Perry's Résumé - IT/OT Solution Architecture

Designing and delivering the boundary itself: unidirectional field-data paths, SCADA deployment automation, and business tooling built on top of the resulting data.

• Developed a secure DNP3 data diode supplying real-time field data to IT systems while leaving the OT field equipment unreachable from the IT side. Dramatically reduced both up-front acquisition and ongoing operating cost against commercial diode products, without relaxing the unidirectional guarantee.
• Implemented dev, staging and production deployment infrastructure for Ignition SCADA, automating regression testing of Ignition Python scripting: a capability the vendor does not currently offer. Script changes are now validated before they reach production rather than in it.
• Developed localwebauthn, a self-hosted WebAuthn relying-party library: passkey authentication with no dependence on an external identity provider, and no credential repository whose capture would yield the estate. Suitable for OT-adjacent systems that must authenticate strongly while remaining operable when the wider network or the internet is not.
• Deliver prototypes of custom tooling to business users, giving them direct control of vendor WIP quotes, invoicing, timekeeping and expensing, while preserving the accountant's traditional controls over the ledger.

Architecture and delivery of integration, telemetry and security systems spanning the IT/OT boundary for energy, utility and fintech clients.

• Created cpppo, the widely used Python EtherNet/IP and CIP protocol library: the inspectable integration layer between enterprise analytics and the PLCs on the plant floor, in place of a vendor black box.
• Built datasim, a Docker-based large-scale PLC simulation environment (dozens to hundreds of concurrent simulated PLCs, each with its own network stack) supporting Modbus, EtherNet/IP and a web API front end. Records and replays real field data, and injects controlled latency, packet loss, bandwidth limits and per-PLC transaction capacity, so a SCADA vendor's polling behaviour is measured against degraded WAN and satellite routes before cutover rather than after. Used to de-risk a production SCADA transition.
• Designed and implemented a complete EVM smart-contract system: ERC-20 with identity-aware transfers, ERC-721 insured-asset tokens, parametric insurance contracts, and a privacy-preserving bearer-note layer on Groth16 SNARKs over Poseidon Merkle commitment pools, verified end-to-end on BN254. Delivered concurrently with full-time client work through disciplined AI-accelerated R&D: LLM output treated strictly as hypothesis, with no model assertion admitted to a design until confirmed by execution or independent derivation.
• Developed ezpwd-reed-solomon, high-throughput C++/JS/Python Reed-Solomon and BCH codecs, used by aerospace and defence developers globally.
• Architected and deployed BUCKy, a production generative AI service: multiple interchangeable inference backends (hosted API, local Ollama, local MLX) with vendor reversibility as a first-order design constraint; a ~100K token knowledge base pre-computed once into a KV prompt cache and cloned per session copy-on-write; delivered publicly through a Cloudflare Zero Trust tunnel with no inbound exposure of the host.
• Delivered ruggedized satellite-connected monitoring, communications and video systems across Alberta oilfields; field-serviceable, and diagnosable from 400 km away.
• Guide client development teams through cryptographic, distributed-systems and industrial integration architecture; author technical articles on industrial communications, consensus, and monetary system design.

Replaced expensive proprietary radio telemetry with commodity SDR hardware: a build-vs-buy case argued on cost, then made to hold in the field.

• Built an end-to-end real-time receiver decoding 64 concurrent channels from a 25 Msps I/Q stream on commodity x86 and ARMv8, sustained, with no dropped samples.
• Designed the polyphase filterbank channelizer and window/DFT chain; hand-optimized hot paths in AVX and NEON.
• Reached agreement on meter readings across lossy RF channels without requiring global coordination.
• Built a recorded-signal regression harness so algorithm changes were measured against real captured field data rather than synthetic benchmarks.

Architected and tested prototypes of HoloFuel's novel transaction engine.

• Designed and validated atomic transaction processing under simulated network partitions.
• Implemented agent-centric accounting enabling linear O(n) scaling in place of O(n²) global consensus bottlenecks.
• Contributed R&D to Holochain's agent-centric distributed architecture.

Reduced the risk profile of a hydrocarbon pipeline control system with a cryptographically secure multi-route communications protocol.

• Architected the LiveWIRE fault-tolerant Reed-Solomon encoded multi-route protocol for real-time SCADA telemetry over marginal and intermittent links, maintaining cryptographic integrity across untrusted network segments.
• Developed solid-state RTU firmware for continuous 24/7 control; sustained <1 defect per 10K LOC as measured in the field, not in the lab.
• Deployed hundreds of ruggedized units across critical infrastructure sites.

Pioneered a radical re-architecture of a core SCADA automation alarm system component.

• Re-engineered RTAP's core alarm engine with DFA state machines.
• Enabled end-users to configure complex, geographically distributed safety-critical workflows.
• Still deployed in pipeline SCADA systems continent-wide, 30+ years on.