CACI Federal, 12021 Sunset Hills Rd., #100, Reston, Virginia

July 2023 – September 2024
40 hours/week

• Kubernetes, Ansible, Helm, Semaphore, Vault, CentOS 7, RedHat SCE 8, iSCSI: Senior developer for CACI Spectral project. Performed provisioning and configuring of Blade servers, wrote Ansible to control Vault and Semaphore pods within Kubernetes, wrote Helm installation for data management spectral component, installed CentOS 7 and RedHat SCE 8, worked on configuring iSCSI as a remote drive for SCE RedHat, and wrote DNS code to interface with hostname resolution. Worked with BAE Systems to repair Eclipse Radio. Helped train recent college graduates as junior software engineers.

Booz-Allen Hamilton, McLean, Virginia

April 2023 – July 2023
40 hours/week

• VS Code, Vue.js, Strapi: Wrote tools in Vue.js 3 for the Defence Threat Reduction Agency (DTRA)’s Attic training platform. Added steps in batch script for Strapi to allow developer mode. Added a setting to allow attic to use a local Strapi database. Implemented various fixes to the Attic codebase. Implemented a metrics and analytics tool for use across Attic to track usage and log it to a government Intelink server.

Puyenpa, LLC, Reston, Virginia

October 2020 – March 2023
40 hours/week

• Java 14, Java 8, C♯, ProtoBuf, Team Lead, Test-Driven Development, Full Life-Cycle, SpringBoot, NetBeans, Intellij, Eclipse, VSCode, Jira, Confluence, Training: Continued development of ML/AI software after transitioning from DigitalSpec to Puyenpa, for the US Customs and Border Patrol, Office of Field Operations. New ML/AI is a total rewrite in Java 13 of ML/AI 3.9f, written by Lawrence Livermore National Laboratory (LLNL) in Java 8 SpringBoot with NetBeans. Conducted team meetings, tracked team progress, and interfaced with LLNL and the Pacific Northwest National Laboratory (PPNL). Developed software to evaluate 96 of 200 physical scan features. Implemented an Orthonormal Subspace Projection algorithm over a Tensor field. Researched Glassfish and Java Message Queues. Gave a lecture on Inversion of Control. When Intellij was disallowed, became local subject matter expert for eclipse. Maintained control software in C♯ and developed the communication protocol using ProtoBuf and Windows Named Pipes.

• Python 3, OKTA, Flask, Django, ACL, AWS, Boto3, Desktop Anywhere, Conda, Pip, Team Lead: Implemented the first integration of OKTA security for DAC-TER’s web services. First attempted Flask implementation before implementing on the full Django server. Managed support staff to make sure software was properly installed on servers. Implemented User Rolls for Access Control List. Added Amazon S3 AWS support using Conda, Pip, and Boto3.

• Project Management, Python 3, Java 13, C++, AWS, Boto3, Docker, Python C-API, PostGRES, Redshift, Conda: Took over Project Management of the Predictive Plastic Degradation project, delivering monthly reports on its progress. modified the Django server to use the either a local PostGRES (setup locally for testing) or CBP databases and the Java 13 software to support working within the CBP firewall. Wrote Python 3 code to replace Java code to download historical NOAA weather data, parsing it with Conda packages and pass it to the C++ code. Refactored the C++ code to be more modular making interfacing with the Python C-API easier. Set up software to run in Docker component. Built a cache for the weather data in Amazon S3 AWS using Boto3 and Redshift.

• Team Lead, Python 3, Conda: Lead the development effort to fix database calculations for ambient environmental analysis using Conda.

DigitalSpec, LLC, Fairfax, Virginia

June 2020 – September 2020
40 hours/week

• Java 14, Java 8, Team Lead, Test-Driven Development, Full Life-Cycle, Intellij, Jira, Confluence, Training: Began development of ML/AI until transitioned from DigitalSpec to Puyenpa, for the US Customs and Border Patrol, Office of Field Operations. New ERNIE is a total rewrite in Java 13 of ML/AI 3.9f, written by Lawrence Livermore National Laboratory (LLNL) in Java 8. Conducted team meetings, tracked team progress, and interfaced with LLNL and the Pacific Northwest National Laboratory (PPNL). Started development of software to evaluate 96 of 200 physical scan features. Gave a lecture on Test-Driven Development.

