Former Head of IT and Infrastructure Architect. Leading technology strategy with deep expertise in mission-critical distributed systems, kernel-level perimeter defense (eBPF/XDP), zero-allocation determinism, and high-availability enterprise networking in Rust and Go.
"Architecting resilient, cost-governed technology infrastructure where operational determinism, zero-trust security boundaries, and high-availability operations translate directly into enterprise business continuity."
- Enterprise Infrastructure & Resilience: Designing fault-tolerant distributed topologies, microsecond-latency network primitives, and high-availability environments with zero unplanned downtime.
- Kernel-Level Defense & Zero-Trust: Embedding security controls at the earliest execution boundary (Linux eBPF / AF_XDP NIC driver hooks), behavioral threat mitigation (L7 WAF), and encrypted transit (RFC 9250 DoQ).
- Systems Architecture & Determinism: Engineering zero-garbage-collection memory safety, cache-conscious memory layouts, and lock-free concurrency models without vendor lock-in.
- Technology Strategy & Governance: Aligning technical roadmaps with business objectives, enforcing rigorous TDD/formal testing standards, and leading infrastructure cost-optimization.
An open-source reference implementation of a high-concurrency network defense and recursive resolution stack:
| Subsystem | Strategic Role | Core Architecture | Repository |
|---|---|---|---|
| Kalas | L3 / L4 Perimeter Defense | Linux eBPF / AF_XDP Wire-Speed Packet Sentinel | koodoxz/kalas |
| Tameng | Application Security (WAF) | ML-Assisted Behavioral Threat Detection (Go) | koodoxz/tameng |
| Gapura | Public Ingress Gateway | DoQ / DoH / DoT Encrypted Session Termination | koodoxz/gapura |
| Runut | Core Recursive Resolution | Zero-GC Authoritative Root DNS Resolver | koodoxz/runut |
| Caraka | Endpoint Edge Courier | 0-RTT DNS over QUIC Proxy Forwarder | koodoxz/caraka |
🌐 Interactive Systems Architecture & Telemetry Portal: koodoxz.github.io
Executive Technology Leadership · Enterprise Infrastructure Resilience · AGPL-3.0-or-later