Multi-Cloud Architecture & Operations

Architected Union’s comprehensive deployment strategy across four distribution models: Full SaaS, Bring-Your-Own-Cloud, Self-Managed Cloud, and On-Premises. Engineered solutions spanning AWS, GCP, Azure, OCI, and specialized GPU neoclouds, ensuring seamless operation across single and multi-cloud customer environments while maintaining security, efficiency, and cost optimization.

Product Strategy & Performance Engineering

Driving the development of Union 2.0 and open-source Flyte 2 to deliver transformational business impact: targeting Nx revenue growth with increased margins by H1 2026. Leading performance optimization initiatives that enable customers to run 100x+ more workflows at the same cost through advanced GPU resource optimization, while reducing workflow start times from minutes to sub-second response.

Security Transformation

Transformed Union’s security posture from a pre-sales obstacle into a competitive differentiator. Implemented cloud-native security architecture leveraging Private Link (AWS, Azure), Private Service Connect (GCP), and VPN (others) positioning security as a primary reason customers choose Union over competitors. This strategic shift converted compliance requirements into value-added propositions that accelerate deal closure.

Cloud Infrastructure & Operations

Owned end-to-end cloud strategy and operations across AWS and GCP, managing multi-million dollar infrastructure budgets while maintaining SOC 2 compliance for enterprise customers. Architected Kubernetes-based production environments, implemented inter-cloud connectivity solutions, and designed customer private link integrations through CloudFlare. Delivered scalable compute, storage, and database solutions supporting Sourcegraph’s cloud-based customer environments.

Developer Experience & Platform Engineering

Transformed developer productivity through comprehensive tooling ecosystem including Bazel build systems, internal “sg tool” development, and automated deployment pipelines using Terraform and Buildkit. Implemented security-focused “executors” for customer source code analysis, ensuring safe processing of potentially untrusted code. Established monitoring and incident response workflows via OpsGenie and Entitle, significantly reducing deployment friction and operational overhead.

AI/ML Infrastructure for Cody

Pioneered the infrastructure foundation for Sourcegraph’s AI developer assistant, architecting scalable hosting, deployment, and monitoring systems. Built API integration layers enabling third-party tool support (IntelliJ, etc.) and established ML model training/update pipelines. Designed flexible integration architecture supporting both commercial LLM providers and customer-owned AI infrastructure, enabling enterprise customers to maintain data sovereignty while leveraging advanced AI capabilities.

Security & Compliance

• Architected enterprise security framework with automated detection and prevention capabilities, integrating AWS Security Hub, LogicGate, and Tenable for comprehensive threat management
• Collaborated with Indeed’s central security organization to define and implement SMB-specific security policies and controls
• Achieved certification compliance across multiple regulatory standards including CIS 20, GDPR, JSOX, and parent company fiduciary requirements, enabling Indeed to serve enterprise customers in regulated industries

Developer Infrastructure

• Built comprehensive developer experience platform including front-end serving infrastructure, testing frameworks, accessibility compliance systems, and security tooling
• Designed and implemented scalable back-end infrastructure for employers.indeed.com supporting millions of employer interactions
• Created content management and delivery infrastructure serving thousands of marketing pages at indeed.com/hire/resources, including automated workflows for third-party content creators
• Pioneered Indeed’s public cloud adoption, becoming the company’s first major system to migrate to AWS while significantly improving developer productivity and reducing deployment cycles
• Measurably increased developer satisfaction (NPS) through streamlined tooling and automated processes

Data Infrastructure

• Established enterprise data processing platform delivering business-critical analytics to senior leadership and cross-functional partner teams
• Architected scalable workflow systems processing massive datasets from heterogeneous sources (HDFS, S3, MySQL, Aurora, Athena), enabling data-driven decision making across the organization

Data Storage & Database Engineering

Managed the engineering team responsible for Grab’s production data storage infrastructure, including RDS (MySQL, Aurora), PostgreSQL, Cassandra, ScyllaDB, and DynamoDB. Ensured high availability and performance across diverse database technologies supporting millions of daily transactions.

Search & Cache Infrastructure

Led the team owning Grab’s production search and caching systems, including ElastiCache, Redis, ElasticSearch, and Amazon Elasticsearch Service. Delivered sub-second query performance and 99.9%+ uptime for business-critical search functionality.

Unified Data Platform Architecture

Architected and managed development of Grab’s unified data abstraction layer, providing seamless API access across SQL, NoSQL, and object-store systems. This platform solved critical developer productivity challenges by enabling seamless integration across diverse technology stacks and multiple cloud providers. System scaled to millions of QPS while significantly improving security and reducing development complexity for data science and application teams.

Data Governance & Security Leadership

Collaborated with Information Security to establish Grab’s comprehensive Data Classification and Data Governance policies. Led compliance initiatives achieving ISO 27001 certification and online PCI compliance, ensuring secure handling of sensitive financial and personal data across Grab’s platform.

Cost Optimization & Resource Management

Delivered $millions in annual cost savings through strategic database optimization and rightsizing initiatives, while maintaining performance and reliability standards across all production systems.

Strategic Leadership Roles

Served on three critical company-wide committees: Data Governance Council, Patent Counsel, and ArchCo (8-person architecture review board responsible for company-wide technical decision approval), directly influencing Grab’s technical direction and intellectual property strategy.

Technology Stack

Led teams working with comprehensive technology ecosystem including Kubernetes (EKS, kops, OpenShift), diverse database technologies (Cassandra, DynamoDB, ScyllaDB, RDS, PostgreSQL), multi-cloud infrastructure (AWS, Azure), security frameworks (PCI, ISO 27001), monitoring systems (Datadog, statsd), and load balancing solutions (ELB/NLB, Envoy).

Lead Engineer / Third-Party OSS Relationship Manager

Led Google Cloud’s strategic open-source integration initiative, managing partnerships with major infrastructure-as-code platforms including Terraform, Ansible, Puppet, and Chef. Architected comprehensive coverage of 100% of Google Cloud Platform services through popular deployment tools, significantly expanding GCP adoption in enterprise DevOps environments. Presented work at PuppetConf and ChefConf, culminating in major open-source releases on Google Cloud Platform’s Github and Puppet Forge in August 2017, with Chef Supermarket integration following in Q3’17. This initiative became a cornerstone of GCP’s developer ecosystem strategy.

Technical Lead / Architect

Designed and implemented Google’s massive-scale infrastructure management system over four years, architecting the core technology to deploy and manage 100M+ nodes across 10+ data centers. Led the engineering team that developed the foundational technology powering both critical internal workflows and Firebase Test Lab for Android, achieving 99.999% reliability SLA with 24x7x365 operations. This system became essential infrastructure supporting Google’s global service delivery and mobile testing ecosystem.

Engineering / Security

Developed critical security infrastructure for ChromeOS, implementing software drivers interfacing with TPM chips and kernel-level components to deliver full disk hardware encryption for production Chromebooks. Identified and resolved a significant TPM key generation security vulnerability in openCryptoki affecting all Linux distributions, contributing to the security of the broader Linux ecosystem. Implemented real-time packet filtering systems on Google Compute Engine for export control compliance, blocking traffic from embargoed countries while maintaining performance standards. Contributed extensively to various open-source security projects, advancing industry-wide security practices.

Technical Lead | Microsoft System Center

Architected, designed, and led the engineering team that created System Center Virtual Machine Manager 2012, Microsoft’s flagship enterprise virtualization management platform. Founded and solo-developed the Virtual Server Deployment Manager (VSDM) project from concept to customer shipment, establishing the foundational workflows that Microsoft integrated into System Center. The VSDM architecture became the blueprint for enterprise virtualization management, with Microsoft shipping the product to customers along with comprehensive documentation and support. Filed multiple patents for innovations in the virtualization space that became core intellectual property for Microsoft’s enterprise offerings.

Software Engineer | Microsoft Security Business Unit

Following a strategic acquisition, architected and built Microsoft Security Baseline Analyzer 2.0 (MBSA) from the ground up. This security analysis tool became a critical component of Microsoft’s security ecosystem, enabling enterprises to scan Windows systems for vulnerabilities and receive automated mitigation recommendations. The tool was widely adopted across enterprise environments and became essential infrastructure for Windows security management.

Researcher | Microsoft Research

Spent three years at Microsoft Research within the eXtreme Computing Group, developing foundational technologies that directly contributed to the creation of Microsoft Azure and Microsoft SQL Azure. This research laid the groundwork for Microsoft’s cloud computing platform, representing some of the earliest work in large-scale distributed cloud infrastructure.

Collaborated with the University of Washington to architect and develop the Trident Computing Workflow system, a pioneering platform for scientific computing workflows. Created innovative solutions for workflow versioning and reliable experiment reproduction, advancing the state of the art in reproducible computational research and establishing patterns later adopted across the industry.

National Election Execution / Delivery

Led the development and deployment of Brazil’s national electronic voting system, collaborating directly with government officials on requirements definition, technical execution, and nationwide delivery. This represented one of the world’s first large-scale electronic election implementations, requiring unprecedented coordination between technology, security, and democratic processes.

Quality Assurance & Process Excellence

Directed the company’s ISO 9001 certification initiative, establishing enterprise-grade software development processes and quality standards. Successfully achieved Capability Maturity Model (CMM) Level 3 certification and developed strategic roadmap for Level 4 advancement, positioning the company as a leader in high-reliability software development for government and military applications.

Senior Software Engineer

National Election Security Architecture

Architected the comprehensive security system deployed in every voting booth across Brazil, creating what was recognized as the most extensive synchronized deployment system ever implemented at the time. This system required coordinating secure software deployment and real-time synchronization across thousands of voting locations nationwide on election day.

System-Level Security Development

Developed critical system-level software including device drivers, network filtering, and transparent network encryption systems for government and military customers. Created secure, low-level software components that became foundational infrastructure for high-security applications across multiple government agencies.

Cryptography & PKI Leadership

Led development of comprehensive cryptographic systems and frameworks, including hardware-based HSM and smartcard implementations. Architected X.509 PKI Certificate Authority systems integrated with eTrust and Verisign platforms. Defined core protocols for ICP-Brasil — Brazil’s national public-key infrastructure that became the foundation for certifying financial transactions and official government records across the country, establishing digital trust infrastructure that remains in use today.