TimeHorse, LLC, Herndon, Virginia

September 2009 – present
part time

• Objective C, Apple Developer Program, iOS, Subversion, Trac: Designed, developed and released the Lothar app for the iPhone. The app challenges users to solve the long-standing 3n+1 mathematical problem known as the Collatz Conjecture. Available in the App Store

The US Naval Research Laboratory, Washington, District of Columbia

July 2002 – July 2020
40 hours/week

• Python 3, git, MS Word, Confluence, Test-Driven Development, Agile Development, Team Development, Design Documents, COA Documents: Member of the Hawkeye Tactical Sensor Grid 2.0 development team. This project has a one year development timeline. Was involved in the early planning, including initial development and writing design documents and Course of Action (COA) Documents. Developed some code for this system in Python 3 using Git

• Python 3, ISO C++, Abstract Syntax Tree, Open XML Markup Documents, PDF Parsing, Malware Detection, Solo Development: Principle developer on the Majestic research project. The project endeavors to use Abstract Syntax Tree (AST) analysis to look for common patters of malware in the shape of these trees. Modified PDFParser to provide AST data in XML. Wrote Python 3 to parse Microsoft Open XML Markup documents (DocX, XlsX, PptX, etc) into AST via XML

• Escalate by 3Point, Malware Detection, Solo Development: Managed section account with 3Point for the Escalate training software. Completed many of the Escalate challenges in rapid order

• Python 3, REST, JSON, git, Docker SDK, Solo Development: Wrote a Docker component for PDFParser in the Malware Catalog using the REST API and JSON in git

• Malware Detection, IDA Pro, x64dbg, x32dbg, REMnux, Portable Executable Format, VMWare, Windows 10, Active Server Pages, Dynamic Analysis, Static Analysis, Solo Development: Analyzed a piece of malware found by NCIS, examined encoded document payloads, the including Active Server Pages (ASP), and 4 Portable Executable (PE) using REMnux, IDA Pro, x64dbg, and x32dbg on Windows 10

• MFC, UNIX, CentOS, Ubuntu, JavaScript, PDF Parsing, SeaMonkey JavaScript API, Dynamic Analysis, Common Vulnerability Exposures, ThreadGRID, Cuckoo, OPSWAT, git, Solo Development: PDFParser is a sandboxed runtime analyzer using Dynamic Analysis of PDF files which can detect numerous known Common Vulnerability Exposures (CVE) and other common PDF malware exploits. Ported PDFParser from Windows to UNIX. Adapted it for CentOS and Ubuntu, using the SeaMonkey JavaScript library. Tested with 30,000 sample corpus and compared with ThreatGRID, OPSWAT and Cuckoo. Researched competing PDF malware detection tools in preparation for public, OpenSource release of git repository

• LLVM, Flex, Bison, IRC, UDP, SICD, MPEG, Python 2, Ruby, Cross-Domain Solution, Full Life Cycle, Solo Development: Developed the Protocol Reference Overview Specification Enumeration (PROSE) standard. PROSE allows an interface to be defined in such a way that, using Flex, Bison, and LLVM, a software interface can be built conforming to the PROSE-specified API. Examined the Internet Relay Chat (IRC) and User Datagram Protocol (UDP). PROSE was tailored for the Resilient Embedded Environment (REE) under the Advanced Sensor Technology, High Assurance Guard (AST HAG) Cross-Domain Solution (CDS). Studied the Sensor Independent Complex Data (SICD) and Motion Picture Experts Group (MPEG) protocols for potential security holes using Python 2 and Ruby

• zero-mq, ISO C++, Solo Development: Modified the Enabling Capability (EC) messaging system by updating the Panser Daemon, PanserD, to use zero-mq messaging

• ISO C++, Generic Programming, UNIX Shell, bitbake, rsyslog, gdb, SFTP, XSLT, Xerces, Apache, Coverity, Cross-Domain Solution, Team Development: The Network Pump-II was a project which would upgrade the original Network Pump Cross-Domain Solution (CDS), which only allowed data flow from low-to-high, to be a fully bi-directional CDS with traffic allowed to go from both low-to-high and, once scrubbed, high-to-low. Worked on Watchdog and Monitor Daemons to perform housekeeping functions on Pump-II in ISO C++, Generic Programming, and Unix Shell Script. Configured logging for Pump-II including interfacing with rsyslog. Implemented the Pump-II Task Orchestrator. Designed a patch for SFTP. Wrote XSLT to generate Trusted Subject configurations with Schema validation in Xerces. Worked with Apache. Analyzed Pump-II code with Coverity and other code efficiency tools.

