Allan Riddel
Principal (Software/Cryptography) Wizard | Lead Middleware Engineer
Professional Summary
๐ฏ Senior IT professional with 35+ years of experience across the full Microsoft technology stack, from applications to servers. Strong background in the design, development, and deployment of enterprise systems and tools. Skilled at managing multiple priorities in dynamic environments while ensuring system stability, performance, and business continuity.
๐ง Technical Troubleshooting & Problem Resolution
Senior-level escalation support for enterprise environments with root cause analysis across client-server architectures, application tiers, database systems, user interfaces, middleware components, and infrastructure services. Three decades of experience spanning Windows and Linux platforms, including web server technologies, monitoring solutions, and build automation tools. Diagnose and resolve issues across distributed systems, multi-tier infrastructures, authentication mechanisms, and integration points. Develop automated diagnostic and remediation workflows. Trace failures systematically through application logic, SQL operations, system modules, and infrastructure layers to identify underlying causes. Deliver architecture-level solutions that restore operational integrity and establish long-term stability.
๐ PQCrypta.com: Full-Stack Cryptographic Platform
Comprehensive cryptographic platform demonstrating full-stack systems expertise: Rust-based post-quantum encryption API (400+ endpoints), OWASP Top 10 WAF with 8 threat intelligence feeds, and 100+ module JavaScript frontend. Built as a portfolio artifact showcasing memory-safe backend cryptography through real-time 3D visualizations.
Platform capabilities demonstrating systematic problem-solving across multiple technical domains:
- 28 NIST-compliant post-quantum algorithms (ML-KEM-1024, ML-DSA-87, FN-DSA, ZK-proofs) with 100% workflow success rate
- Memory-safe Rust with constant-time cryptography, side-channel resistance, and PyO3 Python integration
- Bot threat detection with comprehensive behavioral analysis (TLS/JA3 fingerprinting, honeypots, ML classification)
- AI/ML pipeline: RAG chatbot with FAISS vector store, Groq OpenAI GPT-OSS 120B, PyTorch neural networks
- Production infrastructure: HTTP/3 WebTransport, hybrid TLS 1.3 (X25519MLKEM768), 5-minute health monitoring
- 60+ PostgreSQL tables, 12+ compression algorithms, 3D geographic visualization, 24-song music platform
Primary expertise in systemic remediation: identifying failure patterns, isolating root causes, and restoring operational integrity across distributed platforms. Career focus on support escalation, application performance monitoring, CI/CD pipeline stabilization, and enterprise platform architecture.
๐ง AI/ML Architecture & Implementation
Integrated Groq API with OpenAI GPT-OSS 120B (400+ tokens/second, 128K context window, 120B parameters) for high-throughput LLM inference. Built advanced RAG chatbot using FAISS vector store with 384-dimensional embeddings (all-MiniLM-L6-v2) and hybrid search combining dense retrieval (FAISS) with sparse retrieval (BM25) and cross-encoder re-ranking (ms-marco-MiniLM-L-6-v2). Deployed PyTorch neural networks for performance prediction and algorithm selection, scikit-learn ensemble models (Random Forest, Gradient Boosting) for multi-criteria classification, and quantum algorithm simulations on classical hardware using Qiskit 1.4.5 and PennyLane 0.42.2 with variational quantum circuits for future quantum hardware readiness.
๐ Security & Bot Threat Detection Systems
Built comprehensive threat detection platform analyzing 50+ dimensions: IP geolocation and ASN ownership, TLS fingerprinting (JA3/JA4), browser fingerprinting (WebGL, canvas, audio context, fonts, plugins), behavioral patterns (scroll, mouse, click, form interactions), request timing (burst detection, rhythm patterns, velocity), HTTP header analysis, cookie behavior, and user agent validation.
Implemented ML-based threat classification using PyTorch neural networks and ensemble models (Random Forest, SVM, XGBoost) with real-time attack vector probability analysis. Created honeypot system with trap fields, decoy endpoints, and hidden links. Built rate limiting with adaptive thresholds and reputation-based allowlisting.
Integrated PostgreSQL with connection pooling, parameterized queries, and comprehensive audit logging with threat correlation, geographic anomaly detection, and automated incident response. Established GDPR/HIPAA compliance monitoring with input validation and encrypted communication channels.
