Greg Olmstead
Verified Expert in Engineering
Security Developer
New York, NY, United States
Toptal member since January 3, 2017
Greg is an experienced, multi-faceted technical leader with a successful track record in the investment banking, energy, InfoSec, and fintech industries. He is well-versed in solutions architecture and product ownership in global, multi-year initiatives. Greg is highly skilled in cloud and on-premise environments, leveraging container and serverless technologies. A leader in innovation, he holds one awarded patent and one pending in the machine learning and NLP fields.
Portfolio
Experience
Availability
Preferred Environment
PyCharm
The most amazing...
...project I've worked on was a machine learning/NLP-powered relationship-strength mapping engine based on an organization's email content.
Work Experience
CTO Security Architect
Bloomberg
- Implemented infrastructure-as-code (IaC) enforcement aligned with CIS benchmarks for a landscape of 240+ cloud accounts. Led engineering teams organization-wide to rectify compliance issues, establishing a secure-by-default framework.
- Created an endpoint/workload security workstream to build golden cloud images with CIS level 1 hardening and security tooling baked in, rolled out across the organization's 7,500+ cloud virtual machine (VM) compute infrastructure.
- Developed a guardrails-based cloud role architecture model to empower developers to iterate and ideate on cloud projects while ensuring adherence to security best practices and organizational rules.
- Built a hybrid encryption helper to allow platforms to encrypt/decrypt data, baking in industry-standard mechanisms such as envelope encryption, authenticated encryption, payload/envelope signing, M of N decryption, and multi-master decryption.
- Wrote multiple design patterns adopted by the organization, e.g., message queues in hybrid environments, secrets in the public cloud, remote access to cloud computing, and more.
Principal Developer
SparkIT Solutions
- Created Cetus, a Kubernetes-based threat processing and alerting platform for processing and matching alerts to Certstream feeds and other data. Analyzed 21 million domains daily using Kubernetes, Kafka, Python, Terraform, and Elasticsearch.
- Developed Phoenix, a next-generation Cuckoo-based malware analysis platform using Python, Django, and Docker.
- Created a Raspberry Pi based long-term data logging device for UV filters leveraging Modbus over serial communications and built it as an embedded device.
- Built an appliance for ingesting, retrieving, transforming, consolidating, and transmitting logs, audits, and other data types from multiple systems to send to the RSA enVision platform.
- Performed reverse-engineering on Windows-based malware using IDA Pro, OllyDbg, Reflector, and Cuckoo.
- Designed and built multiple small business turn-key solutions, including domain, accounting, file, mail, and client management servers, as well as network and user devices and full integration.
- Organized and managed community engineering projects.
- Created a web application that uses SpreadsheetGear and a complex Excel-based model (the Buy to Rent model) to perform analysis on data to determine whether to buy a piece of property as a rental.
Principal Engineer
Refinitiv
- Designed and implemented a Terraform-based JupyterHub deployment on AWS EKS leveraging AWS App Mesh, AWS Cloud Map, Amazon Cognito, and multiple other AWS services, integrated with Refinitiv Data Platform (RDP).
- Architected a dynamic, distributed system based on AWS Fargate and Lambda using AWS CDK to publish and host back ends for apps running in our flagship desktop product, saving developers over 90% of their time obtaining resources.
- Modernized our toolchain and acted as SME for most cloud and security-related issues.
- Built continuous integration and delivery systems for multiple technologies for delivery into AWS.
Lead Engineer
Thomson Reuters
- Created a re-platforming plan to break a legacy 12-service WCF monolith into microservices running in Amazon ECS and Lambda using Docker and .NET Core/Standard 2.0.
- Built a clustered and federated RabbitMQ platform for cache distribution and production-development synchronization.
- Built a continuous integration system for automated deployments to AWS and Docker.
- Created dockerized staging environment for end-to-end testing in Microsoft Azure.
- Built a snack detection camera leveraging OpenCV, AWS, and Python on Raspberry Pi.
- Developed a meeting room presence detection and booking system with ultrasonic detectors, AWS, Angular, and Python on Raspberry Pi.
Technical Lead
RBC Capital Markets
- Led a team of seven professionals to develop primary institutional credit sales and trading applications, as well as a debt capital market management application to be deployed and utilized globally.
- Developed a credit and rates trading application using C# and WPF, which has become an integral tool for all RBC traders worldwide to facilitate handling millions of dollars per day in institutional trading transactions.
- Built a machine learning and natural language processing-powered relationship strength mapping engine. This innovative system analyzed online communications such as email and instant messaging to compute optimal paths between individuals.
- Developed an in-house WPF-based application framework that managed the creation of business controls and data retrieval and transformation to enable developers to rapidly create highly configurable applications.
- Worked as an in-house innovation team leader, winning multiple hackathons and producing three applications in the pipeline to become production apps.
- Managed projects' entire lifecycle from concept to production.
Software Developer
Citi
- Worked as the principal developer on a credit risk aggregation app.
- Served as the contact point between technical teams and the business users, i.e., traders.
- Created a WPF-based framework for producing live-data, real-time reports based on Clojure scripts written on the server side.
- Developed a C# based message bus that allowed remote commands to be sent to applications using C# code.
- Created the architecture for a unified service platform that serves as the foundation for multiple applications within the credit space.
Experience
Cetus
Various use cases include detecting malicious infrastructure via fraudulent domain names and TLS certificates. It processes 10 million certificates, 21 million domains, and 140 million DNS digs daily on 3-server commodity hardware. Also, it is a fully pluggable framework for ingestion, enrichment, alerting, and output, based on Kafka and backed by Elasticsearch.
I designed and implemented the full implementation along with my business partner.
Phoenix
https://github.com/SparkITSolutions/phoenixI designed and implemented the entire solution alongside my business partner and presented it at multiple Defensive and Technical Security conferences.
Decision Models
Education
Bachelor of Technology with Honors in Computing & Information Technology
McMaster University - Hamilton, Ontario, Canada
Technologist Degree in Network Engineering & Security Analysis
Mohawk College - Hamilton, Ontario, Canada
Skills
Libraries/APIs
Infragistics, jQuery, Node.js
Tools
Terraform, Git, Syncfusion, Visual Studio 2015, Amazon EKS, Visual Studio Development, PyCharm, RabbitMQ, Reuters Eikon, AWS Cloud Development Kit (CDK), Jupyter, AWS Fargate, Azure Kubernetes Service (AKS), Google Kubernetes Engine (GKE), Jenkins, Cuckoo Sandbox
Languages
C#, Python, .NET, Python, JavaScript, HTML5, Bash, Perl, Java, PHP, Python, Go
Frameworks
Windows Presentation Foundation (WPF), .NET, Web Development, ASP.NET MVC, .NET Core, Angular, AngularJS, Windows PowerShell, Serverless Framework
Platforms
AWS, Linux, Windows Development, Kubernetes, Apache Kafka, Visual Studio Development, AWS Lambda, Azure, Jupyter Notebook, Cloud Engineering, Malware Information Sharing Platform (MISP)
Paradigms
Agile Development, Agile Development, Software Development, Serverless Architecture, Microservices Development, Microservices Architecture
Storage
SQL Server
Other
Windows Communication Foundation (WCF), Web Development, Security, Architecture, Product Owners, Product Ownership, Containers, Malware Analysis, System Security, SSL Certificates, DNS
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring