Sep 2019 – Oct 2024 · 5 yrs 1 mo · Austin, Texas, United States · On-site

• Zero Trust Connectivity Team
• Worked in a team of 4 to build the initial version of a Zero Trust Connectivity Hub service, an L3/L4 proxy implemented in async Rust using tokio. This replaced a number of existing ad-hoc service integrations with a common pattern to enable greater observability and more rapid implementation of future integrations
• Implemented functionality in Cloudflare's Oxy framework which powers the Connectivity Hub and numerous other services at Cloudflare. In particular, L3 <-> L4 translations of TCP and UDP traffic using a TUN device
• Redesigned portions of a data-plane service which configures linux routing tables, nftables rules, and eBPF programs in order to integrate GRE and IPsec onramped traffic with the Connectivity Hub
• Gateway Team
• Implemented new data and control plane functionality for our two Zero Trust systems:
• Policy-based L4 and L7 Secure Web Gateway built in async Rust using the tokio async runtime
• Policy-based DNS resolver written in Rust and deployed as a web assembly plugin within cloudflare's 1.1.1.1 resolver
• Led cross-team initiative to extend Dedicated Egress IP functionality to work for both UDP and IPv6 traffic. Involved migrating the feature to use soft-unicast IP ranges, implementing IPv6 pool assignment and address selection, and designing and implementing a inter-datacenter relay mechanism for UDP traffic which has since been reused in numerous other features
• Intel Team
• Built an async batch data processing and job tracking library in python using asyncio and asyncpg, improving the performance of existing batch jobs
• Implemented a number of streaming data processing applications using Kafka, in particular, one for detecting newly-registered domain names by consuming 1.1.1.1 resolver logs

Aug 2014 – Sep 2019 · 5 yrs 1 mo · Austin, Texas, United States · On-site

• CRM Team
• Implemented automated email send jobs using Java and Spring Batch, combining numerous signals including offer engagement rates, user personalization data, and advertiser paid promotions to produce over 6 million personalized emails per day
• Developed an AWS Kinesis consumer to process Geo-fence enter and exit analytic events published by mobile app users in order to deliver on-demand push notifications for nearby stores
• Site Reliability Engineering Team
• Architected and implemented a multi-tenant kubernetes platform as a service for internal teams. Provided prometheus monitoring/alerting, DNS naming for load-balancers, log archiving and indexing, cluster and pod autoscaling, and gitlab deployment integration out of the box. Developed RBAC policies and automation to grant teams access only to their application namespaces
• Migrated legacy Teamcity CI/CD system to Gitlab, Kubernetes, [docker-machine](https://github.com docker/machine) and AWS spot instances to lower costs, increase availability, and improve security through build and permission isolation

Aug 2010 – May 2014 · 3 yrs 9 mos · Ann Arbor, Michigan, United States

• BE Computer Science