๐ Cryptographic Implementation
Developed PyO3-based Rust-Python integration for ML model deployment within memory-safe cryptographic workflows. Built WebGPU compute shaders for accelerated polynomial operations with AVX-512 SIMD optimizations. Implemented streaming encryption with chunked processing for real-time operations and batch processing engine with distributed job management. Created ML-powered threat prediction with confidence scoring and model ensemble validation.
๐๏ธ Infrastructure & API Development
Developed Rust API server with HTTP/3 WebTransport (Quinn/h3-quinn) and HTTP/2 (Axum framework) support using Tokio async runtime for high-performance concurrent operations. Built analytics system with KPI tracking and performance metrics. Built pqcrypta-proxy reverse proxy in Rust with Rustls PQ TLS for hybrid key exchange (X25519MLKEM768) with HTTP/3 QUIC and dual-stack IPv4/IPv6. Established Python ML integration layer for threat detection, performance prediction, and algorithm selection. Created streaming encryption with chunked processing and integrated blockchain infrastructure with smart contracts, consensus mechanisms, and WebSocket communication.
๐ต Music Platform & Audio Engineering
Built professional music platform featuring 24 original songs with Web Audio API integration for real-time frequency analysis. Implemented 8-frequency spectrum analyzer (bass, low-mid, mid, high-mid, treble, high, ultra-high, presence) with FFT size 256 and 0.3 smoothing constant. Developed beat detection algorithm with intelligent frequency smoothing using 10-sample window and dynamic gradient effects responding to frequency variance. Created WebGL-based audio visualizers with custom shaders, texture-based rendering, and real-time spectrum visualization at 60 FPS. Built PWA music player with offline capability, Web Share API integration, file handler protocols for audio files, and Edge Side Panel support.
๐ก๏ธ WAF & OWASP Top 10 Protection
Implemented custom WAF with comprehensive OWASP Top 10 protection: SQL Injection, XSS, Path Traversal, Command Injection, LDAP/XXE Injection, SSRF, Header Injection, File Upload Attacks, Brute Force, API Abuse, and Data Exfiltration detection. Built 91-column attack logging schema with OWASP-categorized pattern matching. Integrated 8 threat intelligence feeds (ThreatFox, URLhaus, Feodo Tracker, SSLBL, AlienVault OTX, SANS DShield, Binary Defense ATIF, OpenPhish) with 1-hour cache TTL. Developed dynamic blocklist generation with pqcrypta-proxy integration, geographic threat analysis, and automated IP blocking with whitelist management.
๐ป Frontend Architecture (100+ JavaScript Modules)
Architected modular frontend with 100+ JavaScript modules including 25+ cryptography modules (WebAssembly SIMD, crypto workers, secure randomness), 15+ compression modules (ML-based selection, neural compression, streaming), 15+ ML/AI modules (federated learning, deep learning architectures, quantum-ML fusion), 15+ WebGL/WebGPU modules (Three.js 3D graphics, custom GLSL shaders, particle systems, 4D quantum cursor), and 15+ authentication modules (2FA management, WebAuthn hardware keys, behavioral validation). Implemented Service Workers for offline capability, IndexedDB for persistent storage, SharedArrayBuffer for parallel processing, and Broadcast Channel API for inter-tab coordination.
๐ Geographic Visualization & Internationalization
Built 3D globe visualization system using Cesium.js and Leaflet.js for real-time geographic threat mapping, visitor tracking, and country-based analytics display. Implemented TopoJSON world atlas data integration with dynamic country highlighting and threat heat mapping. Created internationalization (i18n) framework with translations.js supporting multi-language content delivery and locale-aware formatting. Developed alert notification system with email delivery for critical security events, compliance violations, and system health alerts.
๐ช GDPR-Compliant Dual-Track Analytics
Built cookie consent manager using View Transitions API and Web Animations API with secure __Host- prefixed cookies, CSP-compliant architecture, and granular consent tracking. Developed dual-track analytics separating anonymous metrics (pageviews, anonymized visitor hashes, device types) from consented analytics (session duration, bounce rate, scroll depth, click tracking, performance metrics). Dashboard displays both streams with clear separation, maintaining GDPR compliance through consent_given database filtering.
๐๏ธ Database Architecture (60+ Tables)
Designed PostgreSQL database with 60+ tables across 11 versioned migrations including health monitoring (17 tables with full endpoint tracking), security/WAF (12 tables with attack logging and pattern detection), analytics (8 tables with real-time aggregation), blockchain (6 tables with smart contract state), billing/subscriptions (9 tables with Stripe integration), ML/chatbot (6 tables with conversation history and embeddings), and honeypot system (3 tables with interaction tracking). Implemented connection pooling, parameterized queries, full-text search indexes, and automated backup systems.
