OBJECTIVE: Be part of an outstanding team building massively scalable software infrastructures where I can contribute my skills as a software architect and strategic planner.

EMPLOYMENT

• Architect working for the Directory, Access and Identity Platform (DAIP) team. Helped to found and drive the Venice project to deliver a next generation security infrastructure for Windows Azure and Windows Azure Platform Appliance as well as drive the scalable storage architecture for DAIP's Access Control Service and next generation directory efforts.

• Architect for V1 release of Windows Azure platform AppFabric Access Control Service. Worked with Yahoo and Google on redesigning OAuth 1.0a into what is now OAuth 2.0 so as to radically reduce implementation complexity and introduce support for federation.

• Group PM for Microsoft's internal Cosmos service offering petabyte scale distributed data analysis for Bing.

• Architect responsible for Live's external web services strategy. Drove designing and shipping new web service technologies at Microsoft including control technology, cross-domain channel mechanism and third party permissioning technology.

• As a member of the office of the CTO, provided leadership in BEA's cross company/cross product standards and technology strategy including owning BEA's 2-4 year technology strategy & Utility Computing road maps.

• Leading contributor and member of the spec editing team for WS-BPEL 2.0. Represented BEA at the W3C Choreography & WSDL 2.0 WGs. Lead author on BEA's web service reliable messaging specification stack. Co-authored first version of BPELJ.

• Technical representative to the Liberty Alliance Project, responsible for applying technologies such as XML, SOAP, WSDL, SAML, XMLDSIG, etc. to create a web services architecture.

• Served as Chief Technologist for the messaging division, responsible for long-term product strategy for e-mail & unified messaging, drove SIP and MMS strategies.

• Contributed to design and prototype the programming model for a multi-machine, multi-tier network application development/deployment environment.

• Lead company wide effort to define corporate security policy covering physical, data center and software development security issues.

• Lead Microsoft's Universal Plug & Play (UPnP) network design team to ship UPnP in Windows Millennium Edition (ME)

• Lead author on WebDAV standard, coordinated delivery of WebDAV functionality across Microsoft's year 2000 product line.

• Provided design guidance, specifications and leadership for the WinInet team in IE 4.0 & 5.0 resulting in IE being the first HTTP/1.1 compliant commercial browser.

• Invented the Host Routing Multicast Engine (HRME) to help build robust/scalable/affordable networks of computers for distributing data and chat over the Internet.

EDUCATION

1990-1995 Bachelors of Science - Computer Science & Engineering, UCLA

Publications

• HTTP Extensions for Distributed Authoring (WebDAV) - RFC 2518

• WebDAV - A network protocol for remote collaborative authoring on the Web, J. Whitehead, Y. Goland, European Computer Supported Cooperative Work ( ECSCW'99)

• WebDAV Book of Why

• The original UPnP protocol stack consisted of the Flexible XML Processing Profile ( FXPP), Simple Service Discovery Protocol ( SSDP), the Multicast and Unicast UDP HTTP Messages ( HTTP over UDP) and General Event Notification Architecture ( GENA) specifications. All four specifications where then bundled into one specification that was made the basis for the UPnP Device Architecture Version 1.0 which was standardized by the UPnP forum in ISO.

• BPEL4WS -- The Promise of Portable Business Processes - Web Services Journal

• Open Source, Java and WebLogic - Beneficial coexistence rather than competition - S. Dietzen, Y. Goland - Weblogic Developer's Journal

• The Race to Create Standards - WebLogic Developer's Journal

• The WebDAV Property Design, J. Whitehead, Y. Goland, Software-Practice & Experience - 2/2004

• BPELJ: BPEL for Java technology (BPELJ)

• Web Services Business Process Execution Language Version 2.0, WS-BPEL 2.0

• OAuth Web Resource Authorization Profiles (OAuth WRAP) which is the basis for OAuth 2.0

• JSON Web Tokens (JWT)

• Simple Web Discovery (SWD)

Named Contributor/Reviewer

• Requirements for WebDAV - RFC 2291

• Transparent Content Negotiation in HTTP - RFC 2295

• XML Media Types - RFC 2376

• SIP: Session Initiation Protocol - RFC 2543

• An HTTP Extension Framework - RFC 2774

• HTTP State Management Mechanism (a.k.a. HTTP cookies) - RFC 2965

• Guidelines for the Use of Extensible Markup Language (XML) within IETF Protocols - RFC 3470

• WebDAV Next-Generation Collaborative Web Authoring by Lisa Dusseault

• Database Systems - An Application-Oriented Approach - Second Edition - Chapter 25 - Web Services by Michael Kifer, Arthur Bernstein & Philip M. Lewis

• Program Committee - ICSOC 2004

• The OAuth 2.0 Authorization Protocol - OAuth 2.0

• The OAuth 2.0 Protocol: Bearer Tokens - OAuth 2.0 Bearer