Ari – Kubernetes, Golang, Kafka

A PaaS platform that simplifies deployment and management of web applications on Kubernetes while keeping infrastructure visible to developers. It supports workloads such as WordPress, Drupal, Laravel, and Go services, managing deployments, environments, storage, databases, backups, scaling, and automated workflows.

• Led the architecture, technical direction, and implementation of the platform;
• Designed the Kubernetes- and Go-based platform architecture, including application lifecycle, controllers, deployments, builds, releases, storage, environments, and Git workflows;
• Designed abstractions supporting diverse application types through a common lifecycle while preserving application-specific requirements;
• Designed and implemented the Build and Release architecture for exact, reproducible application versions;
• Designed Git workflows supporting environment promotion, rollback, change tracking, and safe production operations;
• Led Kubernetes orchestration across deployments, services, ingress, persistent volumes, storage, snapshots, health checks, scaling, namespaces, and reconciliation;
• Designed and implemented a workflow engine for composing reusable infrastructure and application operations into automated, resumable workflows.

A cloud-native cybersecurity platform that collects threat intelligence from a globally distributed network of honeypots, processing billions of security events to help organizations understand malicious activity and emerging threats across the Internet.

• Designed the overall platform architecture, including ingestion pipelines, backend APIs, frontend applications, deployment infrastructure, and operational tooling;
• Leveraged Kubernetes, Kafka, OpenSearch, PostgreSQL, and OpenSearch Dashboards for scalable data ingestion, storage, authentication, and visualization;
• Led the architectural redesign and migration from Azure to AWS, adopting managed services such as Amazon MSK and Amazon OpenSearch Service;
• Replaced the Logstash-based ingestion pipeline with a custom Go ingestion service for dynamically routing customer-specific data streams through Kafka;
• Developed administrative tooling for managing customers, data sources, platform configuration, and operational workflows;
• Standardized the frontend using Tailwind UI and built backend APIs using restk/resource, an open-source framework developed to accelerate REST API development and administration tooling;
• Managed platform operational reliability, including Kubernetes deployments, automated CI/CD pipelines, infrastructure scaling, backup and disaster recovery using Velero;
• Performed ongoing platform performance optimization.

A collaborative threat intelligence platform that enables organizations to securely share intelligence on malicious domains, helping reduce phishing, malware, and other forms of domain abuse through trusted collaboration.

• Designed and architected the platform from the ground up as a cloud-native application running on Kubernetes;
• Built backend APIs using Go, with Kafka and PostgreSQL serving as the primary data stores;
• Integrated Metabase for analytics and reporting to help partners explore shared intelligence and generate insights;
• Drove the platform’s technical direction by advocating for technologies that improved scalability, developer productivity, and long-term maintainability;
• Introduced React and Tailwind UI to standardize the user experience and expanded internal administration tooling;
• Proposed ClickHouse as the next-generation analytics platform to support increasingly complex analytical workloads;
• Led architectural planning, infrastructure design, and deployment strategy to keep the platform secure, scalable, and easy to operate as the community and dataset grew.

A privacy-focused DNS service that blocks malicious domains in real time, helping protect users from malware, phishing, botnets, and other cyber threats by preventing access to known malicious infrastructure.

• Developed backend services for processing high-volume DNS telemetry and generating analytics from incoming data streams;
• Developed APIs enabling users and partner systems to determine whether domains were blocked by Quad9 and access domain reputation information;
• Worked with large datasets, backend services, and scalable data processing systems supporting a large public cybersecurity DNS service;
• Developed a Go stream processing library, similar to Kafka Streams, for processing incoming DNS telemetry.