๐งช Testing Infrastructure
Built comprehensive testing framework with 20+ test suites using Vitest, Playwright for E2E testing, and Chai/Sinon for assertions and mocking. Implemented security-specific test suites for CSP violation detection, WAF attack simulation, CORS validation, and nonce matching. Created API test suites validating all endpoints, compression algorithm testing (12 algorithms), cryptographic workflow validation (100% success rate on all 28 algorithms), and dashboard rendering tests. Established automated CI/CD validation with npm audit, ESLint security rules, bundle analysis, and production pre-deployment checks.
โ๏ธ DevOps & Automation
Implemented cron-based automation with 5-minute health check intervals validating all endpoints, analytics event aggregation, dynamic threat blocklist generation, and WAF pattern updates. Built 11 database migrations with version control, automated rollback capability, and schema validation. Configured structured JSON logging with tracing integration, 10MB file rotation (10 files max), and security event alerting. Established monitoring with latency percentiles (p50, p95, p99), error rate tracking, 30-day uptime retention, and automated incident response triggers.
๐ฎ PQC Challenge Mode - Interactive Learning Platform
Built gamified cryptography learning platform with 40 progressive challenges across 4 difficulty tiers (Beginner, Intermediate, Advanced, Expert) teaching post-quantum cryptography concepts through hands-on terminal-based exercises. Implemented 50+ command types covering ML-KEM key encapsulation/decapsulation, Ed25519/ML-DSA-87 digital signatures, zero-knowledge proofs (zkproof/zkverify), quad-layer encryption inspection, homomorphic operations, blockchain mining, VQE quantum optimization, and crypto-agility policy management. Created challenge engine with progress tracking, hint system, solution validation, and comprehensive puzzle library testing all API endpoints. Built WebGPU-accelerated terminal interface with syntax highlighting and real-time command feedback.
๐ Quantum Entanglement Sandbox - Interactive Particle Physics
Developed Three.js particle physics playground simulating quantum entanglement behavior with 5,000 interactive particles. Implemented entanglement mechanics where particle pairs maintain correlated quantum states across distances with visual connection lines. Built physics engine with configurable gravity strength, entanglement strength, chaos factor, and interaction radius. Created multiple interaction modes (attract, repel, orbit, chaos) with mouse-driven particle manipulation and trail effects. Integrated WebGPU acceleration detection with automatic fallback to WebGL, post-processing pipeline with bloom effects and motion blur, adaptive quality scaling targeting 60 FPS, and real-time statistics display (FPS, active particles, entangled count, system energy). Built custom cursor system and responsive controls panel for parameter adjustment.
๐ก Engineering Philosophy: Problem Resolution Through Systems Thinking
PQCrypta originated from direct experience with a ransomware incident at a previous organizationโan event that catalyzed deep investigation into cryptographic security, threat mitigation architectures, and defensive system design. The platform represents not cryptographic specialization, but rather the application of systematic problem-solving methodology to a complex technical domain.
Core competency lies in root cause analysis, systematic remediation, and automated solution deployment. When confronted with operational failures, security vulnerabilities, or performance degradation, the approach follows consistent patterns: isolate the failure domain, trace dependencies through distributed system layers, identify underlying architectural weaknesses, and implement solutions that prevent recurrence rather than merely addressing symptoms.
Integration of AI/ML technologies into production systemsโRAG pipelines, neural networks for threat classification, federated learning architecturesโdemonstrates commitment to continuous technical evolution. These aren't theoretical implementations; they're deployed, tested, and serving production traffic. The Groq-powered chatbot processes queries against 45,007 indexed code chunks. The threat detection system classifies requests in real-time using trained models.
Certifications and stated skills provide baseline indicators, but https://pqcrypta.com provides verifiable evidence: 400+ functioning API endpoints, 28 cryptographic algorithms with 100% workflow success, WAF blocking real attacks, health checks validating all systems every 5 minutes, and analytics tracking actual user behavior. This is a living systemโmaintained, monitored, and continuously improvedโnot a static portfolio artifact.
Present a problem requiring systematic analysis, architectural remediation, or automated resolutionโthe response will address root causes, scale appropriately, and maintain operational integrity. PQCrypta demonstrates this approach in production.
