About
I’m a staff-level engineer working on security infrastructure — identity, authorization, and privileged access — at cloud scale. Certificate authorities, policy control planes, authenticating proxies, session containment, and the operational reality of running all of that across a global fleet.
Before that: compilers and high-performance backend systems at Bing, and language tooling at JetBrains.
I write here about design decisions and failure modes in this class of system. Everything here is my own reasoning about the problem space, not a description of any employer’s internal systems.