• Scala, XPath, XML, Regular Expressions, Data Format Description Language, VirtualBox, IntelliJ, OpenSource, Team Development: Worked, with Tresys, on Scala-based Daffodil. Daffodil is an one of two canonical specifications for the Data Format Description Language (DFDL) specification which at the time was under ISO review. Now apart of the Apache Incubator, the OpenSource Daffodil project was developed to convert any, arbitrary specification into a concise XML or JSON. Developed Daffodil as part of the Tactical Assured Information Sharing (AIS) effort with NSA and sponsored by Assistant Secretary of Defense for Research and Engineering(ASD R&E). Used XPath to transform data and Regular Expressions to identify fields

• Python 2, ISO C++, XML, XQuery, XSLT, Excel Basic, VHDL, Abstract Syntax Tree, Antlr 2, JOVIAL, Optical Character Recognition, Abbyy Fine Reader, Rational Rhapsody, SAXON, Solo Development: In order to provide upgraded firmware to the Raytheon AN/AGP-73 RADAR, which Raytheon no longer supported, analyzed the schematic diagrams for the equipment and generated Excel spreadsheets of connection diagrams using Optical Character Recognition (OCR) using Abbyy Fine Reader and Excel Basic. Used XML, XQuery, and XSLT, via SAXON, to transform the data retrieved from the spreadsheets and then created VHDL mnemonic op codes to build a functional model of the components in firmware. Documented the design using Rational Rhapsody, using it to then generate C++ code and designed a build system using Antlr 2, building Abstract Syntax Tree (AST). Parsed JOVIAL and built JOVIAL tests. Used Python 2 to parse the 1750A processor spec into XML

• Python 2, XSLT, XML, XQuery, XPath, BaseX, XML Schema, ARM Thumb, Portable Executable Format, OpenGL, GraphViz, DOT Graphics Library, Subversion, OpenOffice XML, Visio, PowerPoint, Solo Development: Used Python 2 to parse the Common Language Interface (CLI) of the Partition II Metadata document which defines the Portable Executable (PE) Format, building XML. Converted code to XSLT and, with SAXON, converted documents to XML. Optimized XPath queries. Based on the BaseX definitions, used XQuery to analyze various Intel programs. LoadedPE Data into an SQL Database and generated XML from SQL requests. Wrote an XML Schema to define the PE format. Researched OpenGL, GraphViz, and DOT Graphics Library Programming languages. Used GraphViz to generate PDF from XML. Code stored in Subversion; Researched parsing ARM Thumb, .NET, OpenOffice XML, Visio, and PowerPoint formats to see if they could be generated from XML

• PowerPC Assembly, Galois Fields, AES: Wrote an implementation of AES in PPowerPC Assembly, using Galois maths, modulo products, and Counter Mode, as well as careful use of registers

• Dynamic Byte Code, Trusted Platform Machine, GRUB, CoreBoot, ALDO, Solo Development: Designed a many-to-one, dynamic Dynamic Byte Code language to allow Just-In-Time execution without a disk footprint as codes would be interpreted in memory alone. Because multiple opcodes could do the same thing, it would be difficult to piece together the code logic from straight static inspection. Developed a Trusted Platform Machine (TPM) for the proposed Secure Hardware Execution Platform (SHEP), modifying the GNU GRand Unified Boatloader (GRUB) and installing CoreBoot into the machine BIOS. Actively developed CoreBoot to add necessary features. Adapted to use ALDO Morse e Code interpreter. Documented all work

• JQuery, Facebook Security, Facebook Client Code, Team Development: Developed a browser plugin, which added a button to automatically configure Facebook to lock down a given account’s Security using JQuery and calling the Facebook Client Code

• Service Oriented Architecture, Security Assertion Markup Language, Distributed Denial of Service, PowerPoint, Team Development: Researched Service Oriented Architecture (SOA) wish Security Assertion Markup Language (SAML) 2.0. Researched Distributed Denial of Service (DDOS) attacks on SOA. Wrote summary paper and PowerPoint presentation

• Agile Development, Cross-Domain Solution, Team Development: Designed elements of the Programable Embedded INFOSEC Product (PEIP) III (MILES) software including data channel acceleration, memory map layout, and documenting these components. Documented meetings to design page

• Agile Development, Python 2, C, CodeSurfer, Firefly, Elliptic Curve Cryptography, PowerPC Assembly, Subversion, CVS, VMWare, HTML, ASN.1, make, Autotools, CXX Test, 1-Wire Protocol, Test-Driven Development, Full-Scale Development Article, Cross-Domain Solution, Security Kernel, Design Documents, Full Life Cycle, Team Development: Designed and Developed the PEIP-II (KG-3x) multi-channel Cross-Domain Solution with data isolation satisfying NSA. Developed requirements and wrote design documents in the Full-Scale Development Article (FSDA). Design Lead some elements of the project. Developed code using Test-Driven Development and CXX Test. Wrote parsers for various hardware components, including ASN.1, in C. Wrote Firefly and other Elliptic Curve Cryptography algorithms in C. Analyzed Security Kernel in C. Developed a series of big number maths routines in C and PowerPC Assembly. Wrote a mock ISO C99 implementation of printf to aid in hardware testing. Wrote Python to generate proper code documentation. Used Autotools and complex make options. Optimized code using CodeSurfer, reporting program deficiencies to makers of the tool. Prepared verbal presentations about architecture for NSA. Hired software contractors

