Jan 2025 – Jan 2026 · 1 yr · Los Gatos, California, United States · Hybrid

Jan 2025 – Jan 2025 · 0 mo · Santa Cruz, California, United States · Remote

• Freelance work:
• Engineered cross-platform mobile application using Flutter and Tauri, integrating sensor-based data capture and specialized UX modes.
• Developed an iOS forensic data application , leveraging device hardware sensors and the Secure Enclave to detect and log high-G force and atmospheric anomalies with cryptographic integrity.
• Implemented local LLM/SLM integrations (Gemma, MobileLLM-Pro) and built a privacy-first mobile app including a secure, on-device (mobile) AI agent chat service.
• Creative Direction: Designed and prototyped assets for an immersive game concept leveraging AI-driven world-building and narrative design.

Jul 2022 – Aug 2025 · 3 yrs 1 mo · San Francisco Bay Area

Sep 2021 – Aug 2025 · 3 yrs 11 mos · Sunnyvale, California, United States · Remote

Sep 2020 – Sep 2021 · 1 yr

• Log, I am your father.
• Leading a team of brilliant and well-respected identity subject-matter experts.
• Driving technical excellence within the team and evolving key Identity platform services and capabilities to meet the highest standards of reliability, performance and scale.
• Expanding the team to facilitate an evolution in the identity space, company-wide: automation, optimization/streamlining, visibility, efficiency, best practices and security.
• Coaching and supporting the team in their professional development, unlocking their potential, and challenging them to step outside their comfort zone to grow and excel.
• Bringing a culture of context over control into leadership practices. Trust the SMEs to make the right calls while providing air cover to allow them to get their work done.

Jan 2020 – Sep 2020 · 8 mos

• Wheelie fast data!
• Team lead, solution architect on the corporate identity and access management team.
• Workforce automation 1: SailPoint integration with contingent worker system. Modified tables and created database views, triggers to facilitate integrations. Modified front-end (python) to fix validation issues, along with introducing new features such as employee tracking and rehire functionality.
• Workforce automation 2: SailPoint integration with Workday. Removed dependency on Mulesoft ESB and brought all connectivity and processing under one team.

Jan 2019 – Jan 2020 · 1 yr

• I like big data and I cannot lie.
• Team lead, solution architect on the corporate identity and access management team.
• Helped initiate and develop scrum and sprint cadences within the team and across teams.
• Leading the Zero Trust initiative at Splunk. Developing strategies on execution and best practices. Pushing digital identity to the forefront as the doorman for our perimeter.
• Developing streamlined employee on-boarding / off-boarding workflows. Moving away from manual and third party actions and designing automated processes to reduce and eventually eliminate human-error.
• Introducing identity governance and governance principles in scaling out corporate identity lifecycle management at Splunk.
• Designing company-wide role-based(RBAC) and attribute-based(ABAC) access controls by utilizing governance and various sources of truth as data inputs. Developing 'birthright' access protocols.
• Utilizing Splunk technology as an engine to help reduce logic processing complexity in python-based infrastructure script solutions.
• Formalizing internal PKI architecture while helping to develop the infrastructure for scaling and future use-cases.
• Developing working partnerships with Splunk leaders and across teams to work toward our common goal of stabilizing, securing and scaling our technology ecosystem.

Apr 2016 – Jan 2019 · 2 yrs 9 mos

• Created and maintained ' Meeco ' (Meechum Container) - a custom-built, Python/Shell-based, opinionated, in-house authentication app that wrapped internal IDP( Meechum ) and in-house authorization( Metatron ) systems for local development via a Docker side-car.
• Team lead, developer and maintainer of all streaming bastion hosts - gateway into all AWS assets. Enhancements included migrating away from directory-based authentication.
• Maintainer of OIDC/OAuth2-based internal Apache module with support for Ubuntu Trusty, Xenial and Bionic.
• Contributed heavily to the authentication portions of ' EZConfig ' - an internal project that generates custom Apache, Tomcat, and Java configurations.
• As a member of a two-person Netflix team, acted in an SME and tester capacity to help develop AWS's 'Authenticated' Application Load Balancer (OIDC) . This AWS offering now moves authentication to a decentralized model, reduces complexity, provides flexibility and expands possibilities.
• Created an OIDC/OAuth2 automated testing platform using Selenoid(previously Selenium) - allowed for rapid testing of code changes in the Apache module, Google interface changes, and browser updates(Chrome, Firefox).
• Architected authentication solution for all streaming Jenkins clusters - conversion from Active Directory to OpenID Connect. Demonstrated architecture with the use of Docker containers.
• Acted as a scrum master and coach to introduce and implement Scrum methodologies to project planning within team. Conducted Jira-based ops/dev projects.

Apr 2015 – Apr 2016 · 1 yr

• Maintained and further developed customized 'elastic' DNSMasq instances in AWS - steered traffic based on AWS CIDRs to facilitate EC2 to VPC migration.
• Created and maintained 'DNSHopper' - a custom-built, Python-based, opinionated, in-house resolver picker based on requirement of target apps(corporate queries or AWS queries). Reduced friction in cluster migration from EC2 to VPC.
• Created and maintained DNS migration Python scripts - migrated entire netflix.com domain from UltraDNS to AWS Route53, after major outage at UltraDNS.
• Created and maintained DNS query visibility and modeling system(Python, ELK) for Corporate and AWS/Route53. This system allowed us to migrate away from a split-horizon (i.e: corp vs AWS) DNS setup.

