Michael HUO

Michael HUO

Physical AI, Edge Systems & DevSecOps Architect

Hands-on Systems Engineering • Python • Go • C/C++ • Kiosk Fleet Ops • Supply-Chain Security

LiveX Anvil 2.1.0 GA LiveX Ledger (Dependency-Track) TeamViewer Patch Pipeline CrowdStrike RTR C++ SWG Dataplane Cloud Run Jobs

(Isaiah 40:31)

GitHub Profile LinkedIn Book a Call

About & Systems Focus

Principal Engineer and Architect with 27+ years of experience building production systems, zero-trust cybersecurity, and cloud-native architectures across cloud, on-prem, and edge environments.

At LiveX AI (Feb 2026 – Present), I lead security, platform, and edge systems for Physical AI agents—covering security operations across 86 repositories, DevSecOps pipelines, Windows kiosk and fleet management (TeamViewer patch pipeline on 158 endpoints, CrowdStrike Falcon + RTR), SBOM supply-chain security (Anvil → GCS → LiveX Ledger / OWASP Dependency-Track), and Cloud Run Jobs migrations.

Previously at Netskope (Aug – Oct 2025), I architected C++ Secure Web Gateway (SWG) dataplanes for SASE/SSE with GenAI protocol inspection, built containerized ARM64 CI/CD pipelines reducing build times by 95% (4h → 9min), and implemented the C++ Dataplane Event Nexus (DEN) with ZeroMQ & gRPC/Protobuf.

Developer & Architecture Stack

💻 Languages & Core Runtimes

Python Go C / C++ Node.js / TypeScript JavaScript (React / Vite) Bash / Zsh Perl SQL (MySQL / Oracle)

🤖 Physical AI & Edge Fleet Ops

Windows Kiosk Ops TeamViewer Vendor Pipeline CrowdStrike Falcon & RTR LiveX Anvil 2.1.0 GA LiveXStage Kiosk Launcher Chrome Enterprise Policy KVM & VMware Docker & K8s

🛡️ DevSecOps & Supply Chain

OWASP Dependency-Track CycloneDX & Custom SBOMs Trivy & Semgrep tfsec & Nuclei / ZAP DAST Cloud Run Jobs Cloud Scheduler Image Pinning by Digest HashiCorp Vault

⚡ Dataplane & Networking

C++ SWG Dataplane ZeroMQ Pub/Sub gRPC & Protobuf SASE / SSE Architecture GenAI MCP / A2A App-ID ISC DHCPD Isolation Ansible Net-Config Elasticsearch

Systems Engineering Highlights

LiveX AI • Feb 2026 – Present

Physical AI Edge Platform & Security Operations

Engineered the central security-operations system processing Vanta, GitHub, GCP, Trivy, Semgrep, tfsec, and Nuclei/ZAP DAST signals into deduplicated Jira issues and Slack alerts across 86 repositories. Deployed TeamViewer Patch Management across 158 Windows kiosk endpoints with zero failures and shipped LiveX Anvil 2.1.0 GA mini-PC bundles with CycloneDX SBOM integration into LiveX Ledger.

Netskope • Aug 2025 – Oct 2025

AI-Native SASE C++ Dataplane & ARM64 Build Pipeline

Architected C++ SWG dataplane components for SASE/SSE with GenAI protocol inspection. Accelerated ARM64 Docker build pipelines from 4 hours down to 9 minutes (-95%) using GitHub Actions and Artifactory. Built the C++ Dataplane Event Nexus (DEN) over ZeroMQ and gRPC for high-throughput DLP event streaming.

Index Engines • Apr 2025 – Aug 2025

CyberSense Cloud Plane & License Microservices

Designed and deployed microservices in Python/Node.js for ransomware detection and full-content analytics across AWS ECS/EKS with Terraform/Terragrunt. Authored 5 patents covering cloud cybersecurity and cross-federation licensing models.

F5 Inc. • Oct 2021 – Apr 2025

Integrated Bot Defense (IBD) & HashiCorp Vault Secrets

Architected GCP & F5XC cloud-native proxy microservices in Python and Go for Integrated Bot Defense. Migrated SDC build infrastructure to GitLab CI/CD & ArgoCD (-40% deployment time) and integrated HashiCorp Vault secrets management for multi-tenant compliance.

Airgap Networks • Feb 2021 – Oct 2021

Zero Trust Ransomware Kill Switch

Architected network layer isolation leveraging ISC DHCPD, Secure DNS, and Python. Built secure backend microservices on AWS and GCP using Elasticsearch, MySQL, and Kubernetes.

