Michael HUO

Michael HUO

Principal AI Infrastructure & Cybersecurity Architect

Building Secure, Efficient Physical AI Agents & Embodied Systems Across Cloud, On-Prem & Edge

27+ Years Experience LiveX AI VI AI Foundation Netskope F5 Palo Alto Networks

(Isaiah 40:31)

Book a Call LinkedIn GitHub

Executive Summary

Principal Engineer and Architect with 27+ years of experience specializing in zero-trust cybersecurity, cloud-native architectures, and AI-driven infrastructure. I design and build secure, scalable systems across cloud, on-prem, and edge environments using Python, Go, and C/C++, with deep focus on GenAI security, Physical AI agents, and embodied systems.

At LiveX AI, I lead security, platform, and edge systems for Physical AI agents—covering security operations, DevSecOps, Windows kiosk and fleet management, SBOM/supply-chain security, and hybrid infrastructure that enables reliable real-world AI deployments.

Previously at Netskope, I contributed to Secure Web Gateway (SWG) dataplane development for SASE/SSE with GenAI protocol support, advancing modern zero-trust and AI-aware security architectures.

I combine hands-on systems engineering with security and platform leadership to help organizations build resilient, trustworthy AI and cloud infrastructure in increasingly complex threat and operational landscapes.

Architecture & Leadership Focus

🤖

Physical AI & Edge Systems Security

Security operations & DevSecOps for embodied AI agents, Windows kiosk fleet ops (TeamViewer patch pipeline on 158+ endpoints), LiveX Anvil 2.1.0 GA release, and CrowdStrike Falcon RTR integration.

🛡️

Supply Chain & SBOM Lifecycle

Authoritative SBOM lifecycle management (LiveX Ledger / OWASP Dependency-Track), Semgrep/Trivy/tfsec SAST/IaC scanning, Cloud Run Jobs migration, and immutable container digest pinning.

⚡

Zero-Trust & GenAI Security

High-performance SWG dataplane in C++, Dataplane Event Nexus (DEN) with ZeroMQ & gRPC, SASE/SSE architectures, and App-ID protocol analysis for GenAI security (MCP/A2A).

Schedule Executive Advisory Email Me

Professional Experience

LiveX AI

Feb 2026 – Present

Software Engineer – Security, Platform & Edge Systems for Physical AI Agents

Palo Alto, CA • Full-time · On-site

Building secure, efficient Physical AI agents and embodied systems across cloud, on-prem, and edge environments.

  • Led security operations, DevSecOps, and edge-device platform work across 86 LiveX repositories. Built the central security-operations system that converts Vanta, GitHub, GCP, container, dependency, and DAST signals into deduplicated Jira issues, GCS evidence, and severity-aware Slack notifications.
  • Established production Windows kiosk and fleet operations, including a TeamViewer Patch Management critical/urgent vendor-alert pipeline (validated on 158 endpoints with zero failures), CrowdStrike Falcon + Real-Time Response health checks, and automated device telemetry covering CPU, memory, disk, temperature, network, and application state.
  • Released LiveX Anvil 2.1.0 GA after physical mini-PC validation. Delivered multi-OS on-prem software bundles, the LiveXStage deterministic kiosk launcher, refreshed installer SBOMs (custom + CycloneDX), Chrome Enterprise content, and improved CrowdStrike installation behavior.
  • Designed and operated the LiveX SBOM lifecycle: Anvil produces authoritative SBOMs → GCS → LiveX Ledger (OWASP Dependency-Track) → planned fleet comparison against release and channel expectations. Advanced supply-chain security with Semgrep, Trivy, tfsec, scheduled Nuclei/ZAP DAST, Auth0 per-account MFA, and guarded vulnerability remediation planning.
  • Built DevSecOps foundations by migrating scheduled security and device workloads to Cloud Scheduler + Cloud Run Jobs, implementing reusable SAST/IaC/container scanning workflows, image-freshness SLOs, and production image pinning by immutable digest.

VI AI Foundation & VI AI for Good Foundation

Oct 2025 – Present

Co-Chair & President

Saratoga, CA · Hybrid • viaifoundation.org | viaiforgood.org

  • Spearhead cybersecurity, cyber resilience, and cloud infrastructure initiatives, guiding the foundations’ technological vision to deliver secure, faith-aligned AI solutions that serve communities.
  • Lead the technical strategy and platform development for VI AI Foundation and VI AI for Good Foundation, focusing on responsible AI systems grounded in Biblical principles and ethical AI for social good.
  • Drive the design and operation of on-prem and hybrid AI infrastructure, including local LLM agents, Bible listening platforms (bibleengine.ai / lingting.bible), and early Physical AI / Embodied agent initiatives for wellness and community support.
  • Oversee security, privacy, and compliance posture across nonprofit AI systems, ensuring trustworthy deployment of AI tools that protect vulnerable users and align with the foundations’ mission.

Netskope

Aug 2025 – Oct 2025

Principal Engineer

Santa Clara, CA · On-site

  • Architected Secure Web Gateway (SWG) dataplane in C++ for SASE/SSE with GenAI protocol support.
  • Designed and implemented C++ Dataplane Event Nexus (DEN) with ZeroMQ pub/sub and gRPC/Protobuf for real-time DLP event forwarding.
  • Implemented containerized ARM64 build pipeline that reduced build time by 95% (4h → 9min) using Docker, GitHub Actions, and JFrog Artifactory.
  • Developed Python automation for network configuration generation across Ubuntu 16/20/22/24, deployed via Ansible.
  • Migrated CI/CD from Drone to GitHub Actions, consolidating build toolchains.
  • Proposed App-ID solution for GenAI security using MCP/A2A protocol analysis.

