Andrew Malitzis

Experience

• 

  Cheyenne Software

  Jan 1993 - Jan 1998

  Director Antivirus Software

  Enterprise Scale Antivirus and Security. Created, designed, developed, managed, lead, ... the award winning InocuLAN and Cheyenne Antivirus Products. Team included 10+ developers, 10+ QA and 5+ support engineers.The main design goal for InocuLAN was to tackle enterprise scale Anti-virus protection. This included automated remote installation of AV client agents to corporate servers and desktops under a single protection policy. Virus updates were stage-able to ensure stability before automated roll-out via multi-spoke and hub routing to the AV client agents. The closest current day architecture would be Symantec's End-Point protection suite except that InocuLAN automated new signature updates under the hood while Symantec still requires manual update procedures. Show less

• 

  Alcatel-Lucent

  Jan 1998 - Jan 2005

  Senior Engineering Manager

  Core switch and edge device Network Management. Managed several development teams: Solaris based NM Software; Windows and Solaris based NM Software; Embedded device software for SNMP using GNU environment. Team sizes managed ranged up to 10 developers and 10 QA.Architect involved with the design/development of a new XML/embedded Java MVC framework that allowed complete modularization of device management under a single container. This "new approach" was tasked to allow the concurrent development of management software for a diverse range of network devices across geographically dispersed teams. Bell Labs core developed new compilers and debuggers to go above GNU/GDB to facilitate rapid development. The closest analogy for this framework approach would be the current day Spring IO frameworks.Also involved with several RFCs surrounding SNMP (DSL) and SIP. Show less

• 

  FalconStor Software

  Jan 2005 - Jan 2014

  Senior Manager/Software Architect

  Automated Any2Any BI Service level BCDR and Cloud Iaas solutions. Automated BI service level DR goes well beyond simple machine P2V2V2P BMR (driver injection) as you need to handle BI service level recovery (multi-machine groupings with correct start up order), auto layer 2 - layer 3 network re-mapping of workloads from source to different DR networks, auto-security remapping to DR security, auto-rehome of workloads to operate in completely different DR environment (ie. remap storage/network/security/virtual to completely different DR components), auto remap of snapshot agents to operate against DR protection installation to maintain SLA while in DR (while in DR, snapshots occur against DR installation of SAN and agents), auto role reversal of SAN infrastructure on failback to maintain latest data from DR operation. Architected to address multi-tenancy concerns and the Service Provider (cloud) use case which involves a client <=> provider "Chinese Wall". Completely handle VMware SRM use case including auto-mapping of VM<=>Datastore<=>Storage groupings (Protection Groups) since role reversal of the underlying storage means role reversal of colections of datastores and VMs. Auto-detection of incorrect storage configurations for proper BI service level recovery (SAN storage is almost always incorrectly configured to properly handle DR for the BI services they protect). Recovery software runs at both source and DR sites to ensure no-single point of failure (in real DR, entire source site is down!). Daily scheduled test runs of BI service level recovery jobs (DNS, AD, clustered Exchange/SQL/ SharePoint farms) of large groups of workloads to fenced off networks to ensure that the BI services like Exchange/SharePoint do come up in minutes (validates the protection and recovery together). Also created, designed, developed and managed several other products/projects including the award winning RecoverTrac, Multi-site clusters, Exchange, SharePoint and VSS Recovery. Show less

• 

  Catalogic Software Inc.

  Jan 2014 - Mar 2016

  Senior Manager/Software Architect

  Automated SLA based storage defined Copy Data Management leveraging existing vendor storage (NetApp, IBM, EMC) to fulfill a dense matrix of Recovery, Migration, DR, DevOps and wasteful storage reclamation use cases. Creating mirror or replica copies of data should be done for a purpose. Location and service levels of the copies should be used to determine their use. Remote copies lend to DR use cases as they protect against site failures such as power outages. Local copies with higher SLA's lend to local recovery use cases such as item level recovery of email. Other copies on remote storage across cloud boundaries lend to DevOps so long as those copies have been data masked. Yet other copies may be found to be wasteful and can be removed. In all cases, the copies must be of high quality with high fidelity cataloging. Automating Migration, Recovery, DR or DevOps use cases within or across site boundaries is not trivial. The software must have access to an in-depth high fidelity knowledge base when it is asked to automatically reconstruct the target Compute, Storage, Network, Security, and application level wiring within fenced or remote sites. This knowledge comes from the catalog. In fact, I would postulate that the whole concept of a useful software defined process must depend upon access to high fidelity and deeply cross associated knowledge. Catalogic Software achieves this with a densely cross associated high fidelity catalog.And of coarse, the value of the Migrated, DR or DevOps copies of workloads depend opon the quality of the data copies they are constructed upon (are they application consistent with high IOPS/low latency) as well as the quality of the target resources used for Compute, Network and Security (can they handle the workloads securely). Show less

• 

  ProphetStor Data Services, Inc.