Professional Journey
A timeline of innovation, leadership, and technical excellence spanning over three decades
Principal (Software Architect/Cryptography Engineer)
- Full-Stack Architecture: Architected and developed post-quantum cryptography platform from ground up using Rust backend, ES6+ frontend, Python ML pipeline, with security and performance optimization
- Frontend Development: Built ES6+ JavaScript application using Vite 7.0.4 build system, Three.js 3D graphics, Web Workers, WebAssembly integration, and IndexedDB with particle systems and real-time 3D animations
- Build Pipeline: Implemented Vite 7.0.4 bundling with ES2024 target, manual chunk splitting, tree-shaking optimization, Terser compression, and asset management with hash-based cache busting
- Cryptographic Implementation: Built memory-safe, high-performance cryptographic engines implementing 28 quantum-resistant algorithms including NIST ML-KEM-1024, ML-DSA-87, FN-DSA signatures, and experimental lattice-based fusion algorithms with SIMD optimization
- Reverse Proxy Infrastructure: Built pqcrypta-proxy reverse proxy in Rust with Rustls PQ TLS for hybrid TLS 1.3 using X25519MLKEM768 (NIST ML-KEM-768/Kyber768 + classical X25519 ECDH) key exchange, HTTP/3 QUIC support via Quinn, WebTransport, and dual-stack IPv4/IPv6 binding for memory-safe post-quantum secure transport layer
- Compression Integration: Integrated 12+ compression algorithms (Brotli, Brotli-WASM, Zstandard, LZ4, LZ4-Flex, LZMA, Gzip, Deflate, Snappy, Pako, fflate, Zlib, Terser) with WebAssembly optimization, ML-based compression selection, neural compression, context-aware algorithms, and streaming capabilities
- WebGL & 3D Graphics: Developed Three.js applications with custom GLSL shaders, particle systems, quantum-themed visualizations, and WebGL2 optimization for cryptographic data representation
- Web Technologies: Implemented Web Workers, SharedArrayBuffer, WebAssembly SIMD, IndexedDB, Service Workers, WebGL2, WebGPU, and ES6+ features with Cross-Origin isolation for performance
- AI/ML Security Intelligence: Architected Python-based ML pipeline with PyTorch/scikit-learn for threat detection, performance prediction, algorithm selection, vulnerability scanning, and neural compression. Implemented federated learning system with FedAvg/FedProx/FedYogi/FedAdam aggregation, differential privacy (Gaussian mechanism), secure multi-party computation, and Byzantine-robust aggregation (Krum). Developed quantum algorithm simulations using Qiskit 1.4.5 and PennyLane 0.42.2 with variational quantum circuits and hybrid quantum-classical architectures for future quantum hardware readiness. Built Variational Quantum Eigensolver (VQE) simulations with adaptive variants and quantum natural gradients for optimization research
- API Architecture: Designed and implemented high-performance REST API using Rust Axum framework serving 400+ endpoints (230+ core services including cryptographic operations, authentication, analytics, blockchain, compliance, batch processing, streaming, ML/AI, wizard chatbot, bot threat detection, health monitoring, user management + 168 algorithm-specific) with PostgreSQL/Redis integration, HTTP/3 WebTransport (Quinn/h3-quinn), HTTP/2, QUIC protocol support, 2FA authentication, granular permissions, and real-time streaming encryption
- Blockchain Integration: Implemented smart contracts, ZK-proof systems, and consensus mechanisms for decentralized cryptographic operations
- Analytics: Developed real-time analytics engine with KPI tracking, usage monitoring, and security pattern analysis
- Batch Processing: Built distributed job processing system handling large-scale cryptographic operations with queue management
- Compliance Systems: Implemented automated GDPR/HIPAA compliance monitoring with audit trails and data protection protocols
- Bot Threat Detection Platform: Built comprehensive threat intelligence system with 50+ analysis dimensions including IP geolocation, ASN/network analysis, TLS fingerprinting (JA3/JA4), browser fingerprinting (WebGL, canvas, audio context, fonts, plugins), behavioral pattern analysis, request timing (burst detection, rhythm patterns), HTTP header fingerprinting, session tracking (scroll/mouse/click patterns), honeypot detection, user agent validation, cookie behavior analysis, and connection pattern monitoring with ML-based threat classification and adaptive rate limiting
- Cryptographic Security Implementation: Implemented PQC Binary Format v1.0 specification, constant-time cryptographic operations, quantum validation service, zero-knowledge proof systems (Groth16, PLONK, Bulletproofs using arkworks), homomorphic-style encryption (RLWE with lattice-based operations), privacy-preserving computation, and blockchain smart contracts with key vault integration and side-channel attack resistance
- Music Platform & Audio Engineering: Built professional music platform featuring 24 original songs with Web Audio API integration, 8-frequency spectrum analyzer (FFT size 256), beat detection with 10-sample smoothing window, WebGL-based audio visualizers with custom shaders at 60 FPS, and PWA player with offline capability, Web Share API, and file handler protocols
