners at 250+ Billion requests/month. It also has adaptive response-rate limiting to handle DNS DDOS attacks.
• o Developed “PageRules” backend, a routing framework that runs on over 20+ Billion requests/day and dispatches against URL, user-agent, protocol etc. It is written in C, PHP and PGSQL.
• o Contributed to and helped release Railgun, a WAN optimizer written in Golang.
• o Developed and open-sourced lua-nginx-cache, a lua-nginx extension to allow online deep inspection of an nginx cache and modify element’s properties. It is written in C and lua.
• o Developed the initial version of CloudFlare’s Phishing & Malware blocking pipeline including report and warning pages (in PHP, HTML, JS), backend routing (in C and PHP).
• o Maintained a context-free in-stream online minifier for HTML, CSS and JavaScript in C and Ragel.

Jan 2009 – Aug 2011 · 2 yrs 7 mos

• Embedded ARM7 firmware and engineering infrastructure development, and project management roles.
• o Led OurHomeSpaces' WiFi C-based product firmware development. Released two new products, a refresh
• of an existing product and a number of demonstrations.
• o Developed and implemented device configuration, registration and messaging architecture and maintained
• specifications for a WiFi device ecosystem.
• o Kicked-off firmware development of WiFi MAC layer driver for next-generation Atheros based module.
• o Developed automated manufacturing C and python-based software tools and fixtures.
• o Led firmware field support for deployed hardware trials.
• o Ported, maintained and extended GainSpan SDK libraries for firmware update, debugging and low-level
• communications targeting MacOS, Windows and Unix/Linux natively.
• o Developed Java, C and C++ end-user applications for device configuration and control.
• o Developed a Java reference SNMP management server for wireless devices and firmware updates.
• o Developed reference Objective-C iOS applications for clients and projects.
• o Deployed and maintained internal infrastructure servers for git version control and Redmine project tracking.

May 2006 – Nov 2008 · 2 yrs 6 mos

• Developed uCLinux for precision scientific instruments. Shipped PTC10 “Programmable Temperature Controller”.
• o Developed and ported kernel drivers for USB (host and function) and GPIB.
• o Ported testing and production codebases to the uCLinux platform.
• o Ported the coLilo boot loader to a Coldfire 5307 system.
• o Maintained tool-chain supporting GDB debug with a custom built compiler and development server.
• o Designed and implemented development best practices for project (version control, build automation etc.).
• o Developed custom Python software to convert an internal schematic database to a custom automated pick
• and place manufacturing process.
• o Implemented a GPIB JNI bridge for the NI GPIB windows driver.

Jun 2004 – Jul 2005 · 1 yr 1 mo

• Assigned individual projects and assisted individual graduate students and affiliated research groups.
• o Added Java Swing GUI building capabilities to Rockwell Automation’s IEC61499 implementation (FBDK).
• o Developed a MATLAB simulation of auto/self-calibration for future Nano-CEMMS applications.
• o Designed and built a multi-channel LabVIEW controlled variable high voltage (+1kVDC) regulated power
• supply used in a nano-fluidics printing system. Microamp current sensing and 0.1VDC resolution achieved.

Jun 2002 – Jun 2004 · 2 yrs

• Assisted lab specialist in running the MMS Cleanroom, a class 100 facility.
• Serviced cleanroom daily, controlled inventory and maintained equipment.
• Trained users in cleanroom procedure and equipment operation and administered facility’s Tube Furnace.