Highlights
- More than 15 years of professional software development and
architecture focused on security, scalability, reliability, and
performance
- Experience with many phases of the software lifecycle including
requirements, use cases, analysis, design, implementation,
optimization, documentation, maintenance, and system administration
- Development on Unix flavors such as Linux, FreeBSD, Solaris, and
AIX. Exposure to Win32 development
- Languages including C/C++, Java, Python, Perl, SQL, and assembly
- Member of the Apache Software Foundation and HTTP Server Project (1999-present)
Professional Experience
Software Engineer - Security, Google
(2005-)
- Security lead on a new infrastructure skunkworks project
- Design and development of compartmentalization changes in production environment
- Security and privacy policy, design, implementation, and leadership for web logging infrastructure
- Security liaison/lead on Google Checkout credit card processing (now Google Wallet)
- Security evaluations of dozens of product launches, including web frontends and backend infrastructure
- Key incident response handling for Aurora attacks
Senior Architect, ADP
(2003-2005)
- Design and implement standards and a prototype for identity federation using SAML and Shibboleth
- Supervise contractors and help in the building of a reverse
proxy solution for load balancing, identity management, and
customer request routing using Netegrity SiteMinder, Apache, Spread, and
mod_backhand
- Shepherd incubation of ideas and technologies, including data center
automation, collaborative development practices, and open standards
- Serve as an technical resource for unsolved problems
Senior Software Engineer, CollabNet (2000-2003)
- Designed and built security using X.509 certificates for SourceCast, a web-based system allowing multi-vendor collaborative software development. This included developing a protocol to allow wrapping a standard CVS client in two-factor certificate authentication. The system is based on Apache, CVS, mod_ssl, and OpenSSL.
- Planned and implemented mechanisms that provide 99.9% availability for critical customer infrastructure, including watchdogs and hot failover using a Network Appliance filer
- Designed and developed a custom single sign-on system for use with standard web browsers, based on Java servlets and MySQL
- Built releases, performed installations, did troubleshooting, and maintained systems running SourceCast
- Examined cracked Linux and FreeBSD servers, including apache.org, and helped secure them
- Provided expertise from open source communities on development processes and developer relations
Software Engineer, IBM
(1997-2000)
- Developed key code for Apache 2.0, including support for hybrid multiprocess and multithreaded operation on Linux and AIX using pthreads
- Represented IBM in the Apache Group
- Designed and prototyped a Java-based distributed application development tool and server
Education
- M.S. in Information Networking
- GPA: 3.7
- Designed and implemented an extension of Mobile IP to streamline movement overhead
- Wrote a highly-available, client-server, distributed, IP-based multimedia system in C++
Other Experience
- Contributions to open source projects including Apache httpd, the Linux kernel, ALSA, and mutt
- Ported the open source S3 Savage driver for XFree86 to the SuperSavage engine
- INI Fellowship (1996)
- Honorable Mention, NSF Graduate Research Fellowship (1995)
Latest version at <http://www.prismnet.com/~manoj/resume>