Faraz Vahedi

Senior Software Engineer with extensive expertise in C, C++, Rust, and ARM Assembly, specialising in compilers and operating systems. Demonstrated commitment to secure coding standards, architectural design principles, and the consistent delivery of robust, reliable, and efficient software solutions. Driven by challenging projects and aiming to contribute actively to international standard committees, with aspirations to join WG14 and WG21. Passionately working towards making impactful contributions to open source communities, especially the LLVM and Rust projects (while being an active contributor to the FreeBSD project.) Dedicated to continuous growth, knowledge sharing, and pushing the boundaries of software engineering.

Commanding in the realm of system programming, expertise spans across compilers, operating systems, and embedded development. Enriched by a broad spectrum of programming languages and technologies, distinctive traits encompass profound problem-solving insights, leadership prowess, a team orientation, and a precision-focused approach to engineering solutions intertwining threads of reliability, scalability, and efficiency.

• Excel in using C, C++, Rust, and ARM Assembly, with additional hands-on experience in Swift, LISP, Haskell, Python, Go, Java, Kotlin, Fortran, Forth, Ruby, Pascal, JavaScript, and POSIX shell scripts.
• Uphold secure coding standards, prioritising clean code, system scalability, high availability, and operational efficiency.
• Command a deep understanding and practical expertise in UNIX internals, actively utilising and developing system utilities and kernel modules for BSD (primarily FreeBSD and OpenBSD,) Linux (various distributions including RedHat, SUSE, and Ubuntu,) illumos (OmniOS,) and macOS.
• Exhibit adeptness at various Interprocess Communication (IPC) methods from Signals and UNIX Domain Sockets to Network Sockets, Message Queues, and Memory-Mapped Files.
• Showcase proficiency in socket programming and different event notification mechanisms to address c10k problem, with deep understanding of both connection-oriented and connectionless protocols with hands-on experience developing critically performant client-server applications.
• Possess advanced knowledge and demonstrated expertise in the application and refinement of optimisation techniques, ensuring peak performance and efficiency in diverse software environments.
• Maintain deep insights into compiler design and adeptly develop frontends for both General Purpose Languages (GPL) and Domain Specific Languages (DSL) on platforms like LLVM.
• Express good understanding of API architectural styles including SOAP, REST, GraphQL, RPC, and gRPC, with hands-on experience developing RESTful and GraphQL based APIs.
• Navigate the fields of software development, system architecture, infrastructure management, and release engineering with insight and proficiency.
• Construct effective CI/CD pipelines, automate testing, and package-building procedures, ensuring seamless and efficient workflows.
• Exemplify proactive leadership and management, cultivating a dynamic and cooperative atmosphere for technical teams.
• Emphasise knowledge sharing and collective growth as a dedicated and collaborative team member, contributing positively to team dynamics and project success.

• Designing and implementing a customisable CI/CD runner in C, utilising FreeBSD Jails as the primary OS-level virtualisation provider while focused on expanding support to a wider range of operating systems and virtualisation providers to enhance the flexibility and scalability of the CI/CD system.

• Responsible for system architecture—designing and maintaining robust solutions for a trading and digital exchange platform.
• Developing and implementing a transaction watcher platform for various blockchain networks, initially focusing on the Solana network.
• Managing Kubernetes clusters and Mikrotik routers across multiple zones to ensure high availability and reliability.
• Optimising edge services, CI/CD pipelines, IaC workflows, and monitoring and log management platforms, contributing to the continuous improvement of deployment processes.
• Developing system and network utilities to facilitate everyday operations, ensuring efficient and reliable workflows.
• Serving as an on-call member for operations and site reliability, addressing critical issues to maintain seamless platform functionality.
• Collaborating with cross-functional teams to implement scalable and efficient solutions, driving the company's technical and operational success.
• Authoring and maintaining RFCs to establish and improve policies and guidelines, fostering better development practices and operational standards.

