Senior Software Engineer - Microsoft
(2023-01 - 2025-01)
Azure Sphere Security Services (Cloud Services)
- Led end-to-end migration of AS3 CI/CD pipelines to Ev2, a Microsoft-wide SFI compliance requirement, overhauling ADO, Azure resource, and Kubernetes workflows across 19 services.
- Created Ev2 migration templates and documentation to enable parallel team contributions, accelerating completion of the multi-service migration.
- Built Option8 AI features using 1ES's ESChat platform, delivering a prototype that helps AS3 engineers with wiki navigation and automated failure analysis — accessible to all of Enterprise and Security (EnS).
- Drove Redis cache invalidation design to improve data consistency across regions and reduce Cosmos DB and ARM request volume; handed off implementation with thorough documentation and design guidance.
- Executed OneBranch migration and maintained ongoing deployment infrastructure (Ev2 cleanup, identity management, testing permissions, pipeline monitoring, DRI documentation).
- Improved pipeline notification systems: build markers, Teams message enrichment, build ID consistency, and analytics task integration.
Software Engineer II - Microsoft
(2019-01 - 2022-01)
Azure Sphere OS (Networking and Gen1)
- Ramped up quickly on Azure Sphere OS codebase by working through bug fixes and delivering EAP-TLS certificate pairing work — a critical feature enabling enterprise Wi-Fi for Starbucks deployments.
- Helped design adjacent certificate rollover features and fixed SDK bugs encountered during EAP-TLS integration.
- Owned and delivered networking features for the Azure Sphere IoT OS: Custom DNS, Custom NTP, and Ethernet over USB, expanding device connectivity options for enterprise customers.
- Designed and implemented the Gen2 service adapter with IPv6 link-local and mDNS support, coordinating across CET, HAL, and kernel teams for a new chip architecture.
- Completed the DHCP release/renew feature — a highly requested customer capability — collaborating with teammates and mentoring junior engineers on the networking stack.
- Upgraded OS kernel to 5.10.103 and applied security patches including critical CVE fixes, maintaining OS integrity for the MT3620 chipset.
- Led the branch rename (master → main), coordinating with EPG and distributing pipeline update work across the team.
- Built and improved BVT automation: fuzzing pipeline hang detection, DNS BVT enablement on Conundrum, and automated pipeline task retries.
- Investigated and documented complex hardware/software issues (e.g., MCIO bugs), engaging directly with MediaTek and using logic analyzers for root cause analysis.
- Mentored contractors and team members on pipeline infrastructure, CLI tooling, and networking codebase areas.
Software Engineer II - Microsoft
(2016-01 - 2018-01)
Windows Configuration Designer / Provisioning (WCD)
- Delivered Powerwash (local and remote) features for Windows, owning the credential provider, post-Powerwash re-provisioning, and OOBE integration — a high-priority ask from EDU customers.
- Root-caused and fixed a critical 'Just a Moment...' OOBE issue that had blocked bulk provisioning for a subset of devices, restoring enterprise customer confidence.
- Designed and delivered the Azure AD Join configuration source provider (CSP), enabling enterprise devices to join AAD via provisioning packages, with deep integration across AAD, Intune, and the shell/OOBE teams.
- Implemented Provisioning Diagnostics: built APIs for querying CSP results, mapped categories to user-friendly messages, and added event logging — providing enterprise customers a clear view of provisioning outcomes.
- Shipped WCD improvements across multiple releases: multivariant enhancements, UAP/mobile app install fixes, setup school PC (SUSPC), and desktop license install fixes at OOBE.
Software Engineer - Microsoft
(2014-01 - 2016-01)
Windows and Windows Phone Provisioning / Image Configuration Designer (ICD)
- Designed and built the Provisioning Package API from the ground up: package creation, reading, catalog generation, encryption/decryption — the core data layer powering ICD provisioning flows.
- Ported and adapted multivariant datastore generation from Windows Blue; added dynamic provisioning XML, new event types, ICB asset support, and generic package import.
- Integrated ICD with Mobile and IoT provisioning workflows, collaborating with the LAD and application management teams across platforms.
- Developed ICD UI components including variant management, Windows Phone customization file converter tool, and runtime application support.
Software Engineer - Microsoft
(2013-01 - 2014-01)
Windows Phone / Image Customization
- Inherited and owned the Image Customization feature as founding developers left the team; ramped up quickly to fix issues and add features during active Nokia rollout.
- Coordinated with app install, Multivariant (MV), and setting framework teams to resolve offline-side provisioning issues and ensure correct setting propagation through imaging pipelines to device.
- Planned offline provisioning component for Windows 10, creating the design spec and coordinating with the Licensing and Deployment team to unify Windows and Phone customization.
