Experience

SSH Communications Security

• Finland
• Computer and Network Security
• 300 - 400 Employee

• Systems Architect

  • Jan 2019 - Present

  Hands on Code Systems Architect for a Next Generation Data in Transit Encryption System. NQX - a Distributed Centralized Managed Observable Post Quantum Key Management and Ethernet frame Encryption System on Off the Shelf Commodity Hardware. Tools and technologies; Golang, Python, C++, DPDK, PostgreSQL, OpenTelemetry, Red/Black separation, Post Quantum key distribution, IPsec, IKEv2, Responsibilities; System design, implementation and validation work on all but UI components. Helping on presales, postsales and operations troubleshooting. Show less



Aiven

• Finland
• Software Development
• 300 - 400 Employee

• Staff Engineer

  • Nov 2018 - Jan 2019

  Starting Nov 12th. Starting Nov 12th.



Inside Secure

• Computer and Network Security
• 1 - 100 Employee

• Sr. Software Architect

  • Mar 2018 - Nov 2018

  Hands on work on design, implementation, maintenance, and support of Inside Secure security software toolkits. Keywords: TLS, OpenSSL compatibility, FIPS 140-2. Hands on work on design, implementation, maintenance, and support of Inside Secure security software toolkits. Keywords: TLS, OpenSSL compatibility, FIPS 140-2.



SSH Communications Security

• Finland
• Computer and Network Security
• 300 - 400 Employee

• Chief Architect

  • May 2015 - Feb 2018

  On this position my goal is to look into the future, act as a mentor, contribute on cryptographically secure solutions, help on distributed and resilient systems design, and make sure we're delivering high quality solutions in time. During this period I’ve continued with the earlier solutions (see below), and participated on adding a new product on the portfolioProducts worked:SSH IAM “PrivX”: Distributed solution for remote terminal and desktop access, and for related access workflows. My role here has involved product placement, design, and implementation of user authentication services, and overall system level work. Additionally I performed while-box penetration testing and mentoring my peers on various aspects of the product.“SSH Universal Key Manager”: Solution for SSH key discovery and management on large heterogenous computer networks. PAM: “SSH CryptoAuditor”: Transparent jump server for audited SSH and RDP connections. The system allows 3rd party restricted shared account access.In lesser extent I’ve contributed on design of a 4th generation high performance IP network security appliance, on a PoC of a secure mobile phone, and maintenance of the Tectia Client/Server product (SSH client and server).Phrases: Network stacks – Packet Filters – L3 - L2 – SecSH – TLS – RDP – Auditing – Intrusion/Data Leak detection/prevention – High performance computing – Systems performance - High Availability – Load Balancing – Multi-threaded systems – Distributed computing – Fault toleranse - Virtualization – Python, Django, SQL databases, C, IAM, DaaS, SaaS, Information Security, PCI/DSS, Cloud, Authentication, Authorization, Go, Python, C. Show less

• Interim CTO

  • Jan 2015 - May 2015

  Acting Chief Technology Officer (and VP Engineering) for a defined short period.

• Sr. Software Architect

  • Nov 2011 - Jan 2015

  Computer network security. CryptoAuditor product. System design and data-plane implementation work. Hardware - Operating systems - FreeBSD - Network stacks - OpenBSD PF packet filter support for L2 selectors - Routing - Bridging - SSH protocol - TLS - RDP - Auditing - Intrusion/Data Leak detection/prevention - High performance computing - High Availability - Load Balancing - Multi-threaded systems - Virtualization.I've also contributed to SSH Universal Key Manager product on areas of overall design, system architecture (areas of scalability, survivability, and external integrations), security reviews, and SQL database query optimization. Also worked on design level some other products and projects that are not public at the time being - Unix variants - Python - Redis - Distributed Systems. Show less



Clausal Computing

• Software Development

• Sr. Systems Architect

  • Nov 2011 - Dec 2016

  Working in various roles on computer and network security area, as a long term consultant sitting on SSH Communications Security premises and being paid by Clausal Computing Oy. Resigned from this position to become full time employee of SSH Communications Security after five years of consulting. For details, see overlapping entries from SSH Communications Security.

• Sr. Systems Architect

  • May 2007 - Nov 2011

  Research and implementation of an unsupervised learning of Semantic network from Natural language, and Automatic memory management (aka Garbage collection) on large (Terabyte) heaps, and Patenting.Phrases: Artificial Intelligence – NLP – Autonomous learning – Big Data – Information Extraction – Programming Languages – Runtime Environments – Automatic Memory Management – Scalability – Multiprocessing – Large and Efficient Systems – IT Administration.



Stonesoft Oyj

• Systems Architect

  • Mar 2007 - May 2007

  Architect for the StoneGate security product family. A short term position which I terminated during trial period. Architect for the StoneGate security product family. A short term position which I terminated during trial period.



Codento

• Finland
• Software Development
• 1 - 100 Employee

• Partner

  • Jun 2006 - Mar 2007

  Certified Coding Partner #0 I was involved on customer projects on computer/networking security area. IPsec - Platform support - Cryptographic libraries. Certified Coding Partner #0 I was involved on customer projects on computer/networking security area. IPsec - Platform support - Cryptographic libraries.



Thales Digital Identity and Security (ex Gemalto)

• France
• IT Services and IT Consulting
• 700 & Above Employee

• Chief Engineer

  • Nov 2003 - Aug 2006

  Architect and developer for IP network security Platform "QuickSec". Project manager for several successful product releases. Site manager for a R&D site of 15 employees. Network processors - Octeon - SafeXcel - Data-plane - Inline IPS - Firewalls - Application proxies - Toolkit sales - Control plane - Security policy management - Key agreement (IKE, EAP) - Extreme Programming. The SafeNet QuickSec toolkit, today a part of Inside Secure product portfolio, is a building block on many firewall and remote access client platforms in use today. Show less



SSH Communications Security

• Finland
• Computer and Network Security
• 300 - 400 Employee

• Chief Engineer

  • Mar 1997 - Nov 2003

  Requirements management, systems design, project management, and implementation work on various projects; Including, but not limited to, IPsec toolkits and PKI platforms. Member of board between 1997 and 2000. Public Key Infrastructures - SSH Certifier - Certificate Lifecycle Management (RFC4210) - IPsec toolkits - SSH protocol implementation - Cryptography Requirements management, systems design, project management, and implementation work on various projects; Including, but not limited to, IPsec toolkits and PKI platforms. Member of board between 1997 and 2000. Public Key Infrastructures - SSH Certifier - Certificate Lifecycle Management (RFC4210) - IPsec toolkits - SSH protocol implementation - Cryptography



Trimble Tekla

• Finland
• Software Development
• 100 - 200 Employee

• Software Engineer

  • Jun 1993 - 1997

  Classified Classified



Helsinki University of Technology

• Research Assistant

  • 1989 - 1993

  Participating a research project on EDI messaging (Shosta), and most of a time a part time UNIX and Ethernet/IP network administrator at the computer science lab (Arppe). Participating a research project on EDI messaging (Shosta), and most of a time a part time UNIX and Ethernet/IP network administrator at the computer science lab (Arppe).