Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Tharopadikkal Bava Rehesh

Cupertino,CA

Summary

Results-driven Lead Engineer with extensive experience in architecting and developing highly scalable, distributed network and security systems. I have strong hands-on experience in backend development, integrating network components with Apple Cloud, and working with microservice architectures. My skills include REST API design, and container networking in Kubernetes. I am proficient in designing and implementing Authentication, Authorization, and Accounting (AAA) systems, site management, security management, and leveraging open-source API gateways like Tyk, and using Prometheus and Grafana for observability. I possess vast expertise in network software development for the control plane and packet forwarding (data plane) on industry-leading Cisco service provider routers, data center switches, wireless LAN controllers, and firewalls/UTM.

Overview

28
28
years of professional experience
1
1
Certification

Work History

SOFTWARE ENGINEER (STAFF)

Apple
Cupertino, USA
04.2024 - Current
  • Working on the Apple Cloud Compute team, I am responsible for integrating network virtualization components into the Apple Cloud, CloudStack, and enhancing VPC networking capabilities for POD networking, while collaborating with multiple teams.
  • Designed and developed CNI POC plugins
  • Implemented metrics collection using Prometheus libraries for a network microservice, and integrated the Apple Mosaic agent in the sidecar for observability.
  • Skills: VPC, Network Virtualization, VxLAN, Kubernetes, CNI, CloudStack, Golang, Java, Prometheus.

TECHNICAL LEADER/SENIOR TECHNICAL LEADER

Cisco Systems
San Jose, USA
04.2017 - 04.2024
  • Designed and built Site Manager infrastructure for the Nexus Dashboard platform based on Kubernetes and microservice architecture in Golang.
  • Lead the development, implementation, and automation testing of new features and enhancements for the infra components: Site Manager/Site Federation, AAA, RBAC, and APIGW in the Nexus Dashboard platform.
  • Integrated AAA (LDAP/RADIUS/Tacacs/RSA) microservices into the Cisco Nexus Dashboard application framework in Go.
  • Used Prometheus libraries in Go for metrics collection for API performance, as well as memory and CPU usage for Kubernetes containers.
  • Collaborated with other engineers and leaders on the datacenter controller teams, including Nexus Insights, Nexus Orchestrator, and Nexus Fabric. Controller, and APIC (ACI).
  • Resolved complex customer issues.
  • Provided technical guidance and mentorship to junior engineers.
  • Designed and led the implementation of features on the next-generation Cisco Wireless LAN controller data path on the IOS-XE virtual (vWLC) and CPP-based platforms.

LEAD SOFTWARE ENGINEER

Digital Guardian
Sunnyvale, USA
01.2016 - 01.2017
  • Design, develop features on Digital Guardian DLP appliance.
  • Worked on an integration project; porting Linux agent code from Digital guardian cloud based product in to the DLP appliance and establish communication channel with the remote server based on http/https for event/alert reporting.

TECHNICAL LEADER

Cisco Systems
Bangalore, India
01.2012 - 01.2016
  • Led a team of engineers working on the Cisco Data center switches- Nexus3k.
  • Worked on BIOS feature development - AMI/Open BIOS, ONIE and PXE bios/grub integration on the data center switches.
  • L2/L3/Vxlan packet forwarding (Broadcom Trident+, Trident2, Trident 2+).
  • Lead a team of engineers in the Microcode/assembly packet forwarding for Next generation CRS routers.
  • Designed and implemented multicast AMT scalability ucode feature for LC.
  • Delivered BFD over MHv6 feature for CRS.

SOFTWARE EXPERT - SYSTEMS SOFTWARE ENGINEER - V1

Hewlett Packard Enterprise
Bangalore, India
01.2010 - 01.2012
  • Led a team of engineers involved in the development of a L3 based open architecture framework to run third party applications in the switch.
  • This is related to HP's Open Network Ecosystem (ONE architecture) initiative.
  • Designed and implemented Connection Manager module which manages TCP/SSL connections and will interface with other modules in the system to create services and connections dynamically.
  • Designed and implemented Authorization module and persistence of authorization table across reboots and connection manager.

