Experience
- Chose and integrated Keycloak as the identity layer for NetBox's new platform apps, wired to an in-house authorization server. Customers sign in with their own company accounts, a sign-in survives losing a node mid-login, and the same setup serves SAML and LDAP customers, not just OIDC.
- Moved every install off ingress-nginx onto Traefik and the Gateway API, updating the Helm chart, the Kubernetes operator, and the installer together so on-prem runs the same routing stack as the cloud product. Existing customers upgraded in place.
- Made releases repeatable with required checks, branch protection, and automation that shows evidence each gate passed, instead of trusting that someone remembered.
- Standardized the team's Claude Code skills and workflows: shared agents for scoping tickets, tracking release readiness, and on-call handoff, plus consistent automated review across the repos the team ships. Pointed QA at automated coverage and regression testing rather than a test plan per ticket.
- Built and maintained the Java and JavaScript ecosystem rebuilders, delivering SLSA 3 provenance and SBOMs for 500k+ artifacts across 44+ enterprise customers. Migrated the Java rebuilder to Argo Workflows, automating 2,000+ popular libraries.
- Built LibCheck, shipped as chainctl libraries verify: a Go CLI that validates package provenance and compares customer images against Chainguard base images.
- Designed a horizontally scalable network ingestion pipeline deployed in Kubernetes to sustain 100 Gb/s, and hired and led the senior Scala team that built it.
- Built the Helm chart and release process for MixMode Next, the v2 product, culminating in a $20M contract with a major government defense agency.
- Built a Kubernetes-based inventory system in Go and Python that let Anchore's platform analyze thousands of deployed Docker images daily and cut analysis time by 60%+, then added OSCAP report ingestion that improved report processing speed by 70%.
earlier: Engineering Manager, Senior Software Engineer
- Architected a high-throughput distributed data ingestion pipeline with AWS EKS, Kafka, and Quarkus storing over 2 million monitoring metrics daily, doubling processing efficiency while absorbing 20% growth in data volume on less hardware.
- Scaled the engineering team 300% in 6 months as Engineering Manager, cutting time-to-effectiveness in half. Previously led distributed Tomcat Java applications deployed across AWS Kubernetes clusters in 3 time zones, ensuring 99.99% uptime.