Index Engines

Apr 2025 – Aug 2025

Principal Engineer

San Jose, CA

  • Built CyberSense Cloud Management Plane microservices in Python/Node.js for ransomware detection and full-content analytics.
  • Implemented cloud-agnostic infrastructure using AWS ECS/EKS, Terraform/Terragrunt, and Jenkins CI/CD.
  • Developed License Service and Salesforce Agent microservices with cross-federation licensing model.
  • Built Salesforce Manager frontend (React + Vite + MUI) and backend (Node.js) for dev environment automation.
  • Designed systems leveraging ML, SSH tunneling, WebSockets, and PubSub.
  • Proposed 5 patents for cloud-native cybersecurity and licensing solutions.

F5 Inc.

Oct 2021 – Apr 2025

Principal Engineer

San Jose, CA

  • Architected the backend infrastructure for Integrated Bot Defense, leveraging Python and Go to develop secure, scalable proxy services on GCP and F5XC.
  • Led the Security & Distributed Cloud (SDC) Build Team and IBD Infrastructure Team, managing GitLab Enterprise, GitLab CI/CD, ArgoCD, Jenkins, JFrog Artifactory, and HashiCorp Vault.
  • Spearheaded CI/CD modernization, migrating SDC Build Infra from GitHub Enterprise/Jenkins to GitLab/ArgoCD, reducing deployment times by 40% using Cloud Native GKE, EKS, and IaC (Terraform/Terragrunt).
  • Designed secure cloud-native microservices, integrating HashiCorp Vault for secrets management to ensure compliance with multi-tenant cloud requirements.

Airgap Networks

Feb 2021 – Oct 2021

Principal Engineer

Santa Clara, CA

  • Architected and developed the Zero Trust Ransomware Kill Switch, leveraging ISC DHCPD, Secure DNS, and Python to enable network layer isolation.
  • Built backend infrastructure for Secure Gateway and Endpoint Smart Detector using Python and MySQL.
  • Designed cloud-native systems on AWS and GCP, integrating Elasticsearch, AWS RDS, and Kubernetes.
  • Implemented Networking Layer Isolation solutions to strengthen ransomware defenses.

Palo Alto Networks

Jan 2014 – Jul 2020

Senior Staff / Staff Software Engineer

Santa Clara, CA

  • Architected cloud-native infrastructure for Next-Generation Firewall (AWS + KVM) and ML-driven threat detection pipelines.
  • Improved threat detection accuracy by 45% and reduced incident response time by 25%.
  • Led App-ID development and network protocol decoding, increasing firewall accuracy by 30%.
  • Built NVIDIA GPU clusters for distributed ML workloads (40% efficiency improvement).
  • Software Staff Intern (May – Aug 2013): Enhanced App-ID threat detection for cloud applications (Office 365, etc.).

ZJUAANC (North Carolina ZJU Alumni Association)

Jun 2012 – Present

Founding Vice President & Director of IT and Information

  • Serve as Founding Vice President and Director of IT and Information, leading digital infrastructure, information systems, and technology strategy to support alumni engagement and organizational growth.
  • Direct the design and operation of IT systems, communication platforms, and digital tools that enable council coordination, member outreach, event management, and community programs.
  • Lead technology initiatives supporting 501(c)(3) readiness, including information architecture, secure collaboration systems, and operational tooling.

Zhejiang University

Jul 1998 – Oct 2007

Lecturer

Hangzhou, China

  • Taught Operating Systems, Databases, Algorithms, Data Structures, and C/C++.
  • Developed enterprise systems for banks and corporations using C++, Oracle, MS SQL, Lotus Notes, and web technologies (ASP, PHP, Perl).

Education

North Carolina State University (NCSU)

M.S. in Computer Engineering

Raleigh, NC

  • Conducted research at the NSF FREEDM Systems Center on FREEDM DGI (Distributed Grid Intelligence), focusing on big-data analytics, embedded Linux systems, and network protocols for intelligent distributed power grids.
  • Developed and evaluated embedded Linux-based solutions and network protocol implementations to support real-time distributed grid intelligence and coordination.
  • Performed research on power semiconductor devices using TCAD simulation (ETO power devices) and power system simulations to analyze system-level performance.

Zhejiang University

M.S. in Electronics (Microelectronics and Solid-State Electronics)

Hangzhou, China

  • Conducted research on algorithms for Integrated Circuit Physical Design Automation, with primary focus on Sequence Pair (SP) placement methodologies.
  • Studied and applied advanced placement algorithms to improve efficiency and quality of IC physical design automation flows.

Zhejiang University

B.S. in Information & Electronics Technology

Hangzhou, China

  • Studied Microelectronics with practical work in Chinese Character Recognition, Digital Map System development, and IBM Lotus Notes/Domino Systems.
  • Served as President of the ZJU Computer Fans Association (3rd Campus Branch).

Connect & Engage

Available for executive security leadership, AI infrastructure advisory, and strategic technical consulting.

Book a Meeting Email Michael