Agent execution
Multi-tool planning and replanning, dependency resolution, validation, evaluation, safeguards, and human approval.
AI agent platforms · Distributed systems
I translate customer needs into reusable systems for building, orchestrating, evaluating, and safely operating AI agents in production. My work spans agent building, agent harness, integrations and tools, MCP, permissioning, governed execution, and reliability.
A systems builder—from optimizing distributed systems to architecting resilient AI platforms.
Current work
They need governed access to tools, durable execution, clear permission boundaries, and reliable recovery when external systems behave unpredictably.
Multi-tool planning and replanning, dependency resolution, validation, evaluation, safeguards, and human approval.
No-code creation of validated, test-run tools from API specifications, documentation, MCP servers, and other system descriptions.
Reusable integrations, authentication, permissions, credential isolation, governed execution, and auditability across external systems.
Schedules, webhooks, polling, durable state, deduplication, re-drive, partial-failure recovery, and production observability.
How I work
Start with the real workflow. Understand what customers and operators need to accomplish across existing systems.
Design the shared foundation. Turn one requirement into an abstraction that works across products and tenants.
Drive through production. Set technical direction, mentor engineers, review architecture, and own operational outcomes.
Research
My doctoral work develops real-time distributed systems that preserve correct operation through component compromise, network attacks, and compound cyber-physical threats.
Ph.D. advisor: Dr. Yair Amir
Read my Ph.D. thesis: Real-Time Byzantine-Resilient Power Grid Infrastructure ↗An integrated resilience framework for broad grid SCADA operations—not isolated protection of a single component or subsystem.
Prior intrusion-tolerant SCADA research largely addressed isolated concerns, such as control-center replication or a single component failure. It lacked a comprehensive threat model and an integrated solution spanning the broader grid infrastructure and its varied real-time operations.
My thesis introduced the first end-to-end Byzantine-resilient system framework spanning control centers, substations, RTUs, PLCs, and field devices. The architecture combines replicated SCADA masters, Byzantine-resilient substations, protected field devices, and intrusion-tolerant networking under simultaneous system compromises and network attacks.
I demonstrated control-center commands, substation commands, autonomous substation protection, and status updates in an integrated real-time scenario. Separately, the real-time substation architecture was evaluated across extensive operating conditions and in a Sandia National Laboratories purple-team exercise at PNNL using protective relays from Siemens, GE, and Hitachi Energy; the technology was transitioned to GE, Siemens, PNNL, and Sandia.
Understanding what happens when severe physical disruption is followed by a coordinated cyberattack against already-degraded critical infrastructure.
Natural disasters can damage infrastructure and communications while forcing emergency reconfiguration. A capable attacker can exploit that degraded state, turning individually survivable events into a compound threat with cascading consequences.
I helped define the compound-threat model and developed methods to analyze how cyberattacks interact with physical disruption across control systems, networks, and recovery mechanisms. The work exposed weaknesses in static architectures and motivated more adaptable resilient-system designs.
The research connected data-centric impact analysis with system-level protection and recovery, informing reconfiguration capabilities in Spire and a broader approach to severe-impact-resilient control systems. It received the IEEE SRDS 2024 Best Paper Award.
Open source
Research and production-oriented infrastructure for intrusion tolerance, Byzantine replication, and resilient networking.
Selected publications
Experience
AI agent-platform architecture, integrations and external actions, agent harness, workflows, MCP, governance, evaluation, and production reliability.
Real-time Byzantine-resilient systems, critical-infrastructure protection, cybersecurity, and ML-based intrusion detection.
Performance engineering leadership, automated monitoring, operational data pipelines, and predictive analysis.
Performance testing and optimization of geo-distributed enterprise systems.
Teaching
Machine Learning, Advanced Distributed Systems, Distributed Systems, Software for Resilient Communities, Intermediate Programming, and Introduction to AI at Johns Hopkins and Duke.
Contact