- Leading the charter for building the next generation of Azure Container Networking (CNI)
- Actively working on building an observability platform for the Azure Container Networking Interface (CNI) implemented for Azure Kubernetes Service, using eBPF written in Rust and Go.
- Working on a new deployment model for the Azure NetworkPolicy manager to improve performance when scaling to 1000s of Kubernetes nodes and reduce system resource utilization.
- Working with a cross functional team on implementing WASI (Webassembly Service Interface) component implementations for logging and MongoDB, written in Rust.
- Hosting weekly workshops to train members of the team on newer technologies like eBPF and languages like Rust.

- Sole person responsible for designing, architecting and authoring Orkestra, for the fine-grained release orchestration and lifecycle management of groups of helm applications and their dependencies.
- Improved time to deployment for 5G network functions by 2x, as compared to the existing tools, using DAG based workflows.
- Successfully, leveraged popular open-source, CNCF projects like Argo (CD, Rollouts and Workflows), FluxCD GitOps Toolkit including FluxCD and helm-controller, Chartmuseum , Helm and Keptn to build Orkestra and its plugin ecosystem.
- Responsible for evangelizing the project both internally, within the Microsoft Azure organization and externally, to the CNCF Telco User Group and partners.
- Promoted collaboration on the open-source project by inviting both internal and external contributors to work on the project.
- Working towards donating Orkestra to the CNCF.

For more info on Orkestra visit https://github.com/Azure/Orkestra

- Designing and implementing a next-gen, fully automated, zero-touch cloud-native release orchestrator for deploying 5G applications on Kubernetes, using open-source technologies.

• Working on enabling the 5G core services platform, using Kubernetes and Istio service mesh, with a core focus on networking.
• Leveraging open-source security components like Istio mutual TLS, Cert Manager, Hashicorp Vault and Kubernetes security constructs, to improve the security stance of applications deployed on the cluster.
• Developing a Cloud Native distributed packet capture utility on Kubernetes, capable of capturing traffic across all replicas of a Deployment. 
 • Collaborating with upstream communities and contributing to multiple open-source projects like Envoy, Kubernetes, Istio, kiali, CertManager, oapi-codegen, and various other OSS packages.
• Designing and building Kubernetes operators and custom controllers, written in Go, to implement platform features, improve application workflow and enhance platform operations.
• Additional responsibilities include working with the internal 3GPP specifications team, to architect and design cloud-native implementations that satis

• Showed initiative by evaluating, performance testing and adopting the Istio service-mesh, in the OLP managed Kubernetes clusters.
• Leading the cross-team, security guild to enable end-to-end security using Istio service-mesh enforced mutual TLS (mTLS), across all services in the OLP clusters.
• Communicate and collaborate with the open-source Istio community to work on issue resolutions and provide feedback on the service mesh components.
• Created multiple security packages and a CLI tool to validate SAML documents, interact with the SSO, KMS and PKI infrastructures used widely across the organization, written in Go.
• Daily responsibilities include creating, deploying and managing AWS EC2, IAM, S3 resources and Kubernetes resources and add-ons for multi-region, multi-cluster deployments using custom Python tooling, Puppet, Terraform and Helm.
• Working on automation and continuous integration processes with Gerrit and Jenkins CI and recently Gitlab CI.

Language(s) - Go, Python, B

• Project lead for infrastructure projects including the Control Plane and Security Services Management Plane.
• Lead a team of four developers using Agile (Kanban) SDLC process including sprint planning, daily standups, presentations to management, code reviews, and system testing.
• Responsible for preparing design specification documents, using tools like Confluence, PlantUML, Microsoft Visio.
• Initiate and lead system integration activities, to find and address issues, to ensure robust software releases.
• Direct efforts to specify requirements, develop program schedule, select technologies, and prioritize development. 
• Implemented an API gateway to route requests, from clients, to downstream services.
• Delivered over twenty microservices interconnected via gRPC, Apache Kafka and REST, using Docker.
• Developed a Python SDK, for DevOps professional, to deploy and manage security services on the SDS infrastructure.
• Reduced developer time by streamlining the development of micr

