Full-stack from the silicon up — secure-element drivers, a Rust microkernel OS, post-quantum transport, SDKs and the UI on top. Thirty years across embedded systems, networking, high-frequency trading, games and the web; five as CTO shipping three generations of Passport hardware and KeyOS, now an open platform for third-party apps. Has run 100+ technical interviews, hires only the top tier and mentors at every level.
Experience
Foundation Devices · Cofounder & Chief Technology Officer
Jul 2021 – present · cofounded 2020
- KeyOS — Designed and built Foundation's open-source Rust microkernel OS (Xous-based; process isolation, message passing) that powers Passport Prime. A third-party security audit of the kernel, cryptography, USB, NFC, QuantumLink and PSBT paths was hardened into KeyOS 1.3.
- Passport Prime (GA May 2026) — Shipped Foundation's third-generation device: Bitcoin hardware wallet, FIDO security key, 2FA and secrets vaults, and 50 GB of encrypted storage on one secure processor, with a dedicated Bluetooth coprocessor isolated from it.
- QuantumLink — Led design and implementation of the post-quantum transport between Passport Prime and the Envoy app: ML-KEM encapsulation with AES-256-GCM, Noise XX/IK/KK session establishment, QuantumLink IDs for endpoint identity. The radio only ever carries ciphertext.
- KeyOS SDK — Led the SDK and
foundation CLI: Nix-based toolchain, templates, hosted simulator, app signing and sideloading, backed on-device by an Allowed Publishers trust model and per-app permissions; agent-ready docs and skills so AI coding agents can build KeyOS apps. First external developer: Cake Wallet (~1M users).
- Internal AI tooling — Built Foundation's internal AI toolchain: agent orchestration wired into issue tracking and engineering workflows.
- Passport Founder's Edition and Gen 2 — Wrote the embedded software for the first two Bitcoin-only devices: secure element drivers, a new UI framework, address verification, PSBT signing and multisig. Gen 2's full-color display drove a complete UI rebuild.
ServiceNow · Senior Staff Software Engineer
Dec 2019 – Jun 2021 · San Diego, CA
- Architectural oversight for the Lists, Forms, Controls and Condition Builder teams.
- now-grid — A new, extensible grid architecture with a plugin model for deep customer customization (JavaScript, Seismic).
- Polaris compatibility — Led the investigation into what to port from the legacy stack to Seismic, and co-built a scanner that flags unsupported functions and components in customer scripts and metadata.
Obelisk · Principal Software Analyst
2018 – 2019 · Boston, MA
- Two generations of firmware for custom ASIC mining chips (C, Linux, Buildroot), plus the miner configuration and monitoring UI and a customer and order portal (TypeScript, React, Redux, Node.js, MariaDB). Doubled as VP of Sales: $25M+ in website revenue and $2M+ in direct sales.
Hudson River Trading · Algorithm Engineer / Analyst
2017 – 2018 · New York, NY
- Designed and built the web-based visualization system for high-frequency trading algorithm performance, P&L and analytics, with developer-authored custom visualizations (TypeScript, React, Redux, HighCharts, Python).
Arista Networks · Senior Software Engineer — Web (2014–17), SDN (2013–14)
2013 – 2017 · Burnaby, BC
- Network analytics UI, from zero lines of code — nanosecond-resolution switch state history with time-travel replay for troubleshooting and post-mortems (React, Redux, Reselect, D3).
- Tap aggregation UI (AngularJS); the internal autotest dashboard used to triage bugs and gate releases; an automatic license activation server (Python, Flask) — co-inventor on US patent application 2017/0357784; SDN features and tests in C++ and Python, including the VMware NSX interconnect.
Schneider Electric · Development Team Lead
2008 – 2013
- Vijeo Design'Air — Architected and built a tablet HMI for iOS and Android in C# on Xamarin with ~80% shared code; led a team of 10 engineers, writers and QA.
- Cloud-based HMI editor prototype with autosave (Node.js, MongoDB); CODESYS soft-PLC integration in C++ and assembly, debugged on-site with the vendor in Kempten, Germany.
Earlier career
- 2008 – 2013
Mind Juice Media, Owner / Developer — 10+ iOS games and apps shipped under my own studio (Objective-C)
- 2006 – 2008
Electronic Arts, Software Engineer III — online backend for EA Sports; Madden NFL 09 Online Leagues (C++, MySQL)
- 2003 – 2006
INDE Electronics, Team Lead — 20+ industrial protocols on VxWorks and pSOS; managed 5+ developers
- 2000 – 2003
Helikon Technologies, Technical Lead — Java PDF rendering engine; MMO server architecture, 10+ person team
- 1999 – 2000
DG Systems, Senior Software Engineer — audio waveform editor and MPEG audio analysis tools (C++, MFC)
- 1993 – 1999
Delta Controls, Senior Software Engineer — embedded C/C++: protocols, drivers, embedded database, visual language
Skills, education & patent
- Languages
- Rust, C/C++, TypeScript/JavaScript, Python, Go, C#, Java, Objective-C
- Systems
- Xous microkernel, VxWorks/pSOS, device drivers, secure elements, BLE, USB, NFC, Buildroot, Nix
- Security
- ML-KEM and post-quantum design, Noise, AES-GCM, ChaCha20-Poly1305, FIDO/passkeys, PSBT, multisig
- Web & product
- React, Redux, D3, Node.js, HighCharts, UX design, 2D graphics and games
- Education
- University of British Columbia, B.Sc. Computer Science (distributed systems, advanced graphics, compilers)
- Patent
- Co-inventor, US 2017/0357784, automatic license activation for network switches (Arista Networks)