Resume

Professional Profile

Software architect and engineer specializing in systems that bridge applications, services, and physical devices. Experience spans secure device platforms, financial technology, mobile and embedded systems, and distributed services, with particular focus on BLE, NFC, payment terminals, protocol design, deterministic execution models, and secure communication.

Architectural work includes SDK and platform design, device abstraction, command and transaction execution models, APDU and smartcard protocols, EMV processing, transport abstraction, and secure client-to-service communication. Experienced in guiding implementation across globally distributed engineering teams and translating architectural models into practical, maintainable systems.

Areas of Expertise

Device & Platform Architecture BLE device abstraction · NFC credential systems · device lifecycle orchestration · SDK architecture · cross-platform hardware normalization · embedded and mobile integration

Protocol & Secure Communication APDU smartcard communication · DESFire authentication · RSA/AES session protocols · HMAC integrity enforcement · transport security · firmware interaction

Financial & Transaction Systems EMV TLV processing · PCI/DSS transaction pipelines · payment terminal integration · terminal-to-gateway trust boundaries · HSM-backed transaction infrastructure

Execution & System Modeling Deterministic state machines · command and transaction lifecycle modeling · concurrency control · device-boundary serialization · session boundary enforcement

Professional Experience

Allegion PLC — Senior Lead Engineer

Secure Device Platform Architecture 2021 – Present | Remote

Architectural authority for an enterprise SDK ecosystem governing secure BLE device management and NFC-based credential delivery across heterogeneous hardware families.

• Designed and led implementation of an Android NFC credential protocol processor using APDU command handling, mutual authentication, session key derivation, and encrypted messaging aligned with DESFire-based smartcard protocols.
• Collaborated directly with firmware teams to validate protocol behavior, diagnose transport issues, and resolve discrepancies at the hardware/software boundary.
• Defined a canonical BLE device abstraction that normalized architecturally divergent hardware platforms behind a common execution model.
• Architected a transport-agnostic command execution framework enforcing deterministic hardware-boundary serialization and strict single-device concurrency invariants.
• Led consolidation of multiple externally published SDKs and supporting libraries into a unified platform architecture governing command orchestration, lifecycle behavior, and integration patterns.
• Directed architectural execution across globally distributed engineering teams and authored Architecture Decision Records guiding platform evolution.

FreedomPay — Application Architect / Mobile Team Lead

Secure Payment Systems & Device SDKs 2017 – 2021 | Philadelphia, PA

Architected mobile-side EMV transaction systems supporting secure communication between applications, heterogeneous Ingenico payment terminals, and payment-processing infrastructure.

• Designed the deterministic execution model governing the complete card-present transaction lifecycle from terminal activation through cryptogram generation and gateway authorization response.
• Modeled byte-level EMV TLV parsing and terminal command normalization across divergent payment-terminal firmware implementations.
• Abstracted BLE and TCP/IP transport differences behind a unified SDK interface, isolating transaction workflows from terminal-specific communication details.
• Defined terminal-to-gateway trust boundaries and secure propagation of encrypted card data into HSM-backed payment infrastructure.
• Led technical coordination for PCI/DSS certification activities with a third-party assessor, validating end-to-end transaction integrity across device, application, and backend boundaries.

AT&T Digital Life / DirecTV — Principal Engineer

Embedded IoT & Device Systems 2014 – 2017 | Atlanta, GA

Architected Android-based control systems coordinating residential security sensors, cameras, automation devices, and cloud services.

• Architected an embedded Android control platform coordinating real-time interaction across wireless sensors, security hardware, and distributed backend services.
• Designed device orchestration and state-management models governing control workflows across heterogeneous subsystems.
• Engineered communication layers supporting reliable, low-latency interaction between local hardware and remote services.
• Led a greenfield redesign of the control platform following the AT&T acquisition, defining architecture across embedded and mobile application surfaces.
• Drove migration toward a hardened AOSP-based platform supporting application isolation and controlled system operation.

InComm — Senior Software Engineer

Mobile Banking & Security Architecture 2013 – 2014 | Atlanta, GA

Architected and delivered a secure mobile banking gateway supporting prepaid stored-value services.

• Designed a hybrid cryptographic session protocol combining asymmetric key exchange with session-scoped AES encryption layered over TLS.
• Implemented HMAC-based message-integrity validation to provide tamper detection independent of the transport layer.
• Modeled deterministic client-to-gateway session lifecycles governing balance inquiry, card activation, loan funding, and related workflows.
• Introduced a dedicated validation tier performing strict field-level format and content enforcement before requests reached core services.
• Established Linux-based gateway infrastructure and Jenkins CI/CD pipelines supporting controlled deployment and traceability.

Mobile & Platform Architecture Consulting — Principal Engineer / Architect

Delivered mobile and service-layer architecture across financial services, healthcare, hospitality, and enterprise systems.

• Established early enterprise mobile development capabilities and defined iOS architecture, engineering standards, and deployment practices.
• Architected cross-platform systems spanning iOS, Android, REST-based services, and enterprise data sources.
• Led development of customer-facing and operational applications providing mobile access to enterprise systems.
• Contributed to mobile-platform strategy engagements for organizations transitioning from web-centric to mobile-first architectures.

Selected client work included Blue Cross Blue Shield of Mississippi, InterContinental Hotels Group, FleetCor/Fuelman, and Corporate Lodging Consultants.

AirWatch — Senior Software Engineer

Early contributor to an enterprise mobility-management platform supporting heterogeneous device fleets.

• Architected device-management components for Windows Mobile and Windows CE platforms supporting centralized enterprise control.
• Defined cross-platform management approaches spanning Windows Mobile, iOS, BlackBerry, and ruggedized device environments.
• Developed device-side components enabling secure communication between managed endpoints and enterprise management infrastructure.
• Worked with Microsoft Windows CE engineers while developing operating-system-level authentication and management capabilities.

Earlier Enterprise Experience

Application & Systems Consulting

1996 – 2008

Developed and integrated enterprise systems across financial services, insurance, payments, and other industries while working with global and regional consulting organizations such as Deloitte & Touche CG, Intellinet, and Elite Systems.

Engagements included organizations such as Liberty Mutual, Aflac, TSYS, SunTrust, Coca-Cola Enterprises, Montag & Caldwell, and Beazer Homes.

This period established a foundation in distributed systems, enterprise integration, service-oriented architecture, backend development, and large-scale application delivery that later informed work in mobile, financial, IoT, and device platforms.

Technical Environment

Languages C · C++ · Objective-C / Objective-C++ · Swift · Kotlin · Java · C# · .NET

Platforms iOS · Android · Embedded Android / AOSP · Windows CE · Windows Mobile

Device & Payment Technologies Bluetooth Low Energy · NFC · APDU · DESFire · EMV TLV · Ingenico Telium · Ingenico Tetra

Security & Communication TLS · RSA/AES · HMAC · secure session protocols · PCI/DSS environments

Infrastructure & Services Linux · REST · SOAP · Spring · Jenkins · F5

Military Service

U.S. Army — Communications Officer

Airborne Qualified 1992 – 1996

Served four years on active duty in communications leadership roles supporting secure and field-deployed infrastructure.

• Led communications and security personnel supporting SCIF operations during a forward deployment to Honduras.
• Managed field communication systems supporting operational deployments, including Kuwait.
• Held responsibility for system reliability, configuration control, communications readiness, and mission support.

Education

Bachelor of Science in Electrical Engineering Lehigh University