Author of A Remote Chance article for Dæmon News.

As the System Architect for operating systems, I was responsible for hardening and resizing the OpenBSD system for use in an embedded information appliance architecture.

My expertise was brought to bear on automating system management tasks normally performed by human operators on traditional UNIX systems, distilling tasks down to a simple web-based user interface. The DoBox gateway software performs as a capable internet firewall and NAT router; many aspects of the system must be reconfigured each time the gateway attaches to the internet connection. This configuration was fully automated and transparent to the user.

My duties also include developing an extensive suite of email capabilities for the DoBox gateway, including transparent proxies for the POP and SMTP protocols, allowing parents to protect family members from unwanted email. An optional package provides a full-featured mail server on the DoBox, featuring support for SMTP, POP3 and IMAP4 on the interior network and IMAP4 over SSL for external access to DoBox hosted mail accounts.

I have developed several business relationships for DoBox, including an ongoing argeement to trade my expertise in HTTP/WWW content filtering for a reliable stream of carefully scored data on popular internet web sites. I also participate in the design of the CableHome architecture at CableLabs, focusing on security and protecting user assets.

After initially contracting to help Ah-ha configure a FreeBSD server to run the Fast! search and indexing software, I assisted in the development of the filter program, used to filter content inappropriate for the family approach core to Ah-ha, and assisted in improving and migrating this technology as Ah-ah has grown.

As lead engineer on the software routing engine, I led a small engineering team in migrating the TCP/IP routing and firewall software to embedded processors unique to the OSR hardware, achieving a 900% increase in TCP/IP routing speed and a 1500% increase in firewall capacity.

As the network software design lead, I led a team of five software engineers in the development of a dial-up TCP/IP router implementation that requires minimal configuration and no operator intervention. As the lead on the network team, my responsibilities include research and design of all network protocols using IETF standards and RFCs, and implementation and interoperability testing of software with other vendors equipment.

My accomplishments on this project include implementing demand dialing in a TCP/IP and PPP protocol stack derived from 4.2 BSD sources, designing and developing an embedded HTTP server that supports server push, dynamic HTML content, server-side includes, and dynamic forms integrated with the configuration database. I designed and developing the InstantIP^TM system, in which the Domain Name Server (DNS) and Dynamic Host Configuration Protocol (DHCP) server are tied, allowing dynamic hostname entries in the DNS cache.

Lead a team of four engineers on a custom development project which increased the switching speed of the Jupiter router control software forty fold with no hardware modifications. Three major functional areas of the Jupiter code were re-implemented in C++ to accomplish this objective: the Router object, which provides a simple virtual router layered above the individual crosspoint switchers, a protocol object that implements the switcher control protocol over the EBU ES-Bus serial interface, and a Port Communicator object and associated com port drivers which handle the communications between the com port hardware and the protocol objects.

Jupiter and Saturn, developed from a common code base, are implemented in C and C++ using GCC as a cross-compiler for the M68K VxWorks target environment. The development platforms are HP-UX and FreeBSD, a 4.4BSD UNIX derivative for PC. The Jupiter/Saturn software is designed using the Booch Method, augmented by use cases. Designs are developed and documented using Rational Rose from Rational Software.

Developed a cross-town microwave carrier TCP/IP network link for routing television studio automation control information, using commercial off the shelf components and custom router configuration. Specified all equipment used, configured network routers and the Jupiter control system, and tested installation at the factory.

Senior Software Engineer. Solo implementation of WSLock, an idle workstation control product for UNIX systems and workstations. WSLock monitors users logged into UNIX systems and protects the system from idle logins. Once an idle session on the console, a terminal, an X terminal, or a network connection has been detected, the session may be locked, requiring the user to re-enter his or her password to continue interacting with the system. The idle session may also be terminated in order to protect the system and free resources.

Senior Software Engineer, Architect, Designer and Developer of Security Toolkit/UNIX, a security analysis system used to audit the security configuration of UNIX systems. Lead a team of 2 to 3 engineers on the development of STK. Developed the initial design and architecture of STK, and later the network architecture for version 2.0. Designed and developed a network distributed database and database maintenance utility for STK 2.0. Designed and developed a network based, cross-platform installation tool for STK 3.0, which allowed customers to install and upgrade STK on all licensed platforms from one single distribution machine with a tape drive or CD-ROM drive.

In each of the above projects, I created the development environment for the project, setting up development source code trees, initializing the source code control system, specifying the layout of the source code, and mapping of source code functional units to design functions.

Software Engineer, Team Lead, Peacekeeper Test Facility (PKTF), Hill AFB UT. Responsible for establishing test roles for PKTF and assisting in installation of equipment to test the Peacekeeper command and control system. Also, designed and implemented a high-speed digital data acquisition system for government customer.

Software Test Engineer, Seattle WA. Developed a test simulator for a component of the Peacekeeper ALCC computer system. Unit-level test and integration of Peacekeeper Airborne Operational Program (AOP) and Launch Control System Computer (LCSC) software.

Computer Scientist, Hill AFB UT. Designed a program to analyze Fortran source code programs in order to produce verifiably correct software for ICBM targeting programs. Implemented in Fortran 77 on VAX/VMS system.