Jan 2014 – Apr 2015 · 1 yr 3 mos

• Created orchestration tools in Python to use Cloudformation & Chef in AWS. Later replaced by a 3rd party product(ElasticBox).
• Architected and administered the IT Openstack initiative. Later deemed immature for heterogenous IT environment scaling. Replaced by AWS.
• Maintainer and contributor to 'Conjur' - a third-party authorization platform(with short-lived keys) used on IT bastion hosts.
• Created and administered IT bastion hosts - Gateway into IT-related hosts. IT bastion hosts had a distinct SOX layer and authorization construct.
• Created a Saltstack-based event engine(Python) - this engine interacted via the PAM stack and LDAP and worked in conjunction with the Conjur platform to deliver short-lived keys upon bastion login.

Apr 2012 – Apr 2014 · 2 yrs

• Created and maintained a Ruby-based, multi-host sudoers crawler for SOX reporting.
• Architected and maintained 'Spacewalk', with a Perl backend for scaling - Redhat patching system for over 10,000 VMWare hosts.
• Architected and maintained 'Microsites' - AWS hosting of promotional sites for Netflix Originals. Bojack Horseman, Orange is the New Black, and many more.

Jan 2012 – Apr 2012 · 3 mos · Columbus, Ohio Area

• • Windows/Unix systems and applications support, database management, project lead.

Jan 2005 – Jan 2012 · 7 yrs · Columbus, Ohio Area

• 24/7 monitoring and troubleshooting of UNIX-based systems. Pager rotation duties.
• Management of over 100+ servers with a team of 3.
• Maintenance of 99.00% or greater service availability.
• System tuning, patching, bug auditing and configuration of Red Hat Linux systems. Immediate root cause analysis and documentation on issues.
• Migration of 95% of Linux systems from physical hardware to VMware virtual machine architecture.
• Created Red Hat VMware templates for quick OS deployments.
• Maintenance of monitoring applications (OpenNMS, ManageEngine Suite) for university applications and infrastructure devices.
• Created reporting structure for CIO using Highcharts/JQuery, Ajax and Javascript. Backend processing done with Perl, awk/sed to extract data and push into Highcharts.
• Created special LAMP stack setups for faculty to use in classroom environments. Multi-site Wordpress LAMP stacks setup for various departments.
• Writing specialized scripts. Some examples include:
• Alumni processing Perl script written to execute based on alumni actions and then modify the result in Activedirectory and OpenLDAP.
• Coded a Zimlet (mini application within the Zimbra enterprise email system based on Javascript and JSP) that was written to allow users to look up users in OpenLDAP.
• Configuration of operating systems and related software setups:
• Red Hat Enterprise(v3/4/5/6) operating system configurations outside of the standard internal build process.
• Apache web server customizations.
• Redirections, Rewrites, ProxyPass configurations.
• Context mounts (JKMounts/AJP).
• Tuning of parameters; min/max servers, prefork vs worker MPM.
• System-level troubleshooting of Tomcat and JBoss applications.
• Routing sites through the Cisco ACE in order to utilize a hardware solution for redirections, rewrites, proxy configurations and SSL acceleration.
• Security and server tuning based on requirements from the information security team and NeXpose appliance reports.

Dec 2000 – Dec 2004 · 4 yrs

• Redesign of entire classified ads website in a span of 3 months.
• Developed a web-based tool, written in Perl, for marketing team to update websites. Worked on various scripting issues on many web sites for the Columbus Dispatch.
• Designed a rotate and upload script using shell scripting to automatically upload and rotate images every 10 minutes on the WBNS10TV Skyview site.
• Converted entire sites from ASP to PHP for use on our Red Hat Linux web-servers.
• Configured highly customized Red Hat Linux server from source.
• Configured and installed a Qmail mail server on an OpenBSD system for mass mailing of news updates
• to registered Dispatch customers.
• Special coding projects - When the Columbus Dispatch decided to register users who accessed the website, my duty was to create an alert in JavaScript that informed the customers. This required a pop-up window that occurs once per day (cookies) and also required the window to not appear again after the user clicks the 'register' buttons.
• As the senior systems administrator, responsibilities include 24/7 pager and on-call duty. Acted as the main contact for most vendor-related software.

Oct 2000 – Dec 2000 · 2 mos

• Creating & modifying login and test scripts for partner gateway networks.
• Communication & high-level support in cooperation with international counter-parts on dealing with
• customer issues.
• Provide internal high-level support in networking issues, mainly with IP and X.25 issues.
• Dealt with Cisco on numerous occasions on handling router issues such as bug tracking, performance
• enhancements, and IOS revision issues Administered and implemented two Ultra Sparc 1 Enterprise
• servers, running Solaris 2.7 and Red Hat Linux 6.2. These servers are used to test radius
• authentication software (Livingston radius on the Solaris OS and a modified version of Livingston
• radius on the Red Hat OS).
• Developed and implemented PERL scripts to access certain key data from an Oracle database and
• display gathered information on a web front-end.
• Designed and developed an intranet web-page for administrators.

May 1999 – Oct 2000 · 1 yr 5 mos

• Creating & modifying login and test scripts for partner gateway networks.
• Communication & high-level support in cooperation with international counter-parts on dealing with
• customer issues.
• Provide internal high-level support in networking issues, mainly with IP and X.25 issues.
• Dealt with Cisco on numerous occasions on handling router issues such as bug tracking, performance
• enhancements, and IOS revision issues Administered and implemented two Ultra Sparc 1 Enterprise
• servers, running Solaris 2.7 and Red Hat Linux 6.2. These servers are used to test radius
• authentication software (Livingston radius on the Solaris OS and a modified version of Livingston
• radius on the Red Hat OS).
• Developed and implemented PERL scripts to access certain key data from an Oracle database and
• display gathered information on a web front-end.
• Designed and developed an intranet web-page for administrators.

Jun 1998 – May 1999 · 11 mos

Jun 1994 – Sep 1994 · 3 mos · Dayton, Ohio Area