• Extensive technical experience.
• Excellent software architect, as displayed in many projects led.
• Dynamic and creative software engineering manager.
• Proven researcher, as displayed in publication, with Ph.D.

Engineering Manager, Centrify Corporation, April 2011 to Present

• Lead and manage 7 people team that develops Centrify Direct Control on MacOS, including smart card feature.
• Audit and enhance security features of the product.
• Work with internal groups (Product Management, Quality Assurance, other engineering groups) and external companies.

• Manage the company's core engineering team.
• As an architect, lead all the software development projects in the company's core product, Policy Framework: enhancing its functionality, extensibility, performance, scalability, and portability. Added cryptographic key management capability to Policy Framework.
• Responsible for software specification, design, and architecture documents.
• Oversee the product's entire lifecycle by cooperating with Product Management, Quality Assurance, Professional Service, and Support groups.
• Introduce best practices and efficient work culture to the engineering group, e.g., code review, productive meetings, open discussions, and automated testing.

• Designed, developed, and marketed an assisting device for children with autism, which later became Tap To Talk. The device is based on Linux mobile game console, GP2X.
  http://www.taptotalk.com/
• Developed smart card based solution, including a large-scale issuance system, to protect amusement machines from fraud. Sold it to two major vendors in Japan.
• As founder and primary developer, developed KeePass Password Manager for J2ME mobile phones, and a web based service to transfer keys.
  http://sourceforge.net/projects/keepassj2me/

• Achieved FIPS 140 certification for Arcot's core cryptographic module.
• Developed core cryptographic module. Solved its scalability problem which the company had not been able to fix for several years.
• Designed and developed a web based smart card management system.

• Designed and led a 15 people team to develop UNIX middleware / application product which involved smart cards, public key infrastructure, UI, and operating systems.
• Designed and developed web based smart card management systems for Department of Homeland Security (DHS), National Aeronautics and Space Administration (NASA), and Department of Veterans Affairs (VA).
• Led development of user authentication product on BREW platform for a large Japanese telecommunication company.
• Developed security products that involved smart card, hardware security modules, public key interface, and biometrics.

• Developed Open Card Framework, Sun's smart card middleware.
• Worked with Radia Perlman to develop a secure payment mechanism.

• Improved security of Kerberos client by integrating smart cards.
• Provided single sign-on and configurability of authentication mechanism on Windows NT.
• Developed the first PAM-Kerberos V5 module.
• Developed filesystem to ease access to smart cards on OpenBSD and Windows NT.
• Developed smart card-secured cryptographic file system.
• Developed secure operating system bootstrap with smart cards.
• Developed framework to connect smart cards to the Internet.

• Improved security of Kerberos server by integrating secure coprocessor.

1

"Smartcard Integration with Kerberos V5," USENIX Workshop on Smartcard, May 1999.

2

"Pluggable Authentication Module for Windows NT," In Proceedings of 2nd USENIX Windows NT Symposium, August 1998.

3

"SCFS: A UNIX Filesystem for Smartcards," USENIX Workshop on Smartcard, May 1999.

4

"Practical Approach Toward Secure Operating Systems with Smartcards," Workshop On Hot Topics in Operating Systems, March 1999, Rio Rico. http://www.citi.umich.edu/u/itoi/hotos/hotos.ps

5

"Smartcard Secured Cryptographic File System," USENIX Security, 2001.

6

PAM-Kerberos 5 Module. Used in Public.

7

"Secure Coprocessor Integration with Kerberos V5," USENIX Security Symposium, August. 2000.

8

"Personal Secure Booting," 7th Australian Conference in Information Security and Privacy, 2001.

9

"Secure Internet Smartcard," Java Card Workshop, Canes, France, September, 2000.

Communication Skills: