Aviatrix
Platform-as-a-ServiceNetwork security for on-prem and cloud environments.
- Led the design of a declarative API and an orchestration layer to provide inspection and protection for egress and lateral traffic, unlocking a key enterprise customer acquisition (Go, gRPC, Protobuf, Temporal).
- Designed and built a pipeline to ingest up to a week of flow logs and DNS logs (with a limit set to 100GB to process within an hour) for a security assessment pipeline (Go, gRPC, Kafka, Clickhouse, Temporal, S3).
- Collaborated with AWS IAM team to engineer the delegated onboarding workflow (OAuth-like) that simplified account onboarding for customers, replacing the CloudFormation-based onboarding (Go, SNS, SQS, IAM).
- Resolved systemic release delays by building a lightweight feature flag system to decouple release cycles from feature completion, brokering a compromise between budget constraints and engineering velocity.
- Improved the reliability of L7 proxy service by identifying and resolving a locking bottleneck in the caching layer and adding automated retries on credential expiration.