• Co-led the infrastructure and release-engineering teams, driving the formulation and execution of key strategies aimed at elevating system scalability, security, and high availability.
• Devised optimal strategies to minimise the load on network bandwidth and IOPS during concurrent large-scale upgrades of FreeBSD jails, thereby enhancing the efficiency of system updates.
• Developed an automated system to create internally customised FreeBSD distribution images in various formats, including raw, ISO 9660, VHD, and VDI—upon the initiation of a new release.
• Constructed effective CI/CD pipelines integrated with exhaustive continuous testing procedures, guaranteeing efficient software delivery and seamless swift deployments.
• Utilised Poudriere to automate testing and package building procedures, whilst maintaining a public package repository for client use, facilitating seamless access to the most recent software updates.
• Engineered a diverse suite of internal applications using Rust (for APIs and system utilities,) C (for system utilities,) DTrace (for dynamic instrumentation of production systems and data collection from operational services and protocols,) POSIX shell scripts, and Oberon.
• Developed and managed an extensive monitoring and alerting system using custom shell, Python, and DTrace scripts, improving system visibility and enabling proactive issue resolution.
• Designed and implemented a holistic documentation platform, enabling seamless delivery of critical information in the form of wikis and books—significantly streamlining data accessibility, boosting team productivity, and fostering knowledge sharing.

• Rejoined Khallagh's Research & Development team, leading the design and implementation of a customisable DDoS protection suite for the company's CDN services.
• Engineered a modular system integrating with local services, enabling streamlined and effective threat mitigation while maintaining the integrity of the CDN operations.
• Led the rapid design, coding, and refinement of the anomaly detection platform amidst tight deadlines; judiciously employed BSD sockets, Berkeley Packet Filter, Netmap, and SQLite API to produce a high-performance but minimal solution within stringent budget and time constraints.
• Collaborated with interdisciplinary teams, ensuring that the solution was seamlessly integrated with existing infrastructure, optimising overall system security and performance.
• Successfully met the aggressive three-month project timeline by implementing agile methodologies and close collaboration, delivering the suite on time.
• Contributed to post-launch optimisations and handed over detailed documentation to ensure smooth integration with future developments, emphasising maintainability and scalability.

• Led the design and implementation of the company's PaaS solution, optimising the integration of internal applications while also supporting a broad spectrum of external client applications.
• Collaborated closely with other teams, offering support in troubleshooting and resolving issues during their migration to the new infrastructure and the development of the public-facing interface.
• Developed an interactive agentless Kubernetes cluster provisioner and manager, designed to simplify scaling operations and routine maintenance procedures.
• Automated the build process and sped up deployments by 80% through the implementation of Continuous Tests and the leveraging of CI/CD pipelines.
• Trained NOC personnel on understanding cluster metrics and maintaining the platform.

• Rearchitected the infrastructure of a multimedia streaming platform, boosting overall performance by 80% and achieving 99.9% uptime.
• Identified an improper reference model in the application, leading to the resolution of memory leaks and a 75% reduction in memory usage, from 64GB down to 16GB.
• Increased delivery velocity by 70% through introducing Continuous Tests and creating a sustainable DevOps culture.
• Employed OS-level virtualisation using LXC/LXD (later transitioned to Docker,) markedly reducing overheads associated with full-weight virtualisation when it was deemed unnecessary.
• Implemented Distributed Replicated GlusterFS volumes, improving data redundancy and overall system reliability.
• Collaborated closely with the Security Operations Centre (SOC) department, playing a vital role in penetration testing. This collaboration resulted in actionable insights that significantly bolstered system security.
• Identified potential vulnerabilities and proposed remediation measures, enhancing the security framework and ensuring compliance with industry best practices.

• Assisted the engineering department in overcoming setbacks by implementing a trusted DevOps culture and aligning Business-IT objectives.
• Architected an infrastructure to ensure high availability and consolidated databases, leading to a 70% reduction in costs.
• Leveraged FreeBSD jails for OS-level virtualisation, to enhance system performance and scalability.
• Heavily utilised and optimised ZFS filesystem, maximising data integrity and facilitating efficient snapshots, replication, and data compression for effective storage management.
• Leveraged ZFS deduplication and tiered caching (ARC and L2ARC) capabilities to optimise storage performance, ensuring high availability and fast recovery in large-scale environments.
• Developed and managed robust CI/CD pipelines to automate deployments, improve system testing, and speed up the release cycle.
• Defined thorough backup and upgrade policies to safeguard system data and ensure seamless software updates.

• Organised Iran BSD User Group (IRBUG) from April 2019 to January 2021. Initiated regular workshops and monthly meetings to foster knowledge sharing and collaboration among members.
• Translated HTTP3-Explained from English into Persian.