- WAF & OWASP Top 10: Implemented custom WAF providing comprehensive OWASP Top 10 protection (SQL Injection, XSS, Path Traversal, Command Injection, LDAP Injection, XXE, SSRF, Header Injection, File Upload Attacks, Brute Force, API Abuse, Data Exfiltration) with 91-column attack logging schema, 8 integrated threat intelligence sources (ThreatFox, URLhaus, Feodo Tracker, SSLBL, AlienVault OTX, SANS DShield, Binary Defense ATIF, OpenPhish), honeypot detection, and dynamic blocklist generation
- Frontend Architecture: Architected 100+ JavaScript modules including cryptography (25+ WASM/worker modules), compression (15+ ML-based), ML/AI (15+ federated/deep learning), WebGL/WebGPU (15+ 3D graphics/shaders), and authentication (15+ 2FA/WebAuthn) with Service Workers, IndexedDB, SharedArrayBuffer, and Broadcast Channel coordination
- Database Architecture: Designed 60+ PostgreSQL tables across 11 versioned migrations including health monitoring (17 tables for all endpoints), security/WAF (12 tables), analytics (8 tables), blockchain (6 tables), billing/Stripe (9 tables), ML/chatbot (6 tables), and honeypot system with connection pooling, parameterized queries, and full-text search
- Testing Infrastructure: Built 20+ test suites using Vitest, Playwright E2E, Chai/Sinon with security-specific tests (CSP, WAF attack simulation, CORS), API validation (all endpoints), compression testing (12 algorithms), cryptographic workflow validation (100% success rate on 28 algorithms), and CI/CD automation with npm audit and ESLint security rules
- DevOps & Automation: Implemented cron automation with 5-minute health checks (all endpoints), analytics aggregation, dynamic blocklist generation, structured JSON logging with tracing, 10MB file rotation, security event alerting, and monitoring with latency percentiles (p50/p95/p99), error tracking, and 30-day uptime retention
- Geographic Visualization & i18n: Built 3D globe visualization using Cesium.js/Leaflet.js for real-time geographic threat mapping and visitor analytics with TopoJSON world atlas integration, dynamic country highlighting, and threat heat mapping. Implemented internationalization framework with translations.js for multi-language support and alert notification system with email delivery for security events
- GDPR Dual-Track Analytics: Built cookie consent manager with View Transitions API, Web Animations API, secure __Host- cookies, and dual-track analytics system. Anonymous track (no consent): pageviews, anonymized visitor hashes, device types. Consented track: session duration, bounce rate, scroll depth, click tracking, error monitoring, performance metrics with consent_given database filtering for strict GDPR compliance
- PQC Challenge Mode: Built gamified cryptography learning platform with 40 progressive challenges across 4 difficulty tiers teaching post-quantum concepts through terminal-based exercises. Implemented 50+ command types (ML-KEM encapsulation, digital signatures, ZK proofs, quad-layer encryption, homomorphic operations, blockchain mining, VQE optimization) with challenge engine, progress tracking, hint system, and WebGPU-accelerated terminal interface
- Quantum Entanglement Sandbox: Developed Three.js particle physics playground with 5,000 interactive particles simulating quantum entanglement behavior. Built physics engine with configurable gravity, entanglement strength, and chaos factors. Implemented WebGPU acceleration with WebGL fallback, post-processing (bloom, motion blur), adaptive quality scaling at 60 FPS, multiple interaction modes (attract, repel, orbit, chaos), and real-time statistics display
Lead Middleware Engineer
- Global Enterprise Middleware Leadership: Lead middleware engineer responsible for middleware technologies across the RGA enterprise infrastructure spanning 7 countries, providing architecture direction and technical oversight for mission-critical middleware systems
- Root Cause Analysis & Escalation Support: Top-level support specialist for complex, high-priority enterprise system failures, conducting deep technical analysis and resolution of issues that exceed standard support capabilities, often outperforming vendor technical teams
- Monitoring & Observability Platform: Datadog implementation and configuration for application performance monitoring, infrastructure observability, and real-time alerting across global enterprise systems
- SharePoint Platform Architecture: Enterprise SharePoint platform development, architecture design, and solution implementation across multiple SharePoint technologies
- Business Intelligence Solutions: SQL Server Analysis Services (SSAS), Reporting Services (SSRS), and PowerPivot implementation and optimization
- CI/CD Pipeline Development: Buildmaster and Jenkins continuous integration/deployment pipeline design and implementation
- Infrastructure Automation Framework: Scripting automation, self-healing monitoring systems, and automated remediation framework development
- Load Balancing & Network Architecture: IIS load balancing architecture design and F5 BIG-IP implementation for high-performance web infrastructure
