Skip to Content
<- Back to experience

Professional Experience

Technical Lead, Post-Quantum Protocols & Verified IIoT Security @ Draper

EngagementJanuary 2022 - June 2025
ContextDraper

  • Led engineering work on post-quantum protocol design, formal specification, verified implementation pipelines, and embedded IIoT security architecture for security-sensitive and NDA-bound environments.

  • Defined formal semantics and implementation-oriented specifications for post-quantum cryptographic components, including CRYSTALS-Kyber and Falcon-related workflows, using functional DSLs and compilation targets suitable for constrained no_std Rust environments.

  • Built and contributed to compiler and verification toolchains using Haskell, OCaml, Rust, Isabelle/HOL, Coq, SMT/SAT solvers, Z3/CVC4, SPIN, and TLA+ to connect protocol specifications, implementation artifacts, and machine-checkable assurance workflows.

  • Mechanized security-relevant proof obligations and implementation refinement checks around IND-CCA2 and unforgeability assumptions, integrating proof artifacts into build and validation workflows.

  • Designed verification frameworks for CoAP/MQTT state machines, session lifecycles, failure modes, constant-time behavior, memory-safety assumptions, side-channel-sensitive paths, and implementation-level security properties.

  • Integrated formally specified cryptographic modules into ARM Cortex-M-class embedded environments, contributing to high-throughput post-quantum IIoT prototypes under constrained compute, memory, and operational conditions.

  • Automated continuous verification pipelines with fuzzing, Miri/KLEE-style checks, model checking, proof builds, runtime assertions, and rollback-oriented deployment practices, significantly reducing security validation cycles.

  • Mentored engineers in formal specification, post-quantum cryptography, secure Rust, embedded security, and verification-driven development while coordinating with hardware, firmware, and threat-research teams.

  • This work became one of the most demanding technical foundations of my career, combining post-quantum cryptography, formal methods, compiler tooling, embedded systems, critical infrastructure security, and DevSecOps into a single assurance-driven engineering discipline.