Principal Engineer | GenAI Security · Zero-Trust · Physical AI & Edge Systems
28 Years Experience • Cloud-Scale Dataplanes • GenAI Security • Windows Kiosk Fleet Ops • Supply-Chain Security
(Isaiah 40:31)
Principal Engineer and System Architect with 28 years designing and delivering large-scale security infrastructure and AI systems. Expertise spans GenAI and agentic AI security, Zero-Trust SASE/SSE and Secure Web Gateways, cloud-scale proxy and dataplane systems, and security for Physical AI agents at the edge. Currently at LiveX AI; previously at Netskope, F5, and Palo Alto Networks. Faculty instructor in AI Security.
Specialized in solving foundational systems problems where security, runtime performance, and fleet reliability intersect: from authoring C++ dataplane microservices handling high-throughput DLP and GenAI protocol inspection, to managing automated DevSecOps pipelines across 86 microservice repositories, to securing and validating Windows kiosk endpoints running physical AI agents in the field.
Software Engineer – Security, Platform & Edge Systems for Physical AI Agents
Palo Alto, CA • Full-time · On-site
Principal Engineer
Santa Clara, CA · On-site
Principal Engineer
San Jose, CA
Principal Engineer
San Jose, CA
Principal Engineer
Santa Clara, CA
Senior Staff / Staff Software Engineer
Santa Clara, CA
Co-Founder & President
Saratoga, CA · viaifoundation.org | viaiforgood.org
Engineered the central security-operations system processing Vanta, GitHub, GCP, Trivy, Semgrep, tfsec, and Nuclei/ZAP DAST signals into deduplicated Jira issues and Slack alerts across 86 repositories. Deployed TeamViewer Patch Management across 158 Windows kiosk endpoints with zero failures and shipped LiveX Anvil 2.1.0 GA mini-PC bundles with CycloneDX SBOM integration into LiveX Ledger (OWASP Dependency-Track).
Architected C++ SWG dataplane components for SASE/SSE with GenAI protocol inspection. Accelerated ARM64 Docker build pipelines from 4 hours down to 9 minutes (-95%) using GitHub Actions and Artifactory. Built the C++ Dataplane Event Nexus (DEN) over ZeroMQ and gRPC for high-throughput DLP event streaming.
Designed and deployed microservices in Python/Node.js for ransomware detection and full-content analytics across AWS ECS/EKS with Terraform/Terragrunt. Authored 5 patents covering cloud cybersecurity and cross-federation licensing models.
Architected GCP & F5XC cloud-native proxy microservices in Python and Go for Integrated Bot Defense. Migrated SDC build infrastructure to GitLab CI/CD & ArgoCD (-40% deployment time) and integrated HashiCorp Vault secrets management for multi-tenant compliance.
Architected network layer isolation leveraging ISC DHCPD, Secure DNS, and Python. Built secure backend microservices on AWS and GCP using Elasticsearch, MySQL, and Kubernetes.
Faculty Instructor in AI Security. Teaching graduate and professional courses in CSE AI Security and Physical AI Systems, focusing on zero-trust agentic security, runtime isolation, and edge AI deployment.
Taught Operating Systems, Databases, Algorithms, Data Structures, and C/C++. Developed enterprise banking and corporate management systems utilizing C++, Oracle, MS SQL, and distributed network architectures.
Researched at the NSF FREEDM Systems Center on FREEDM DGI (Distributed Grid Intelligence), focusing on big-data analytics, embedded Linux systems, network protocols, TCAD power device simulations (ETO), and power system modeling.
Researched IC Physical Design Automation placement algorithms (Sequence Pair methodology), digital/analog integrated circuit design, and EDA tool development.
Studied Microelectronics, Chinese Character Recognition, Digital Map Systems, and IBM Lotus Notes/Domino Systems. Served as President of ZJU Computer Fans Association (3rd Branch).
Actively open to Principal / Staff+ Security Engineering roles across GenAI Security, Zero-Trust / SASE / SWG infrastructure, and Physical AI / Edge systems.