Security infrastructure and PKI at production scale
Leading foundational cryptography services and partnering across engineering teams on secure system design.
Security · Systems · Leadership
Security engineering leader and systems researcher.
I work at the intersection of security engineering, distributed systems, and technical leadership. I build and lead work on foundational security systems, including identity, cryptography, PKI, and secure infrastructure at scale.
Currently leading the Cryptography Services team at Netflix. Previously a researcher at ETH Zurich.
My research focused on data ownership, encrypted data processing, and cryptographic authorization across security, distributed systems, and networking.
Focus
Identity, PKI, cryptography, foundational security platforms, and secure systems design.
Building teams, developing engineers, setting technical direction, and connecting security strategy to implementation.
Encrypted data processing, cryptographic authorization, distributed systems, and data ownership.
Selected work
Leading foundational cryptography services and partnering across engineering teams on secure system design.
Scalable, real-time analytics over encrypted time-series data with cryptographic access control.
Decentralized authorization and access control for encrypted data streams without intermediary trust entities.
Practical encrypted data processing and selective sharing for resource-constrained and mobile systems.
Selected publications
OSDI 2021
USENIX Security 2020
NSDI 2020
SenSys 2017
SenSys 2015
SECON 2014