  Apr 2016 - Jan 2018

  Senior Manager/Software Architect

  Joined this startup in 2016 to help pioneer intelligent software defined analytics to be applied against a rapidly converging marketplace of storage within cloud, compute, and networking environments. Designed a self-describing HATEOAS JSON/REST API leveraging the Eve framework backed by MongoDB and implemented in Python. This API was first used to manage ProphetStor Storage. It was then extended to manage third party platforms such as OpenStack, VMware, Kubernetes and CEPH via the implementation of providers for those third party platforms.Designed and implemented an OpenStack provider to manage OpenStack from our platform/API. This provider also captured a rich set of OpenStack data for analytics. Designed and implemented a VMware provider to manage VMware from our platform/API. This provider also captured a rich set of VMware data for analytics. Designed a Kubernetes provider to manage Kubernetes and containerized workloads from our platform/API. This provider also captured a rich set of Kubernetes data for analytics.Designed and implemented a Kubernetes storage provider in GO that offered up ProphetStor storage for use in Kubernetes (Storage Class with dynamic PVC support). Designed a comprehensive Time Machine capability to browse the captured storage/third party data and exposed it from the REST API. This allowed consumers of our API to roll forward or backward in time and retrieve fully associated statics across the captured data. Leveraged Elastic Search for query/search and Time Machine capability Incorporated an analytics layer that leveraged the Time Machine to produce many interesting time based analytics. The analytics was also used to detect resource sprawl.Planned for the use of the Time Machine as a means to feed statistical data to an AI Prediction module. The AI Prediction module is currently in development by another team.VMware TAP relationship – VMware VTSP certified and managed the ProphetStor-VMware TAP relationship. Show less

• 

  Catalogic Software

  Jan 2018 - May 2021

  Senior Manager/Software Architect

  Returned to Catalogic Software to take on the Software Architect and Managerial role for the CDM/ECX product as Catalogic signed an OEM deal with IBM.

• 

  IBM

  May 2021 - Feb 2024

  Engineering/Development/People Manager

  Joined IBM via the IBM acquisition of Catalogic Software products as Software Development Manager/Architect for Storage Copy Data Manager (SCDM) which was the IBM brand name for (CDM/ECX). My role was subsequently expanded to also take on being Development/People Manager of Storage Protect Plus (SPP), the second Catalogic Software product that IBM acquired.SCDM - For the first year and a half, I managed six on time quarterly releases of SCDM that added significant functionality and new recruits: • Added protection support for Intersystems IRIS and Cache databases (important for Epic System Software) to compliment our existing support for SAP Hana, Oracle and SQL server databases.• Added “CyberScan” support to detect ransomware while taking storage snapshots/backups with recovery workflows to recover from “Cyber” attacks.• Added support for new IBM Flash System Storage capabilities including Snapshot vs. Flashcopy and Safeguarded copy. These changes along with the added “CyberScan” features enhanced the IBM Flash System Storage offerings with “Cyber Protection” which was called IBM Sentinel.• Uplifted the SCDM product stack from older open-source versions to the latest versions to address a wave of security PSIRT/CVE vulnerabilities. This included moving from CentOS to the latest Redhat Linux, newer versions of Java, Spring, MongoDB, PostgreSQL, TLS, etc.• Added multi-factor authentication.• Recruited roughly 75% of the current SCDM team• Trained newly recruited engineers. SPP and SCDM - For the next eight months, my responsibilities expanded to take on development/people management of the SPP product which resulted in my having 24+ direct reports between the two teams. As with SCDM, the SPP team contained a significant amount of new recruits that needed to be trained. During this time, I managed two timely quarterly releases for both SPP and SCDM all the while being heavily engaged with SPP/SCDM support and training new SPP recruits. Show less