Work

Ideas are cheap. Making them survive contact with reality — that's the craft. These things did.

A curated few, told through the systems themselves — details travel with the full CV.

01 · Security · Embedded

Secure firmware & OTA

The trust chain for a connected device platform: how firmware gets built, signed, delivered and applied — so a fleet in the field can be updated without ever being bricked or compromised.

  • Led the design of the secure update pipeline end to end: image packaging, signing, encryption, versioning and rollback protection.
  • Worked with platform teams on secure boot, OP-TEE integration and partition layout, keeping the application layer compatible with trusted-execution workflows.
  • Built the OTA system with safe-apply logic, recovery modes and staged updates, verified across the main SoC and its companion microcontrollers.
OP-TEESecure bootOTAC++Embedded Linux

02 · IoT · Embedded

Mesh lighting platform

An industrial IoT lighting system: a gateway application that establishes, communicates with and controls a BLE mesh network of luminaires and sensors.

  • Designed and built the gateway application (C++/Qt) and the operator CLI running at the central server.
  • Architected the sensor pipeline to be type-agnostic, so new sensor classes and new industries onboard without core changes.
  • Led the migration to BLE Mesh Profile 1.0.1, improving throughput, reliability and processing capability.
C++QtBLE MeshLinuxCLI tooling

03 · Full-stack · IoT

Device-fleet backend

One project, top to bottom of the stack: a backend controlling a large fleet of battery-powered wireless devices in real time, and the radio-side services it talks to.

  • Built the backend on GraphQL, Prisma and PostgreSQL, improving real-time data handling and control across the fleet.
  • Designed a C++20 prototype for the access-point services on the radio SDK, extending what the devices could do in the field.
  • Led the cross-functional team delivering it, from milestone planning to shipped software.
GraphQLPrismaPostgreSQLC++20BLE

04 · Protocols · Systems

Wireless MAC-layer stacks

Protocol implementation for metropolitan- and regional-area wireless networks (802.16, 802.22): the state machines that let base stations admit, range and talk to subscribers.

  • Designed ranging, network-entry and ARQ entities at the base station, with VHL diagnostic interfaces.
  • Implemented MAC-layer entities and multitone handling across both base- and mobile-station roles.
  • Owned documentation and verification support end-to-end — protocol work is only done when it's provable.
C802.16e802.22UMLDiagnostics

The full comprehensive CV, is shared on request, not published. Contact me