- Enterprise Project Management Solutions: Project Server architecture design, project management methodology implementation, and enterprise collaboration solutions
- High Availability Architecture: Mission-critical high availability and disaster recovery architecture design, implementation, and optimization
- Cross-Departmental Technology Leadership: Administration and technical oversight of specialized enterprise applications and platforms outside standard departmental scope, ensuring operational continuity and expert support for business-critical systems requiring technical expertise
Lead Web & Frameworks Engineer
- Contracted Engineering Leadership: Same responsibilities as Lead Middleware Engineer position above, providing continuity of enterprise middleware engineering expertise during organizational transition period
Systems Engineer
- SharePoint Platform Architecture: SharePoint platform architecture and implementation across multiple SharePoint technologies, providing solution design and deployment
- Application Delivery Infrastructure: IIS and Tomcat load balancing architecture design and implementation for high-performance application delivery infrastructure
- High Availability Architecture: High availability and disaster recovery architecture design, implementation, and optimization for business continuity
- Citrix NetScaler Administration: NetScaler application delivery controller management and optimization for enterprise traffic management
- Database Administration: SQL Server database management, high availability groups implementation, SSRS reporting services, and SSAS analytics services administration
- Infrastructure Project Management: Project coordination and VMWare virtualization infrastructure development and optimization
- Custom Solutions Development: Business-driven custom application development and solution architecture design
- Cross-Platform Integration Architecture: Multi-platform system integration and application architecture design across diverse technology stacks
Senior Business Systems Administrator
- Business Systems Administration: Application management including CRM systems, SharePoint collaboration platforms, WebSphere application server administration, SQL Server database systems, healthcare applications (Facets), ERP systems (Dynamics NAV), business intelligence platforms (PowerPivot), and configuration management (SCCM)
- Infrastructure Architecture: Network infrastructure design, email systems management, database platform administration, web infrastructure development, and document management systems implementation
- High-Availability Clustering & Virtualization Platform: SQL Server clustering implementation, Microsoft clustering technologies, VMWare virtualization platform management, and backup infrastructure (Commvault) administration and optimization
- Data Center Architecture & Operations Management: Data center infrastructure design, implementation, and operational optimization
- Technical Team Leadership & Mentoring: Technical team leadership, mentoring junior staff, knowledge transfer facilitation, and cross-functional team collaboration
- Solutions Architecture & Project Leadership: Business-driven solution design, custom application development, and technical project management for critical business requirements
Director of Operations
- Operations Leadership: Executive leadership managing 4 senior managers and 15 technical staff across operations and service delivery teams
- Corporate Network Architecture & Design: Design, development, and implementation of corporate network environments hosted with AMP, encompassing shared, dedicated, and virtual infrastructure architectures
- Hosted Services Platform: Design and deployment of hosted services including Exchange email platforms, CRM business systems, and SharePoint collaboration environments for multiple client organizations
- Large-Scale Network Operations: Hands-on network management and operations oversight for multiple companies serving 75,000+ users across diverse business environments
- Virtualization Platform: VMWare and Hyper-V virtualization platform implementation, administration, and operational optimization
- Data Center Operations & Infrastructure Design: Data center infrastructure design, implementation, and operational management
- Technical Leadership & Development: Technical team leadership, mentoring technical staff, and facilitating professional development across operations teams
IT Manager
- Multi-Enterprise Infrastructure Management: Administered IT infrastructure across 5 subsidiary companies and 3 financial institutions, ensuring operational continuity and compliance with banking regulations
- Legacy System Modernization: Architected and executed Windows NT 4.0 to Windows Server 2000/2003 migration strategy, including domain restructuring and Active Directory implementation
- Exchange Server Migration: Led Exchange Server 5.5 to Exchange 2000 migration project, including mailbox migration, public folder restructuring, and connector configuration for seamless email operations
