Andrew Flury

📍 Pacifica, CA, USA ∙ ✉️ [email protected] ∙ 📞 650-515-6072 ∙ 🤝 LinkedIn

Summary

Software engineer with 25+ years in networking, security, and infrastructure.

Experience

Principal Software Engineer - Memyard 📂 Apr 2024 - Jun 2026

Memyard is a social network and document intelligence platform built on Google Drive, Microsoft OneDrive, and other cloud services.

• Built and ran infrastructure across Vercel, GCP, and Supabase using Terraform, GitHub Actions, GCP monitoring, and Sentry.
• Led development through the company's pivot from a document update notifier to a document-focused social network.
• Built a Python/Celery task system to ingest user data.
• Wrote integrations for Google Drive, Dropbox, Microsoft OneDrive and Teams, GitHub, Linear, Salesforce, and other data providers.
• Built front-end features using TypeScript/React.

Staff Software Engineer - TRM Labs 💸 Nov 2022 - Apr 2024

TRM provides blockchain analytics to cryptocurrency exchanges, government agencies, and regulators. On the Network Intelligence team, I correlated wallets and transactions with network activity, IP addresses, and people.

• Built a distributed network of Bitcoin, Ethereum (geth/lighthouse), Monero, and other blockchain nodes, with automated deployment and management.
• Modified blockchain software to report network activity for research and product use.
• Added IP intelligence features covering geolocation, network providers, and classifications.

Principal Software Engineer - Agari / Fortra 📧 Sep 2009 – Mar 2022

Agari was an email security company focused on preventing spoofing attacks. We helped create and promote the DMARC email authentication and reporting standard. I was Agari's first employee and worked across engineering, from early prototypes through production operations and on-call support. HelpSystems, now Fortra, acquired the company in 2021.

Customer Protect used DMARC reports and policies to help domain owners identify unauthorized senders and block unauthenticated mail.

• Wrote a system to aggregate XML email reports from mailbox providers.
• Built real-time ingestion of messages that failed authentication.
• Created reports showing email volume by sending IP and authentication status.
• Built a hosted DMARC/SPF/DKIM system with a custom DNS backend.
• Built and managed the initial infrastructure, then led its migration from on-premises systems to AWS.
• Authored the open-source Ruby SPF client https://github.com/agaridata/spf-ruby

Enterprise Protect collected telemetry from inbound mail and grew into a broader security product for detecting and blocking abnormal traffic.

• Developed SMTP "sensors" that collected copies of customer mail and reported message data to Agari.
• Built ingestion systems backed by Postgres, Elasticsearch, and other data stores.
• Blocked messages after processing by moving or deleting them through mailbox provider APIs.
• Integrated third-party URL and attachment scanning engines.
• Built an incident response service for post-breach mitigation on top of Enterprise Protect.

Member of Technical Staff - Topsy Labs 🔍 Apr 2007 - Jul 2009

Topsy was a search engine for social media streams, primarily Twitter. I built its early infrastructure and helped scale it from one server to a data center with dozens of racks. Apple acquired Topsy in 2013.

• Procured data center space, power, and bandwidth.
• Installed and maintained the physical data center infrastructure.
• Set up OS installation (CentOS/Kickstart), monitoring and alerting (Nagios), and configuration management (Puppet).

Senior Software Engineer - IronPort Systems 🔐 Jul 2002 - Mar 2007

IronPort built enterprise email and web security appliances and services. I was the initial developer for the Security Applications team, responsible for its hosted security services. Cisco acquired the company in 2007.

• Developed Bonded Sender, an email allowlist backed by financial bonds. Microsoft and popular open-source anti-spam tools adopted the service, and the telemetry collected from its DNS traffic became the foundation for future products.
• Built SenderBase, now part of Cisco Talos. It combined IP, domain, registrar, and appliance telemetry to identify email senders and network owners. I also wrote its custom DNS server and the DNS API used by IronPort appliances and still in production today.
• Was one of two initial engineers for SBRS, an IP reputation score based on SenderBase data, third-party blocklists, and appliance statistics.
• Led development of Virus Outbreak Filters, an early-warning system based on filenames, file sizes, content hashes, and similar message patterns. Worked on both appliance enforcement and Threat Operations Center tools.
• Built SenderBase Network Participation system, which shared appliance telemetry and diagnostics with IronPort. Wrote both the appliance and hosted components.

Systems / Software Engineer - Zembu Labs 🌐 Apr 2001 - Nov 2002

Zembu was building globally distributed application and database clusters using its own database technology. I wrote systems management software for the server "pods" deployed in third-party data centers.

• Wrote software to manage Ethernet switches, load balancers, remote power controllers, and serial terminal servers in each pod.
• Wrote software to configure boot and installation servers for Red Hat, Solaris, system packages, and our applications.
• Installed and later removed pods in third-party data centers around the world.
• Ran internal IT during the company's early stages.

Network Engineer - NASA/Ames Research Center 🚀 Jul 1997 - Apr 2001

I joined NASA/Ames as an intern in 1997 and was hired full-time a year later. I built and maintained networks for high-performance computing at the NASA Advanced Supercomputing facility.

• Rebuilt hub-based 10BaseT network to switched gigabit Ethernet alongside FDDI, HiPPI, and other HPC networks.
• Wrote a web app for network equipment inventory, tools to manage SSH host keys, and other automation.
• Ported netperf to Cray UNICOS, fixing a binary protocol that broke across different architectures.
• Led and participated in team training as an intern.

Skills

• Programming Languages: Python, Ruby, Perl, bash, some JavaScript/TypeScript, C/C++
• Services:
  • AWS: EC2, S3, RDS, EKS, Kinesis, SQS
  • GCP: GCE, GCS, CloudSQL, GKE, Cloud Run, BigQuery, Composer (Airflow)
  • GitHub, Cloudflare, Vercel, Terraform Cloud
• Frameworks: Flask, Celery, Django, Rails, NextJS
• Operating Systems: Linux (Debian/Ubuntu, RedHat/CentOS, SLS/Slackware, etc.), {Free,Net,Open}BSD
• Networks: TCP/IP, DNS, SMTP, email authentication (SPF, DKIM, DMARC), DHCP, Ethernet, general networking technologies
• Software: Terraform, Ansible, Kubernetes, Docker, PostgreSQL, Supabase, MySQL, Apache httpd/nginx/lighttpd, BIND, Postfix, most common Unix stuff.

Education

Completed college coursework during high school and early in my career, but did not earn a degree. Hacking on supercomputers at NASA seemed like more fun.

• De Anza College: Computer Science 1996 - 2000
• West Valley College: Business, Computer Science 1995 - 1997