Developed and supported the core datapath layer and packet processing modules on the Cavium Octeon II/III MIPS64 processor, critical to the functioning of the Oracle Session border controllers (SBCs).
• Lead an effort to design and develop a test framework, in C++11 to facilitate Test Driven Development.
o Initiate and lead weekly meetings with the team and management, to present current progress, get critical feedback
and plan future strategies for the project.
o Organize daily team meetings for prioritizing and managing project timelines.
• Assessed the performance of the Cavium Octeon III MIPS64 processor on the Octeon 78XX Evaluation Board (EVB).
• Successfully upgraded the SBC to use a 78XX Octeon III processor from the previous generation 68XX Octeon II
processor. 
• Configured the PKI, FPA and PKO hardware co-processors on the 78XX Octeon III MIPS64 processor.
• Maintained layer 2 (ethernet) functionality on the host processor and the Cavium Octeon II/III MIPS64 processor.
• Pro

• Implemented an alarm response, feedback system for nurses at the Hospital of the University of Pennsylvania in Objective C running on the Apple iPad platform as part of the “Smart Alarms” study carried out by PRECISE lab.

• Developed the AllazoEngineTM to predict medication adherence behavior using machine learning. 
• Successfully deployed patient medical information database using MongoDB’s pymongo library.

- Created functional and design specifications for the Universal Session Border Controller (USBC) software.
- Triaged and fixed software defects related to SIP, RTP, RTCP on single and multi-slot products. 
- Gained expertise in LINUX kernel development and upgrading, to support USBC on commercial off the shelf (COTS) platforms and Virtual Machines (VMWare).

Senior Software Engineer - Azure Networking

A RESTful API server for vegeta, a load testing tool written in Go.

Vegeta is a versatile HTTP load testing tool built out of a need to drill HTTP services with a constant request rate. The vegeta library is written in Go, which makes it i

A RESTful API server for vegeta, a load testing tool written in Go.

Envoy access log messages are packed with a lot of useful information but in an unstructured log format. Without prior context, or even with context it can get cumbersome to visually inspect these log messages to extract useful information.

Parse default envoy (and istio-proxy) access logs like a champ with engarde and jq

Golang client for redislabs' ReJSON module with support for multilple redis clients (redigo, go-redis)

- Designed and deployed a web application using Socket.io, AngularJS, NodeJS and ExpressJS.
- The webapp allows for playback of remote audio files, internet radio and also browse reddit using reddit.js library REST APIs.

GITHUB link - http

MEAN stack web application

- Modeled, designed, optimized, verified, implemented, and validated a Pacemaker using an AVR Butterfly Board, designed on the guidelines presented by the SCC. 
- Carried out modeling and verification in UPPAAL.

Embedded Software for Life Critical Applications

- Developed a haptic belt for the blind, utilizing depth sensor array (and OpenNI) and integrated GPS module deployed on a raspberry pi microcontroller.
- Gained hands on experience in designing and developing a real time embedded network s

Real Time Embedded Systems

- Developed an HTML website to host personal CV as part of the university coursework.
- Developed an Android Application using Adobe Dreamweaver, Mobile jQuery for the field of investment banking as part of the university coursework.

HTML and Web Development Projects

- Implemented neighbor discovery using single hop UDP broadcast and link-state and distance vector protocols for routing on the NS3 platform. 
- Incrementally implemented path vector protocol, performance vector routing and incremental Djik

Networked Systems

- Programmed an interactive multiplayer game of ‘Tic-Tac-Toe’ in python utilizing the algorithm presented by XKCD in http://xkcd.com/832/.
- Developed and implemented a game of ‘Evil Hang-man’ using python data structures and file I/O routi

Python Projects

-Interleaved Textual Data into Medical Images using LSB insertion method and tested the performance of BCG and Reed-Solomon encoding on varying levels of salt-pepper noise.
-Developed and implemented a 4-Channel Octave Filter bank for audio

MATLAB Projects

- Developed a tracking device that traces a moving source of light while constantly reflecting the light towards a stationary solar panel, using an ATMega micro-controller.
- Achieved an efficient and cost effective design using cheap elect

Light tracking mirror system - (IEEE Annual Student Day, UAE Section)

- Designed a line following robot that traces a dark line on a white backdrop, autonomously without external interference, using LEDs, LDR sensors, DC motors and ATmega16 micro-controller.
- Successfully maneuvered through varying degrees o

Nitish Malhotra

Senior Software Engineer - Azure Networking