- Custom Software Development: Designed and developed proprietary data replication solution enabling real-time synchronization between on-premises and off-site electronic document storage systems
- Citrix Infrastructure: Designed and administered Citrix Presentation Server 4.5 farm architecture, optimizing application delivery and user experience across distributed locations
- Network Operations: Performed network administration including routing protocols, VLAN configuration, firewall management, and network security policy enforcement
- VPN Infrastructure: Configured and maintained multiple IPSec VPN tunnels for secure inter-company connectivity and remote access solutions
- VoIP Implementation: Deployed and administered Asterisk-based VoIP telephony system and managed Encompass loan origination server infrastructure
- Technical Leadership: Provided technical mentorship and guidance to IT team members while coordinating cross-functional projects and technical initiatives
IT Manager
- Technical Team Leadership: Led and mentored technical engineering staff across multiple client infrastructures and project deliverables
- Metropolitan Network Architecture: Architected, designed, and implemented LAN/WAN infrastructure solutions across the St. Louis metropolitan area for diverse clients
- Software Development: Developed proprietary data replication software for real-time on-site/off-site electronic storage synchronization and engineered custom PBX logging and audit reporting systems for telecommunications compliance
- Event Infrastructure: Designed and deployed temporary network infrastructure and server systems for St. Louis Cardinals sporting events, ensuring reliable connectivity for critical operations
- Multi-Company Security Architecture: Architected and implemented secure IPSec VPN network infrastructure spanning 22 companies, providing encrypted inter-organizational connectivity and secure remote access
- Multi-Client Network Operations: Performed network administration and infrastructure management across multiple client organizations with diverse technology stacks
- Technical Project Leadership: Led technical project management initiatives and implemented network security frameworks across client infrastructures
- Network Operations Center Management: Managed NOC operations including 24x7 monitoring, incident response, and technical escalation procedures for critical infrastructure
Hosting TAC Engineer
- Zero-Downtime Infrastructure Migration: Orchestrated seamless migration of hosted servers from legacy Intel infrastructure to SAVVIS managed network architecture, ensuring continuous service availability and business continuity
- Global Infrastructure Operations: Provided 24x7 monitoring, troubleshooting, and root cause analysis for multi-regional hosting operations spanning US, UK, and Japan data centers with incident management
- Server Infrastructure Management: Administered mission-critical hosted server environments with performance optimization, capacity planning, and proactive maintenance protocols
Senior Systems Engineer / Project Manager
- Municipal IT Infrastructure Transformation: Led Microsoft network implementation project encompassing University City Hall, Police Department, and Fire Department facilities, modernizing critical municipal IT infrastructure
- Cross-Platform Infrastructure Migration: Architected and executed complex migration from Novell NetWare environment to Microsoft Active Directory infrastructure while ensuring data preservation and minimal service disruption
- Hybrid Network Architecture Design: Designed and implemented hybrid Ethernet/Fiber optic network infrastructure for municipal facilities, incorporating redundant connectivity and high-availability design principles
- Multi-Platform System Administration: Administered heterogeneous server environment including Windows NT, Novell NetWare, GroupWise messaging, Exchange Server, SQL Server databases, and Terminal Services across municipal infrastructure
- Technical Support: Delivered 24x7 on-call technical support encompassing server, network, and desktop systems with helpdesk coverage across all support tiers (levels 1-3)
Senior Consultant
- Infrastructure Administration: Administered complex LAN/WAN network environments, Windows NT/Novell NetWare server platforms, Exchange messaging systems, and backup operations utilizing Backup Exec and ArcServe data protection solutions
- Hardware Deployment: Managed hardware deployment including server installations, desktop workstation provisioning, and networked printer infrastructure with standardized configuration management protocols
- Multi-Tier Technical Support Operations: Delivered technical support across desktop, server, and network infrastructure with full helpdesk coverage (levels 1-3) and developed call center web portal for support ticket management
IT Manager / Senior Developer
- Network Operations Center Leadership: Directed Phoenix Networks' 20-person NOC and systems engineering teams, providing technical oversight for 10,000+ DSL subscribers and ensuring 24x7 service availability