SENIOR SOFTWARE ENGINEER

Cisco Systems
San Jose, USA
01.2008 - 01.2010
  • Contributed to feature development of L2VPN technologies EoMPLS, VPLS, AToM, Selective QinQ, L2TPv3, L2 forwarding, TCAM/PLU programming in the CRBU CRS-1/CRS-3 (Cisco's industry leading carrier routing system) L2VPN platform team.
  • Designed and implemented L2VPN platform Bundle AC feature in the CRS-1.
  • Significant contributor in the NSSTG IOS Componentization initiative for PPP protocol stack, Designed and implemented PPP, PPPoE component APIs.
  • This project earned Cisco Pioneer Award.

STAFF SOFTWARE ENGINEER

SonicWall
Sunnyvale, USA
04.2001 - 02.2008
  • Architected, designed and implemented network security protocols on the SonicWALL family of security products based on Vxworks as well as the Cavium octeon multicore environment for NSA products.
  • Contributed to writing design spec, feature spec, System and Unit test design documents and collaborated with QA team on automation and testing.
  • Architected and implemented L2TP client and L2TP/IPSEC server.
  • Designed and implemented initial draft for VPN NAT traversal.
  • Researched, designed and developed IGMP Multicast support.
  • Implemented 'DHCP server persistence' and 'DHCP Generic options' features.
  • Designed and implemented Stateful HA syncing for Multicast, IGMP, DHCP and implemented Virtual MAC support in the Active/Standby configuration.
  • Implemented NetBios forwarding and DHCP relay using IP Helper.
  • Mentored new Engineers in Sunnyvale and Shanghai R&D center.

SOFTWARE ENGINEER/ CONSULTANT

Sun Microsystems
Menlo Park, USA
01.1999 - 01.2001
  • Software Consultant at Sun Microsystems /Ramp Networks.
  • Design, development and enhancement of Sun Netra CT 400/800 Alarm card firmware based on Vxworks RTOS.
  • Design, development and testing of PPPoE protocol on the WebRamp ADSL router using C and Vxworks.

SOFTWARE ENGINEER

Motorola India
Hyderabad, India
01.1998 - 01.1999
  • Design and development of TTCN, ASN,1 test scripts to test CDMA mobile handset to cover PPP, MobileIP, RLP, IS-707 protocol stacks.
  • Encoder/decoder implementation in C.

SOFTWARE ENGINEER

Wipro
Bangalore, India
01.1997 - 01.1998
  • Design, development and maintenance of NORTEL Meridian PBX switching software running Vxworks RTOS.

Education

BTECH - COMPUTER SCIENCE && ENGG

R.E.C Calicut(NIT)
Kerala, India

Skills

  • Golang, C, Java, Python, JSON, YAML
  • Cloud infrastructure, CloudStack, Kafka
  • VPC Networking
  • Microservices architecture, REST API Design
  • Automation testing
  • VxLAN, MPLS, L2VPN, IPSec, IKE, L2TP, SSL, NAT-T, mTLS, Firewall, DPI, Certificate Management
  • Kubernetes, CNI, Docker,
  • AAA, RBAC, APIGW
  • TCP/IP, VPLS, Multicast, NAT, CAPWAP, DHCP
  • Linux, IOS-XR/IOS-XE, Vxworks, Multicore Octeon Programming

Certification

  • The Fundamentals of RDMA Programming - Coursera/ NVIDIA Training, 2025
  • Machine Learning - Coursera - in progress

Timeline

SOFTWARE ENGINEER (STAFF)

Apple
04.2024 - Current

TECHNICAL LEADER/SENIOR TECHNICAL LEADER

Cisco Systems
04.2017 - 04.2024

LEAD SOFTWARE ENGINEER

Digital Guardian
01.2016 - 01.2017

TECHNICAL LEADER

Cisco Systems
01.2012 - 01.2016

SOFTWARE EXPERT - SYSTEMS SOFTWARE ENGINEER - V1

Hewlett Packard Enterprise
01.2010 - 01.2012

SENIOR SOFTWARE ENGINEER

Cisco Systems
01.2008 - 01.2010

STAFF SOFTWARE ENGINEER

SonicWall
04.2001 - 02.2008

SOFTWARE ENGINEER/ CONSULTANT

Sun Microsystems
01.1999 - 01.2001

SOFTWARE ENGINEER

Motorola India
01.1998 - 01.1999

SOFTWARE ENGINEER

Wipro
01.1997 - 01.1998

BTECH - COMPUTER SCIENCE && ENGG

R.E.C Calicut(NIT)
Tharopadikkal Bava Rehesh