Adam – Python, Golang, PostgreSQL

An infrastructure access platform that gives company engineers secure access to servers, databases and other resources. Administrators control who can access what through fine-grained policies, and sessions are recorded and audited.

• Uncovered multiple denial-of-service vulnerabilities in the proxy service, prepared the fix for the database service and alerted other affected teams.
• Built a CLI and AI-agent skill that provisions ephemeral clusters with connected databases in Docker, supporting six database engines for end-to-end testing.
• Built an AI-agent security testing workflow with an isolated environment to verify whether suspected vulnerabilities were exploitable and to validate fixes.
• Designed a secure mechanism for reassigning ownership of PostgreSQL objects created during database sessions, based on analysis of PostgreSQL authorization and ownership semantics.
• Implemented cross-device headless authentication for database connections, enabling secure access from machines without WebAuthn or hardware MFA.

A multi-cluster Kubernetes management platform for businesses, usually large enterprises. It lets teams run and manage Kubernetes deployments across multiple clouds and bare metal.

• Rewrote a critical container image mirroring tool from GitHub Actions, Python and Bash into Go and regsync, improving reliability and supporting an organization-wide effort to reduce CVE counts; other engineers later built on top of it.
• Wrote a design document on the state of container image management, gathered stakeholder feedback and got approval for the proposed changes.
• Diagnosed and fixed complex bugs in the logging Helm chart, built on the Kubebuilder-based logging-operator.
• Led a refactor of partner-charts-ci, a Go tool for integrating third-party Helm charts into the partner charts ecosystem.
• Automated previously manual partner charts updates with GitHub Actions, freeing engineer time for feature work.

A cross-platform desktop application that gives developers a complete container and Kubernetes environment on Windows, macOS and Linux. Built on Electron, it makes the local container toolchain easy to install and manage.

• Built core features with Go, TypeScript, Vue.js, QEMU and Electron, including a snapshot/restore system for container and Kubernetes environments.
• Integrated the app with Windows, macOS and Linux desktops: startup and shutdown, window behavior, and automatic setup of supporting utilities across four shells.
• Led Linux support by building and maintaining rpm, deb and AppImage packaging with the Open Build Service.
• Improved the CI/CD pipeline: automated dependency updates, extended the end-to-end test suite and built infrastructure for secure auto-updates.
• Contributed to design, code reviews, issue documentation and technical writing.

A dental revenue-cycle platform that helps dental practices track insurance claims payable to them. It aggregates practices' claims data and scrapes insurer portals to find which claims are paid and which need action.

• Maintained and extended a Python pipeline that scrapes insurer web portals to retrieve the status of dental claims at scale.
• Deployed the pipeline on AWS Lambda, ECS, DynamoDB, S3 and SQS.
• Processed claims data from legacy patient management systems with Python and pandas.
• Worked with clients to obtain and verify the accuracy of claims data.

A network engineering team at a major Canadian telecom operator. The team managed the layer 3 edge router infrastructure that customer traffic reaches first when leaving the home.

• Built Python, Flask and MongoDB software to remotely manage and configure thousands of Linux-based media converters.
• Designed and implemented key and configuration distribution for WireGuard-based VPNs.
• Designed a Prometheus-based monitoring system for legacy policy management servers, with a custom Python daemon to extract metrics.
• Wrote Ansible playbooks to deploy Python CLI tools to legacy infrastructure.
• Built automation for unit and integration testing, linting, versioning and builds.

A new-graduate rotational program at a major Canadian telecom operator. The work covered three teams and several internal products in network testing, internal tools and infrastructure.

• Built a distributed network testing system with SSH, embedded Linux, Django, Ansible and pandas to measure and visualize latency, throughput and uptime of GPON and DOCSIS networks.
• Built a drag-and-drop form builder with React, Django REST Framework and MySQL to simplify form creation for recruitment.
• Built a Flask ticketing and work management app with Trello, Slack and email notifications and LDAP authentication.
• Set up a Kubernetes cluster on AWS EC2 with kops and monitored it with Prometheus and Grafana.
• Configured and compiled the Linux kernel, U-Boot and root filesystem for embedded Linux devices.

An internal network team at a major Canadian telecom operator that needed tooling to evaluate vendor solutions. The project was an HTTP logging proxy and a web app to control it.

• Built a Python proxy server, extending the standard library, that logged HTTP requests and responses to MySQL for vendor evaluation.
• Built a Django web app to control the proxy servers asynchronously.
• Wrote Python scripts on MySQL data to visualize the running count of network devices and related investment since 2009.
• Troubleshot network issues with nmap, traceroute and netstat.

A university research institute in space astronomy that builds instruments for submillimetre astronomy, including Fourier transform spectrometers. The project was data acquisition software for a high-performance acquisition board.

• Built a C server application on Linux for a high-performance data acquisition board.
• Streamed acquired data to the host computer in real time over TCP/IP with a FIFO buffer.
• Designed a communication protocol that hides low-level module details from end users.
• Traced performance problems to root causes with Wireshark and other diagnostic tools.
• Documented programs and protocols with flowcharts and sequence diagrams.