## Andrew Flury

**📍 Pacifica, CA, USA** ∙ **✉️ [andrew@flury.org](mailto:andrew@flury.org)** ∙ **📞 [650-515-6072](tel:+16505156072)** ∙ **🤝 [LinkedIn](https://linkedin.com/in/andrewflury)**

### Summary

Software engineer with 25+ years in networking, security, and infrastructure.

### Experience

#### Principal Software Engineer - [Memyard](https://memyard.com) 📂 <small>Apr 2024 - Jun 2026</small>

Memyard is a social network and document intelligence platform built on Google Drive, Microsoft OneDrive, and other cloud services.

- Built and ran infrastructure across Vercel, GCP, and Supabase using Terraform, GitHub Actions, GCP monitoring, and Sentry.
- Led development through the company's pivot from a document update notifier to a document-focused social network.
- Built a Python/Celery task system to ingest user data.
- Wrote integrations for Google Drive, Dropbox, Microsoft OneDrive and Teams, GitHub, Linear, Salesforce, and other data providers.
- Built front-end features using TypeScript/React.

#### Staff Software Engineer - [TRM Labs](https://trmlabs.com) 💸 <small>Nov 2022 - Apr 2024</small>

TRM provides blockchain analytics to cryptocurrency exchanges, government agencies, and regulators. On the Network Intelligence team, I correlated wallets and transactions with network activity, IP addresses, and people.

- Built a distributed network of Bitcoin, Ethereum (geth/lighthouse), Monero, and other blockchain nodes, with automated deployment and management.
- Modified blockchain software to report network activity for research and product use.
- Added IP intelligence features covering geolocation, network providers, and classifications.

#### Principal Software Engineer - [Agari / Fortra](https://agari.com) 📧 <small>Sep 2009 – Mar 2022</small>

Agari was an email security company focused on preventing spoofing attacks. We helped create and promote the [DMARC](https://dmarc.org/) email authentication and reporting standard. I was Agari's first employee and worked across engineering, from early prototypes through production operations and on-call support. HelpSystems, now Fortra, acquired the company in 2021.

Customer Protect used DMARC reports and policies to help domain owners identify unauthorized senders and block unauthenticated mail.

- Wrote a system to aggregate XML email reports from mailbox providers.
- Built real-time ingestion of messages that failed authentication.
- Created reports showing email volume by sending IP and authentication status.
- Built a hosted DMARC/SPF/DKIM system with a custom DNS backend.
- Built and managed the initial infrastructure, then led its migration from on-premises systems to AWS.
- Authored the open-source Ruby SPF client <https://github.com/agaridata/spf-ruby>

Enterprise Protect collected telemetry from inbound mail and grew into a broader security product for detecting and blocking abnormal traffic.

- Developed SMTP "sensors" that collected copies of customer mail and reported message data to Agari.
- Built ingestion systems backed by Postgres, Elasticsearch, and other data stores.
- Blocked messages after processing by moving or deleting them through mailbox provider APIs.
- Integrated third-party URL and attachment scanning engines.
- Built an incident response service for post-breach mitigation on top of Enterprise Protect.

#### Member of Technical Staff - [Topsy Labs](https://www.crunchbase.com/organization/topsy-labs) 🔍 <small>Apr 2007 - Jul 2009</small>

Topsy was a search engine for social media streams, primarily Twitter. I built its early infrastructure and helped scale it from one server to a data center with dozens of racks. Apple acquired Topsy in 2013.

- Procured data center space, power, and bandwidth.
- Installed and maintained the physical data center infrastructure.
- Set up OS installation (CentOS/Kickstart), monitoring and alerting (Nagios), and configuration management (Puppet).

#### Senior Software Engineer - [IronPort Systems](https://www.crunchbase.com/organization/ironport) 🔐 <small>Jul 2002 - Mar 2007</small>

IronPort built enterprise email and web security appliances and services. I was the initial developer for the Security Applications team, responsible for its hosted security services. Cisco acquired the company in 2007.

- Developed Bonded Sender, an email allowlist backed by financial bonds. Microsoft and popular open-source anti-spam tools adopted the service, and the telemetry collected from its DNS traffic became the foundation for future products.
- Built SenderBase, now part of [Cisco Talos](https://talosintelligence.com/). It combined IP, domain, registrar, and appliance telemetry to identify email senders and network owners. I also wrote its custom DNS server and the DNS API used by IronPort appliances and still in production today.
- Was one of two initial engineers for SBRS, an IP reputation score based on SenderBase data, third-party blocklists, and appliance statistics.
- Led development of Virus Outbreak Filters, an early-warning system based on filenames, file sizes, content hashes, and similar message patterns. Worked on both appliance enforcement and Threat Operations Center tools.
- Built SenderBase Network Participation system, which shared appliance telemetry and diagnostics with IronPort. Wrote both the appliance and hosted components.

#### Systems / Software Engineer - [Zembu Labs](https://www.crunchbase.com/organization/zembu-labs-inc) 🌐 <small>Apr 2001 - Nov 2002</small>

Zembu was building globally distributed application and database clusters using its own database technology. I wrote systems management software for the server "pods" deployed in third-party data centers.

- Wrote software to manage Ethernet switches, load balancers, remote power controllers, and serial terminal servers in each pod.
- Wrote software to configure boot and installation servers for Red Hat, Solaris, system packages, and our applications.
- Installed and later removed pods in third-party data centers around the world.
- Ran internal IT during the company's early stages.

#### Network Engineer - [NASA/Ames Research Center](https://nas.nasa.gov/) 🚀 <small>Jul 1997 - Apr 2001</small>

I joined NASA/Ames as an intern in 1997 and was hired full-time a year later. I built and maintained networks for high-performance computing at the NASA Advanced Supercomputing facility.

- Rebuilt hub-based 10BaseT network to switched gigabit Ethernet alongside FDDI, HiPPI, and other HPC networks.
- Wrote a web app for network equipment inventory, tools to manage SSH host keys, and other automation.
- Ported `netperf` to Cray UNICOS, fixing a binary protocol that broke across different architectures.
- Led and participated in team training as an intern.

### Skills

- <b>Programming Languages:</b> Python, Ruby, Perl, bash, some JavaScript/TypeScript, C/C++
- <b>Services:</b>
  - <b>AWS:</b> EC2, S3, RDS, EKS, Kinesis, SQS
  - <b>GCP:</b> GCE, GCS, CloudSQL, GKE, Cloud Run, BigQuery, Composer (Airflow)
  - GitHub, Cloudflare, Vercel, Terraform Cloud
- <b>Frameworks:</b> Flask, Celery, Django, Rails, NextJS
- <b>Operating Systems:</b> Linux (Debian/Ubuntu, RedHat/CentOS, SLS/Slackware, etc.), {Free,Net,Open}BSD
- <b>Networks:</b> TCP/IP, DNS, SMTP, email authentication (SPF, DKIM, DMARC), DHCP, Ethernet, general networking technologies
- <b>Software:</b> Terraform, Ansible, Kubernetes, Docker, PostgreSQL, Supabase, MySQL, Apache httpd/nginx/lighttpd, BIND, Postfix, most common Unix stuff.

### Education

Completed college coursework during high school and early in my career, but did not earn a degree. Hacking on supercomputers at NASA seemed like more fun.

- <b>De Anza College</b>: Computer Science 1996 - 2000
- <b>West Valley College</b>: Business, Computer Science 1995 - 1997