Gerardo Ravago
Software Development Engineer III at Amazon Web Services (AWS)
Greater Boston United States
Summary
🤩
Rockstar🎓
Top SchoolGerardo Ravago is a Software Development Engineer III with 11 years of layered experience across hardware, embedded systems, and cloud-scale software, currently working on post-quantum cryptography at AWS Cryptography. He has a rare full-stack engineering background that spans PCB and firmware design to large-scale cloud services, and has applied that cross-discipline expertise to secure boot, firmware replacement, and bare-metal provisioning research. At AWS he’s shipped storage and data-movement features and now contributes to cryptographic libraries, bringing practical systems knowledge to hard security problems. An active open-source contributor, he improved compatibility and security in the widely used strongSwan IPsec project by adapting OpenSSL derivatives like AWS-LC and adding ML-KEM support. Known for automating DevOps and release pipelines earlier in his career, he blends deep technical rigor with productivity improvements that scale across teams. Based in Greater Boston, he pairs a master’s in computer engineering with hands-on vulnerability research and production cryptography engineering.
11 years of coding experience
10 years of employment as a software developer
Master's degree, Computer Engineering, 3.72, Master's degree, Computer Engineering, 3.72 at Boston University College of Engineering
Github Skills (12)
ipsec10
security10
it-security10
vpn10
openssl10
cryptography10
c119
c179
keyv9
boringssl8
build-system7
cmake7
Programming languages (6)
Github contributions (5)
strongswan/strongswan
May 2023 - Oct 2024
strongSwan - IPsec-based VPN
Role in this project:
Security Engineer
Security EngineerContributions:4 reviews, 9 PRs, 23 comments in 1 year 5 months
Contributions summary:Gerardo's contributions focused on enhancing the security and compatibility of the strongSwan VPN software, specifically concerning its integration with OpenSSL derivatives. They added error checking and conditional macros to adapt the code to different OpenSSL implementations like AWS-LC, addressing compatibility issues related to data structures and compiler versions. Furthermore, they whitelisted AWS-LC-specific memory management behaviors to prevent false leak detections and incorporated support for ML-KEM key exchange algorithms when using AWS-LC, extending the cryptographic capabilities of the VPN.
vpn-clientikev2strongswanvpnwireguard
geedo0/aws-lc
Nov 2022 - Dec 2024
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
Contributions:2 PRs, 82 pushes, 26 branches in 2 years 1 month
cryptographycryptographiccustomerspurposeaws
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.