Experience Timeline

LiveX AI

Feb 2026 – Present

Software Engineer – Security, Platform & Edge Systems for Physical AI Agents

Palo Alto, CA • Full-time · On-site

  • Led security operations, DevSecOps, and edge-device platform work across 86 LiveX repositories. Built the central security-operations system that converts Vanta, GitHub, GCP, container, dependency, and DAST signals into deduplicated Jira issues, GCS evidence, and severity-aware Slack notifications.
  • Established production Windows kiosk and fleet operations, including a TeamViewer Patch Management critical/urgent vendor-alert pipeline (validated on 158 endpoints with zero failures), CrowdStrike Falcon + Real-Time Response health checks, and automated device telemetry covering CPU, memory, disk, temperature, network, and application state.
  • Released LiveX Anvil 2.1.0 GA after physical mini-PC validation. Delivered multi-OS on-prem software bundles, the LiveXStage deterministic kiosk launcher, refreshed installer SBOMs (custom + CycloneDX), Chrome Enterprise content, and improved CrowdStrike installation behavior.
  • Designed and operated the LiveX SBOM lifecycle: Anvil produces authoritative SBOMs → GCS → LiveX Ledger (OWASP Dependency-Track) → planned fleet comparison against release and channel expectations. Advanced supply-chain security with Semgrep, Trivy, tfsec, scheduled Nuclei/ZAP DAST, Auth0 per-account MFA, and guarded vulnerability remediation planning.
  • Built DevSecOps foundations by migrating scheduled security and device workloads to Cloud Scheduler + Cloud Run Jobs, implementing reusable SAST/IaC/container scanning workflows, image-freshness SLOs, and production image pinning by immutable digest.

VI AI Foundation & VI AI for Good Foundation

Oct 2025 – Present

Co-Chair & President

Saratoga, CA · Hybrid • viaifoundation.org | viaiforgood.org

  • Leading VI AI Foundation and VI AI for Good Foundation, driving responsible AI systems, local LLM agents (bibleengine.ai / lingting.bible), and Physical AI / Embodied wellness platforms.

Netskope

Aug 2025 – Oct 2025

Principal Engineer

Santa Clara, CA · On-site

  • Building Secure Web Gateway (SWG) dataplane in C++ for SASE/SSE with GenAI protocol support.
  • Implemented containerized ARM64 build pipeline: reduced build time by 95% (4h → 9min) using Docker, GitHub Actions, and JFrog Artifactory.
  • Designed and implemented C++ Dataplane Event Nexus (DEN) with ZeroMQ pub/sub and gRPC/Protobuf for real-time DLP event forwarding.
  • Developed Python automation for network config generation across Ubuntu 16/20/22/24, deployed via Ansible.
  • Proposed App-ID solution for GenAI security using MCP/A2A protocol analysis.

Index Engines

Apr 2025 – Aug 2025

Principal Engineer

San Jose, CA

  • Built CyberSense Cloud Management Plane microservices in Python/Node.js for ransomware detection.
  • Implemented cloud-agnostic infrastructure: AWS ECS/EKS, Terraform/Terragrunt, Jenkins CI/CD.
  • Developed License Service and Salesforce Agent microservices with cross-federation licensing model.
  • Proposed 5 patents for cloud-native cybersecurity and licensing solutions.

F5 Inc.

Oct 2021 – Apr 2025

Principal Engineer

San Jose, CA

  • Architected Integrated Bot Defense backend services in Python and Go on GCP and F5XC.
  • Led infrastructure team managing GitLab Enterprise, GitLab CI/CD, ArgoCD, Jenkins, Artifactory, HashiCorp Vault.
  • Migrated CI/CD from GitHub Enterprise/Jenkins to GitLab/ArgoCD: reduced deployment time by 40%.

Airgap Networks

Feb 2021 – Oct 2021

Principal Engineer

Santa Clara, CA

  • Built zero-trust isolation platform using Kubernetes, Python, and AWS.
  • Developed secure microservices with automated threat detection, reducing vulnerability exposure 30%.

Palo Alto Networks

Jan 2014 – Jul 2020

Senior Staff / Staff Software Engineer

Santa Clara, CA

  • Built cloud-native NGFW infrastructure using AWS, KVM, and Python.
  • Developed ML threat detection pipelines with Elasticsearch and Docker.
  • Built NVIDIA GPU cluster for ML workloads, improving data processing efficiency 40%.
  • Software Staff Intern (May – Aug 2013): Enhanced App-ID threat detection for cloud applications (Office 365, etc.).

ZJUAANC (North Carolina ZJU Alumni Association)

Jun 2012 – Present

Founding Vice President & Director of IT and Information

  • Leading digital infrastructure, IT systems, and 501(c)(3) readiness for Zhejiang University alumni network.

Zhejiang University

Jul 1998 – Oct 2007

Lecturer

Hangzhou, China

  • Taught Operating Systems, Databases, Algorithms, Data Structures, and C/C++.
  • Developed enterprise systems for banks and corporations using C++, Oracle, MS SQL, Lotus Notes, and web technologies.

Education

M.S. Computer Engineering • Raleigh, NC

North Carolina State University (NCSU)

Researched at the NSF FREEDM Systems Center on FREEDM DGI (Distributed Grid Intelligence), focusing on big-data analytics, embedded Linux systems, network protocols, TCAD power device simulations (ETO), and power system modeling.

M.S. Electronics • Hangzhou, China

Zhejiang University

Researched IC Physical Design Automation placement algorithms (Sequence Pair methodology), digital/analog integrated circuit design, and EDA tool development.

B.S. Information & Electronics • Hangzhou, China

Zhejiang University

Studied Microelectronics, Chinese Character Recognition, Digital Map Systems, and IBM Lotus Notes/Domino Systems. Served as President of ZJU Computer Fans Association (3rd Branch).