01
Hardware-rooted secrets
Architected the Secure Secret Storage Solution (S4), binding secret access to workload identity with vTPM-backed non-extractable keys, HSM-protected storage, and audited air-gapped provisioning.
New York · Lead Engineer, Platform Engineering
Security engineering.
Secure infrastructure.
Built from first principles.
I design and build security-critical systems spanning zero trust, cryptographic key management, trusted computing, cloud platforms, and AI infrastructure.
What I do
Build the foundations other teams depend on.
My work spans zero-to-one security architecture, hands-on implementation, production operations, and technical leadership. At Bullish, I progressed through Technical Services, Infrastructure, Secure Infrastructure, and Platform Engineering—expanding from exchange operations into platform security, hardware-rooted trust, cryptographic systems, and secure AI infrastructure.
Selected impact
Security architecture. Platform depth. Practical AI.
Systems and controls built to withstand scrutiny, reduce risk, and become dependable parts of how the business operates.
02
Organization-wide zero trust
Built and operated zero-trust access architecture, managing Okta and Zscaler while engineering the authentication and always-on VPN components used across the organization.
03
PKI, MPC & key lifecycle
Defined and implemented cryptographic key-lifecycle architecture and controls for security-critical custody and exchange workloads.
04
Security by design
Led threat modeling and security design reviews, embedded secrets, container, and code scanning into CI/CD, and partnered with internal and external penetration testers through remediation.
05
Secure AI infrastructure
Productionized an organization-wide AI gateway used by hundreds of people, adding identity, observability, reliability, model routing, governance, and fine-grained cost attribution.
06
Cloud product debugging
Worked directly with Google Cloud engineers to diagnose and help remediate Confidential Compute live-migration defects involving memory synchronization and vTPM state.
Experience
A career across product, platform, and security.
Bullish
Lead Engineer, Platform Engineering
Platform Security & Secure Infrastructure. Progressed through Technical Services, Infrastructure, Secure Infrastructure, and Platform Engineering.
Zero trust, platform security, and trusted computing
S4 secrets architecture, HSM/vTPM, and PKI/MPC key lifecycle
Threat modeling, secure delivery, and cross-functional security leadership
Enterprise AI infrastructure and developer tooling
Voice
Senior Engineer, DevOps
Led DevOps during the founding of a blockchain-based social platform, owning platform infrastructure, blockchain operations, delivery systems, and production operations.
One Zero Capital
Senior Engineer, DevOps / Portfolio Technical Lead
Built products, security systems, and highly available infrastructure across TheNumber, PhoenixABS, Better Mortgage, and Climb Credit.
TheNumberPhoenixABSBetter MortgageClimb Credit
Bilancio Management
Lead Engineer
Led development of native iOS and web applications designed to improve the customer experience.
Open source
Production problems, upstream fixes.
I contribute fixes where security, platform engineering, and AI infrastructure meet the real world—from cloud providers and ML build systems to gateways and infrastructure tooling.
MLXMerged
Correct Python selection during CMake builds
Prevented pip installations from producing native extensions for the wrong Python interpreter.
View contributionGoogle Cloud Magic ModulesMerged
Add missing confidential-compute disk feature
Added a missing Compute Engine guest OS feature value used by the Terraform provider.
View contributionGoogle Cloud ScionMerged
Fix container-image builds without a platform flag
Corrected strict-shell handling of an empty platform argument array.
View contributionClaude SquadMerged
Add Gemini assistant support
Extended the multi-agent terminal workflow to detect and operate Google's Gemini CLI.
View contributionLiteLLMSubmitted
Support Datadog LLM observability over Unix sockets
Added a production-driven transport path for Datadog Operator environments.
View contributionDatadog Terraform ProviderSubmitted
Handle computed synthetic-test locations
Fixed plan-time validation when location values are unknown until apply.
View contributionAbout
Curiosity with operational discipline.
I am most energized by work without a ready-made playbook: research the system, understand the failure modes, prototype carefully, and turn the result into something people can trust.
Security has been a throughline throughout my career—from high-security authentication and HIPAA infrastructure to zero trust, HSM/vTPM-backed secrets, PKI/MPC, confidential computing, and secure AI platforms. I stay hands-on while helping security teams, engineers, and executives reason clearly about difficult technical choices.
Industry engagement
Google Cloud AI Live + Labs & Executive Infrastructure Summit
Selected attendee in 2026 for technical dialogue on ultra-low-latency cloud architecture, kernel-bypass networking, virtualization jitter, and precision time synchronization.
Education
Purchase College, SUNY
B.A., Liberal Arts and Sciences / Liberal Studies
Babson College
Entrepreneurship and Business Management
Outside work
Community, movement, and curiosity
I’m a husband, proud uncle and godfather, longtime meditation practitioner, and lifelong snowboarder and skateboarder. I organize New York City’s Onewheel community, enjoy the occasional security challenge, and keep a steady stream of side projects in motion.
Contact