Harpreet Singh Email Address

Zscaler is a global cloud-based information security company that provides Internet security, web security, next generation firewalls, sandboxing, SSL inspection, antivirus, vulnerability management and granular control of user activity in cloud computing, mobile and Internet of things - centric environments.

17+ years of industry experience in the Design/Development of System Software, Embedded Systems (Cavium Processors), ADC (NetScaler), Networking and Security protocols (SSL/TLS/DTLS, IPSec, IKE, FIPS). FIPS solution including Cavium NGFips & N3FIPS, Thales Network HSM. Research/POC on DPDK using Crypto HW for future model/design. Specialized in development using Cavium Multicore Processors (Octeon, Nitrox, Nitrox-FIPS) and Intel-Coleto, Linux and FreeBSD Device Drivers for Nitrox – N3, N3FIPS, Octeon and Intel NIC 82599 10G, Expertise in offloading SSL/TLS/DTLS to Cavium Nitrox Processor in Multi-Processor Environment where process is user space, Kernel and User Space Device Driver both for PF and VF(SRIOV-XEN) Devices (NetScaler MPX and SDX Products). Designing/Architecting application involving Sockets, Multithreading, Multiple Process Communication with Multiple CPU Cores. Mentored Projects as Technical Lead for various Protocols, at all complexity levels. Few Major Contributions: 1) Design and Architecture Robust/RAS SSL/Data Path and upgrade to OpenSSL-1.1.1 new way, also support TLS 1.3 in Zscaler Cloud which is running STRONG all over the DC across globe, Cloud HSM Architecture/POC - Final GCP, OpenSSL-3.0.0 Upgrade, Architecture new approach : SSL Provider Model, POC using DPDK to use Crypto HW for future model.....to name few. 2) TLS 1.3 HW Offload using Nitrox3 3) Nitrox3-FIPS Full Support in NetScaler (MPX and SDX-XenServer) 4) Nitrox3 Full Support in NetScaler (MPX and SDX-XenServer) 5) Thales-HSM Support in NetScaler 6) Nitrox3 Utilization in NetScaler – Very important metric for ADC Capacity Planning for SSL 7) N2 Like Octeon – IPSEC 8) kernel Firewall Modules – SSL, SNMP ….. ….. More to add, as when time permits...