Principal Software Engineer
Microsoft
2012 – Present
Long-running technical lead across ASP.NET Core framework areas that developers rely on to build, secure, deploy, and operate applications in the Microsoft developer ecosystem.
- Minimal APIs and modern .NET hosting. Led the implementation of ASP.NET Core Minimal APIs and helped turn it into the default model for new .NET web applications, connecting framework design with C# language work, hosting, templates, docs, and cross-ecosystem developer feedback.
- AI protocol and SDK infrastructure. Primary contributor and maintainer for the official MCP C# SDK, shaping transports, middleware, session semantics, authentication, and developer-facing APIs with an emphasis on compatibility and production adoption.
- Kestrel, IIS, and HTTP server infrastructure. Led Kestrel work across HTTP/2, HTTPS, connection lifecycle, rate limiting, and security mitigation infrastructure, including coordinated CVE response work. Also worked across IIS/HTTP.sys integration and native C++ modules at the managed runtime, protocol, and Windows server boundary.
- Dependency injection and application architecture. Owned major design and implementation work in the .NET dependency injection framework underpinning ASP.NET Core, Entity Framework, worker services, hosting, configuration, and the modern .NET application model.
- Security and authentication. Designed and led ASP.NET Core's built-in token-based Identity API endpoints for .NET 8, contributed to secure authentication design across framework features, and represented ASP.NET Core work in security-response and threat-modeling discussions.
- SignalR and real-time systems. Early core developer on ASP.NET SignalR, working across transports, scale-out, authorization, and clients for .NET, JavaScript/TypeScript, Java, and mobile platforms; carried that real-time systems experience into ASP.NET Core's cross-platform stack.
- Open-source platform stewardship. Helped guide ASP.NET Core through code review, API design, issue triage, compatibility decisions, security fixes, and contributor support across the .NET ecosystem.