SUMMARY
Professional software engineer with 20 years of embedded, real-time systems development. Proven project lead with track record of owning software modules from project inception to product release including feature requirements, scheduling, documentation, design, implementation and support. Experienced and proficient in the detection and solution of software vulnerabilities early in the software development cycle. Team player focused on moving a project forward to successful on schedule completion.
TECHNICAL EXPERTISE
Main Project Experience
Authentication, Authorization and Accounting; User policy provisioning;
802.11 Wireless Client Authentication Protocols;
Multicast Routing and Protocols; Quality of Service
Software Protocol Experience
RADIUS; 802.1x; EAP; PEAP; TLS; TTLS; WebAuth, TACACS+; LDAP; UDP;
TCP; IP; IGMP; SNMP
Implementation Environment
Linux; C++; C; Java, GDB; TCL; UNIX; VxWorks; Windows; GIT; CVS; Subversion;
PROFESSIONAL EXPERIENCE
Extreme Networks / Enterasys Networks Salem MA 2016 - present
Principal Software Applications Engineer
Responsible for the design, implementation and support of network Authentication, Authorization and Accounting.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EAddition of social media OpenID Connect functionality for captive portal framework.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EIntegration of external Guest and IoT Management platform.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ESupport and maintenance of RADIUS server side support of 802.1x AAA.
Casa Systems Andover MA 2015 - 2016
Principal Software Engineer
Responsible for the design, implementation and support of multi-core network function virtualization platform security software.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and implemented customer release of RADIUS client supporting authentication, change of authorization and accounting with supported scale of 6,000 transactions per second.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned customer solution for WiFi 802.11 roaming encryption key caching.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EEdited Access Point open source software to accommodate 802.11 roaming encryption key caching design and unit test.
Extreme Networks / Enterasys Networks Salem MA 2006 - 2015
Principal Software Systems Engineer
Responsible for the design, implementation and support of layer 2 switching security software.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ESignificantly improved and added functionality including stability and scale to multi-threaded, distributed, embedded, C++ RADIUS implementation.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EAdded multiple retransmission algorithms to the standard RADIUS UDP retransmission functionality.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ESupported authentication software (RADIUS, TACACS, 802.1x, macauth, webauth) from product initiation and design through release to customer escalation debug.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EPorted RADIUS client software from VxWorks multi-threaded environment to Linux environment successfully converging the functionality of both platforms into a single cohesive solution.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded RADIUS Snooping authentication software to facilitate per mac address provisioning a step away from the edge.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EWorked in a team to allow layer 2 authenticated sessions and their respective provisioning attributes to seamlessly roam between slots using distribution messaging.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EPlanned and successfully handled distributed firmware software issues such as upgrade/downgrade of configuration and versioning of distributed messaging.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ETeam lead responsible for all day to day management activities for small team from product requirements documents through releases for user provisioning policy customer enhancements.
Azimuth Systems Acton MA 2004 – 2006
Senior Software Engineer
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded wireless client authentication functionality for embedded test equipment, including EAP, PEAP, EAP-TLS port, and TTLS, from product inception to successful product release meeting project requirements.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded software driver 802.11 wireless and Ethernet capture capabilities for embedded test equipment
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EAttended Wifi Alliance plugfests to test interoperability of authentication client and programmable extension enhancement
Telica Marlborough MA 2003 – 2004
Senior Software Engineer
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ESupported Billing and Traffic application on SUN system to meet growing customer requirements.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded SNMP trap functionality for Billing and Traffic application
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded AMADNS header for Billing and Traffic application output files
Lucent Technologies / Springtide Networks Westford MA 1998 – 2003
Senior Software Engineer
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded AAA functionality of embedded Service Switch, which included a RADIUS client and an LDAP client, from product inception to successful product release meeting project requirements.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EProject lead for IGMP and multicast software support for embedded Service Switch from marketing requirements to successful functionality release fulfilling project requirements.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ESuccessfully performed release management responsibilities for major feature release for STN7000 IP Service Switch, including management of software changes, tracking of nightly and incremental builds, and status reporting of release at program management meetings.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ECoded IGMP Proxy for multicast group membership forwarding for embedded Service Switch.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3ECoded token bucket algorithm for QOS bandwidth management for embedded Service Switch
3COM / U.S. Robotics Westborough MA 1995 – 1998
Software Engineer
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned and coded RADIUS security and accounting client from product inception to product release for embedded, multi-platform core access router code.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EDesigned Flow Random Early Drop (FRED) for IP Quality of Service (QOS) for embedded, multi-platform access router code.
{cke_protected}{C}%3C!%2D%2D%5Bif%20!supportLists%5D%2D%2D%3E§ {cke_protected}{C}%3C!%2D%2D%5Bendif%5D%2D%2D%3EMonitored and participated in RADIUS working group as the protocol was designed and defined which included attendance at the RADIUS IETF working group meetings in Montreal and San Jose.
EDUCATION
BS, Computer Science, Worcester Polytechnic Institute, Worcester, MA