- Back-Office Solution Development: Architected and developed back-office management platform and supervised helpdesk call center operations for streamlined customer service delivery
- Telecommunications Infrastructure Engineering: Configured and deployed diverse telecommunications solutions including ISDN, DSL, T1-T3 circuits, routers, firewalls, TCP/IP networking, NAT implementation, and email infrastructure
- Technical Troubleshooting: Provided expert-level troubleshooting for complex client network issues including NIC configuration, router optimization, NAT/DHCP/DNS resolution, hub connectivity, and telecommunications line anomaly analysis
- Server Infrastructure: Maintained server integrity and administered Exchange Server messaging platform ensuring high availability and optimal performance
- Hardware Engineering: Led hardware installation and configuration including network hubs, routers, CAT5 structured cabling, managed switches, dial-up modems, ISDN/DSL equipment, servers, workstations, and peripheral components
- Platform Software Engineering: Deployed and configured software stack including Windows 98/NT/2000, Microsoft Exchange, MS Proxy Server, WinGate, WinRoute, IIS Web Server, Microsoft Office Suite, and PCAnywhere remote access solutions
- Human Resources & Technical Leadership: Managed complete staff lifecycle including recruitment, performance management, technical training program development, and professional development counseling
- Custom Database Application Development: Designed, developed, and implemented back-office solution using Visual Basic 6.0 front-end with SQL Server 7.0, ODBC, Oracle, and Access database back-ends, including staff training and implementation management
Technical Arsenal
Technical expertise spanning post-quantum cryptography, enterprise infrastructure, and modern development technologies
๐ Drag to rotate โข Scroll to zoom โข Hover to highlight
๐ฌ Post-Quantum Cryptography & Security
๐ค AI/ML & Advanced Analytics
โก Systems Programming & Performance
๐ Frontend & 3D Graphics
๐๏ธ Enterprise Infrastructure & Middleware
๐ DevOps & CI/CD
๐พ Database & Data Management
๐ Network & Security
๐ Monitoring & Observability
๐ Business Intelligence
๐ง Compression & Optimization
๐ Leadership & Management
Professional Certifications & Training
Professional certifications across enterprise infrastructure, middleware platforms, and application delivery systems, complemented by ongoing research in post-quantum cryptography and AI/ML development
Enterprise Infrastructure Mastery
Professional certifications
Network & Application Delivery
Application delivery controller and load balancing platform certification
Continuous Professional Development
Commitment to staying current with emerging technologies and industry best practices
Quantum & Cryptographic Research
AI/ML & Modern Development
Open Source Projects
Creator and maintainer of open-source tools and libraries advancing post-quantum cryptography adoption
PQC Binary Format
Creator & MaintainerThe first and only standardized binary format for post-quantum cryptography data interchange. Solves the "Babel Tower problem" where PQC implementations cannot interoperate due to proprietary formatsโa gap that blocked enterprise PQC adoption. The algorithm-agnostic container supports 47 cryptographic algorithms including all NIST FIPS 203/204/205 standards (ML-KEM, ML-DSA, SLH-DSA) plus HQC. Self-describing metadata enables long-term archival: data encrypted today remains decryptable decades later without external documentation. Future-proof crypto-agility allows algorithm migration as quantum threats evolve. Published native bindings across 6 languages (Rust, Python, JavaScript/WASM, Go, C, C++) on all major package registriesโfull cross-language interoperability where data encrypted in one language decrypts seamlessly in another. Positioned for IETF standardization submission.
Published Packages
PQCrypta Proxy
Creator & MaintainerThe only HTTP/3 reverse proxy with integrated Post-Quantum Cryptography TLS. Combines cutting-edge protocols (HTTP/3, QUIC, WebTransport) with hybrid PQC key exchange (X25519MLKEM768, NIST Level 3) in a single production-ready binary with 130 passing tests. Solves the corporate NAT problemโwhere thousands of users share one gateway IPโusing JA3/JA4 TLS fingerprinting to identify individual clients before TLS handshake completes, enabling early blocking of malicious actors. Features multi-dimensional rate limiting with composite keys (IP + JA3 + JWT + Path) and ML-inspired adaptive baseline anomaly detection that learns normal traffic patterns. Single unified UDP listener handles both HTTP/3 and WebTransport sessions. Implements RFC 9218 Priority Hints, 103 Early Hints, request coalescing, six load balancing algorithms with slow start/connection draining, and complete ACME/OCSP automation. Three TLS modes (Terminate, Re-encrypt with mTLS, SNI Passthrough) configurable per-route.
Technology Stack
Connect & Collaborate
Ready to discuss technology solutions, enterprise architecture challenges, or collaborative opportunities
Phone
(636) xxx-xxxxLocation
St Paul, Missouri 63366