• ISO C++, Qt, Benign Fill Keying, TCP/IP, UDP/IP, Boost, Visual SourceSafe, Subversion, Trac, XML, DTD, Python, Team Lead: Designed and Developed the Last Mile Key / Product Management Prototyping architecture subsystem for Benign Fill Keying. The chief products were the Single-Point Key (SPK) and later Single-Point Command and Control Keying (SPC2K). Both products interfaced with key loading hardware following military specifications. Prototyped functionality in Python. They communicated via TCP/IP and UDP/IP protocols and were developed in ISO C++ using Boost and Qt. Used XML, with DTD, to allow for dynamic user interfaces based on site needs. Interfaced with PEIP software. Initially used Visual SourceSafe but migrated to subversion and Trac. Developed funding proposals

The Nasdaq Stock Market, Gaithersburg, Maryland

2000 – 2001
40 hours/week

• ISO C++, STL, OOA, OOP, OOD, real-time, client-server, MSVC++, Win2k, ATL, COM+: Design, Develop complex market algorithms for Stock Market Analysis system

• XML, ISO C++, STL, OOA, OOP, OOD, MSVC++, ATL, COM: Design, Develop data Logger

Interealty.com, Vienna, Virginia

1999 – 2000
40 hours/week

• ISO C++, STL, OOA, OOP, OOD, client-server, MSVC++, MFC, Win32, Stingray, COM, GUI: Maintain Application for Realtor use in national and international markets

• ISO C++, STL, OOA, OOP, OOD, MSVC++, Win32, COM: Design, Develop Custom Printing

• ISO C++, DES: Design, Develop Cryptographic System for encoding records

MagicSoft (Formerly AC&E, Ltd.), Chantilly, Virginia

1998 – 1999
40 hours/week

• ISO C++, STL, OOA, OOP, OOD, Full Life Cycle, Sink-Source, Dykstra, MSVC++, MFC, WinNT: Design, Develop Telecom and Video Conference Scheduler, VCWizard Merlin

• ISO C++, STL, OOA, OOP, OOD, Full Life Cycle, real-time, client-server, SNMP, TCP/IP, RS232, MSVC++, MFC, COM, WinNT: Design, Develop device control system

Softalia (Formerly Connectus SoftwareAC&E, Ltd.), Chantilly, Virginia

1995 – 1998
40 hours/week

• ISO C++, OOA, OOP, OOD, Full Life Cycle, Team Lead, RS232, TL-1, SONET, MSVC++, MFC, Win16: Design, Develop Telecom Provisioning Applications RCID 3.x – 6.x and NBCID 1.x, 2.x

• ISO C++, OOA, OOP, OOD, Team Lead, MSVC++, MFC, Win32, AVI, H.263: Initial Design, Develop of Portable Remote Video Application for deprecated, deprecated; Used at deprecated

• Python, CGI, HTTP, HTML, OOA, OOP, OOD, WWW, MSIIS, ISAPI, MSVC++, ODBC, MS Access, client-server: Design, Develop On-Line Bug Tracking Application

• ISO C++, STL, OOA, OOP, OOD, RS232, real-time, client-server, MSVC++, WinNT, COM: Design, Develop various device drivers for Video Conferencing System

Faculty of Arts Computer Lab, Montréal, Québec

1992 – 1995
part time

• Novell Netware, Windows for Workgroups 3.11, MacOS: Set up accounts for 300-500-user computer lab

• Windows for Workgroups 3.11, MacOS, Word Perfect, MS Office, MCSA Mossaic, SpryAir Mossaic, Customer Service: Advise on the use of Applications

• Novell Netware, LAN, WAN: Set up, maintain Network

SANS Institute, Rockville, Maryland

2018

• Studied IDA Pro, REMnux, and various malware tools to investigate Portable Executable, Microsoft Office, and PDF malware vectors

Arnewsh, Inc, Fort Collins, Colorado

2003

• Attended course in California going over the specifics and nuances of the PowerPC architecture and the MPC860 specifically

Montgomery College, Rockville, Maryland

2002

• Teaching Assistant as well as study, Certification in Progress

McGill University, Montréal, Québec

1995

• Originally studied 3 years in Physics

Toastmasters International club 5154: Loudoun Toastmasters

Electric Vehicle Association of Greater Washington D.C.

Reston Writers’ Review

The Science Book Club

Washinton Astronomy Meetup

Text available on-line at http://www.timehorse.com/resume.