Gergely Kalman

Gergely Kalman, Hungary

Member since July 05, 2012

Jinja2 C Python Django Libav IPTables OpenVPN Object-oriented Programming Imperative programming Event-driven programming Linux Memcached TCP UDP ICMP RTMP SSH Security Code Auditing Software Architecture Ethernet
Bash C++ PHP Assembler x86

With a background in IT-Security, Gergely has worked as Lead Developer for an Alexa Top 50 website serving several million unique visitors each month. He is a diligent and motivated worker who likes to dive in and get things done.

Portfolio

  • Freelance
    wxPython, OpenVPN, OpenSSL, Django, Jinja2
  • DuoDecad LLC, Media Platform Division
    libav* libraries, Python3, C, Linux...
...

Experience

  • C, 6 years
  • Python, 3 years
  • Bash, 2 years
  • C++, 1 year
  • PHP, 1 year
  • Assembler x86, 1 year
  • MySQL, 1 year

The most amazing ...

... software I've implemented was a live stream distribution and conversion architecture in Python3 and C, which was an alternative to the Flash Media Server.
— Gergely Kalman

Availability

Part-time

Preferred environment

Linux

Employment

2011 - PRESENT

Freelance, Software Engineer

  • Implemented several simple websites for personal projects using Django and Jinja2.
  • Implemented OpenVPN based Desktop software using wxPython, OpenVPN, and OpenSSL.
  • Technologies: wxPython, OpenVPN, OpenSSL, Django, Jinja2
2010 - 2011

DuoDecad LLC, Media Platform Division, Head of Media Platform Development

  • Worked as only developer (for first 8 months) on alternative video streaming platform to Adobe Flash Media Server (primary goal of The Media Platform Division (MPD)).
  • Achieved goal within a year using unofficial documentation of the protocol and manual reversing.
  • Designed and implemented live stream distribution and conversion architecture in Python3.
  • Optimized to allow one node to serve more than 100k clients, using ~10Gbit/s.
  • Supported on-the-fly transcoding of incoming audio and video.
  • Benchmarked performance and moved heavy-lifting code to C.
  • Integrated several libav* libraries into Python for stream conversion.
  • Researched and assisted in hardware acquisitions for the project.
  • Devised custom event-driven interface with custom socket handling for Python. Included FLV format handlers.
  • Detected bugs in Adobe formats and in libavformat.
  • Administered Media Platform Division's machines (about 80).
  • Tuned machines for maximum network performance.
  • Lectured on IT-Security, MPD's project, and Python programming.
  • Iterated until peak performance of cluster was almost a hundred gigabits. With 30 machines, it would have been capable of completely taking over existing streaming cluster (100+ nodes).
  • Project still in production.
  • Technologies: libav* libraries, Python3, C, Linux, Bonding, RTMP, FLV, AMF
2008 - 2010

DuoDecad LLC, IT-Security division, IT Security Specialist

  • Performed software audits, penetration tests, and stress tests.
  • Implemented failover architecture for main website.
  • Assisted partner company in acquiring Payment Card Industry Data Security Standard (PCI-DSS) compliance.
  • Devised company policies for PCI-DSS, developed architecture, and held educational sessions as part of IT Security staff.
  • Benchmarked Linux kernel's behaviour when presented with high volumes of DDoS traffic. Tuned and patched kernel to achieve maximum resilience.
  • Worked as member of incident response team.
  • Developed network analyzer in C which created real-time statistics of incoming HTTP requests, pinpointed attackers.
  • Ported old OpenSSH fork's modifications to latest version.
  • Technologies: Linux, iptables, keepalived, LVS, C, netboot
2008 - 2008

DuoDecad LLC, IT-Security division, IT Operator

  • Helped with administration of several hundred Linux machines.
  • Led support for kernel and network-related issues.
  • Wrote small scripts in BASH for administrative purposes.
  • Technologies: Linux
2007 - 2007

SZAMALK Educational Institution, Instructor

  • Taught course for single semester titled “Linux, Networking and System administration.”
2005 - 2007

Dorm System Administrator Group ELTE, System Administrator

  • Helped with general Linux system administration tasks in University dorm.
  • Implemented load balancing.
  • Administered web proxies.
  • Created minimal netboot architecture.

Experience

http://synsecblog.com

Synapse's Security Blog (Development)

Write and maintain personal blog.

http://lalibco.com

PCI-DSS consultant (Other amazing things)

Provided consultation and architectural help for Lalibco, which processed more than $500.000 daily for an Alexa top 50 website. Several bugs and security holes were uncovered in their systems. I prepared it for the PCI-DSS audit, which it passed successfully.

http://escalion.com

Online Payment Architect, PCI-DSS Consultant (Other amazing things)

Helped design Escalion's (Lalib successor) system architecture from networking to services to policies and procedures. Advised on secure software practices and developed policies and procedures to keep cardholder data secure. Escalion passed PCI-DSS test and took over Lalib's transactions, which were around $500.000 each day.

Skills

Languages

Python, C, Jinja2, Bash, C++, PHP, Assembler x86

Frameworks

Django

Libraries/APIs

Libav

Tools

IPTables, OpenVPN

Paradigms

Imperative programming, Object-oriented Programming, Event-driven programming

Platforms

Linux, Windows, OS X

Storage

Memcached, MySQL

Misc

UDP, Software Architecture, Ethernet, TCP, ICMP, RTMP, SSH, Security, Code Auditing

Education

2005 - 2007

Bachelor's degree in Computer Science

Eotvos Lorand Science University - Hungary