Principal Engineer/technical Lead/security Architect Resume
Raleigh, NC
PROFESSSIONAL PROFILE:
- Consistent and proven track record of developing software for on time delivery as technical lead and individual contributor. Unique capability to foresee obstacles to delivery to reduce risk to project schedule. Extensive use of the Agile development process for rapid delivery.
- Extensive experience leading offshore teams in India, Romania, Mexico and Russia.
- Excellent, state - of-the-art experience in various Internet and web development technologies, including Sencha EXT JS, REST, XML, HTML and HTTP.
- Expertise in distributed infrastructure and tools such as Web Services, SOAP, REST, JMS, RPC.
- Expert knowledge of XML based technologies such as WSDL, XSD, and XQuery.
- Expertise in using various relational databases including the ones from Oracle, MYSQL and Microsoft.
- Certified Secure Software Licensed Professional (CSSLP).
- In-depth knowledge of design, development and deployment of secure software. Extensive experience in threat modeling, analysis of security requirements, CVSS scoring of threats etc. to make software secure.
PROFESSIONAL EXPERIENCE:
Confidential, Raleigh, NC
Principal Engineer/Technical Lead/Security Architect
Technologies: Sencha EXT JS, OSGI, BndTools, Balsamiq, Confluence, Rally, REST, SOAP, Flex, Apache CXF, Google Map, ESRI Shapefiles, Web Services, Axis2, Java, C++, XML, Oracle, Windows, Eclipse, Mockito, Gradle, Jenkins, CI/CD, DevOps.
Responsibilities:
- Played a crucial role in the design and development of a highly successful advanced grid metering system.
- Served variously as key engineer, technical lead and release engineer. This system is scalable up to millions of meters, collects and exports metering data on schedule, implements demand response, disconnects meters remotely, controls and monitors street lights etc.
- Managed several releases and features of the product and delivered on time and ahead of schedule.
Security Architect
Confidential
Technologies: Microsoft Threat Modeling tool, Confidential Threat modeling tool, PortSwigger, Protecode, SonarQube, Coverity, MicroFocus, Black Duck, OWASP Top 10.
Responsibilities:
- Threat modeled the product, analyzed security requirements and prioritized software development work to address gaps.
- Analyzed PenTesting output from PortSwigger and other security tools to determine if the threats reported apply and how to address them.
- Performed binary code analysis using Protecode, analyzed output and updated open source components that showed vulnerabilities.
- Performed static code analysis of source code through Coverity, Fortify and SonarQube and fixed security issues discovered.
- Implemented Cross Site Request Forgery, Cross Site Scripting, Log Forgery, SQL Injection and other controls.
- Prepared the team for security review every release following the Confidential security processes.
External Interface Expert
Confidential
Responsibilities:
- Served as the expert on external interfaces to the system, especially how it connects to enterprise computer systems. Advised business partners, customers and professional services on approaches to effective integration.
- Served as the company’s representative to MultiSpeak, a standards-setting body in the area of metering. Also, served on ANSI’s committee in-charge of designing enduring interfaces to metering using the Common Interface Model (CIM).
- Led the effort to achieve certified interoperability with outage management (OMS), billing and meter data management (MDM) systems using the MultiSpeak web service interfaces.
- Designed and implemented an interface using SOAP to control and monitor street lights.
- Designed and implemented an interface using SOAP to control and monitor load control devices.
- Designed and developed a machine to machine interface that supports most everything available in the GUI. The well-designed interface has endured and has served customers well for years.
- Enhanced this web service interface to build a testing platform that has been used to write automated tests without programming and to implement complicated use cases easily. The important and pioneering work led to the formation of a new group to extend the system
- This platform was used to allow the company to implement an important component of the Agile process by always being ready to deliver.
- Volunteered to lead the design and development of a Sanity test suite to verify that the complicated system runs well enough for delivery to downstream teams. Ran this test suite through the CI/CD delivery pipeline in Jenkins. This change saved the company a million dollars per year.
Geographical Information System expert
Confidential
Responsibilities:
- Developed a system to display the wireless mesh network geographically to manage the network in ways not otherwise possible. Generated ESRI shapefiles of the system programmatically to interface with existing tools and third party digital maps. Extended the system to integrate with Google Maps to achieve better interactivity.
- Designed strategies to effectively use Google Map and ESRI technologies to manage millions of meters over thousands of square miles.
- The pioneering work with GIS system led to accolades from customers and industry consultants and resulted in the company hiring a new group of engineers to work with and extend the system.
- Extended the GUI interface to add a job and task monitor and event groups, using Sencha EXT JS.
- Converted ADOBE Flex based GIS product to use Sencha EXT JS for better portability and support on mobile platforms.
- Used OSGI Apache Felix to build several interoperating bundles to implement Multispeak web services over Apache CXF.
- Served as the XML expert to investigate, develop and in corporate new XML technologies into the product. Maintained system’s XML Schema and the web service contract (WSDL).
- Used Microsoft’s MSI technology to develop a package to install the product without errors or manual intervention. This effort saved the company much money by making the install process reproducible.
- Worked on various C++ backend servers. Used Purify to identify and plug memory leaks.
Confidential, Raleigh, NC
Technical Lead/Senior Member of Scientific Staff
Technologies: Java, CORBA, SNMP, C++, HP OpenView, CA TNG, VOIP, Windows
Responsibilities:
- Worked in a group that developed Cygic, a Voice Over IP (VOIP) product that subscribers use to receive multiple phone calls over the ‘Net, to unify voice, e-mail and fax messages and to access these messages from anywhere using a Java application/applet.
- Working as the technical lead of the Operations, Administration and Management (OAM) sub team, evaluated leading enterprise management platforms. Led the development of SNMP subagents to monitor and control software components. Adapted CA Unicenter TNG to product’s system management needs.
- Acting as the resident expert on distributed computing, advised how CORBA should be used in the product. Developed two CORBA based servers, one to bridge Naming Services from different vendors, the other to act as a resource manager to enable load-sharing among multiple backend VOIP servers.
Confidential, Boston, MA
Technical Lead/Software Design Engineer
Technologies: Java, HTTP, HTML, Oracle, Sybase, Windows, UNIX.
Responsibilities:
- Working in the highly productive environment of the Internet startup, completed major projects every three months using Web development, OO Design and Java. The company was among the first to start using Java to develop complex web sites and was the original developer of the JSP technology.
- Confidential was one of the few companies to survive the Internet bubble and was eventually acquired by Oracle for over 1 billion dollars.
- Led the development of a course platform for the Harvard Business School's executive education program. The platform enriched participants' experience and facilitated rapid production of specialized programs.
- Developed an Internet-accessible course platform for Harvard Business School. The platform featured electronic Harvard cases, course schedules, announcements, student-polls, and facilitated better communication among faculty and students. Perceived as a tremendous success, the software was cited as a factor in helping HBS improve its ranking among business schools in 1996.
- Designed and developed an Internet chat application for Kodak. With the goal of making it fun to talk about photographs, the application featured presentations that consisted of a sequence of photos and associated commentary, and allowed users to share pictures and receive answers to their questions in real time.