About
Senior Full-Stack & Systems Engineer · 8+ years
Full-Stack & Product · DevSecOps · ML / Computer Vision · Compilers & HPC · Kernel & Security Research
Senior full-stack and systems engineer with 8+ years building software across TypeScript/SvelteKit, Python, Go, C++, Rust, Zig, Chapel, Haskell, and Nix-first infrastructure.
Lewiston, ME & Boston, MA
I spent about a year completely offline — no LinkedIn, no blog, no social media. Late 2023 through the end of 2024. An intentional disconnect. I'm back to building in the open.
Hey! I am always hacking, learning, building, reading, and tinkering. Day in, day out, this is what I do.
Recent Posts
Hacking Canon MegaTank and clearing 5B00 Lock: A Native Waste-Ink Reset over USB with Ghidra, Frida and friends
A complete technical reference for resetting the Canon G-series MegaTank '5B00 ink absorber full' lock from Linux. Recovering the usbprint vendor-control maintenance protocol, the per-session keyword-bound write cipher and correlating payloads against friendly-fire RE dumps from WICReset
Glue You Can See in UV
A 3D-printer bed adhesive that's stronger than Frank's Instagoo, loaded with strontium-aluminate phosphor so a 365nm flash shows exactly where you laid it down- plus a Klipper gate that won't print on a bare bed.
Week Notes: scroll wheels, spring legs, and chasing the sun
Became the nixpkgs maintainer of UnnaturalScrollWheels, found my biking legs again at 100 miles a week, and started quietly plotting a 2030 across-Ireland enduro.
Gingersnap Cookies (from a milk-free, soy-free recipe card)
A milk-free, soy-free gingersnap recipe card, transcribed from a photo with Apple Vision OCR, metric equivalents, a scaler, and notes on the baking soda reaction.
Trashmonitor to oggle my goggles and behold the blinkenlights
I glued together a tittle tailnet-only streaming surface so I can oggle my goggles, blinkenlights, dev boards, and the hardware pile from the sanctum of anywhere
Experience
Systems Analyst (DevSecOps) — Bates College
2024–present
Build and maintain enterprise systems supporting staff, faculty, and the technical ILS team. 24/7 on-call for CVE triage and mitigation; help lead IaC and dev-CI parity college-wide.
- Current Bates work spans enterprise authentication, SAML/LTI/Shibboleth, secret management, ACME certificate automation, OpenTelemetry, GitLab AutoDevOps, OpenTofu, RKE2/Rancher, legacy modernization, and 24/7 CVE response.
- Built a property-based orchestrator and instrumentation harness for 1980s-era degree-management C in Haskell + Python (QuickCheck, Cabal, podman-compose for dev parity, FPM for packaging, AutoDevOps for CI/CD); turned an unautomatable legacy codebase into a verifiable, traceable, k8s-friendly workload.
- Overhauled and automated the event-management lifecycle (C#, Go, Ansible).
- Helped lead adoption of horizontally-scalable Apache Solr instances across multiple public and private indexing and search applications.
- Built out internal ACME-first certificate-management and DNS libraries, templates, and tooling.
- Contributed to enterprise secret-management practice and authentication / authorization college-wide; developed multiple SAML, LTI, Shibboleth, and bespoke TOTP / OAuth integrations; helped lead adoption of KeePassXC, firewalld, and fail2ban inside declarative Ansible workflows; OTEL / LGTM / Tempo telemetry stack in production.
Computer Vision Software Engineer — Macaulay Library, Cornell Lab of Ornithology
2019–2021
Developed & launched Merlin Sound ID, a production fine-grained audio classification system used by millions worldwide.
- Led R&D on internal ML annotation tooling, model-evaluation web APIs, and end-to-end MLOps pipelines (Flask, TypeScript, React, Vue, Docker, BitBucket CI); built real-time inference demos in React Native and Swift; contributed to novel community-science fine-grained classification research with the Visipedia / iNaturalist community.
- Streamlined Macaulay Library MLOps and asset ingestion pipeline.
Fabrication Laboratory Manager — Cornell CALS Landscape Architecture (DLA Makerspace)
2021–2022
Developed and taught rapid-fabrication curricula.
Independent contractor — Full-Stack Contracting & FOSS
2017–present
Independent contractor; active upstream contributor and committer.
- Developed web GIS tools used by the National Park Service, Foundation for Healthy Communities, GPRED, the Northern Border Regional Commission, presented at the 2019 AAG Annual Meeting in Washington, DC
- Client work (client list on request): the entire business stack for a multi-location clinical practice, grown through four business expansions over three years; R&D for a hydraulic sawmill equipment maker; and business systems for other small firms.
Ventures
Columbari.us LLC
2017–2021 — Independent contractor / contributor business while in the GIS & ML space.
Moonlight Coworking LLC
2021–2024 — Formed in NY to raise capital and interest in a for-profit hackerspace with a focus on mathematics and high performance computing alongside my nonprofit work leading the Ithaca Generator; shelved due to move to Maine.
xoxd.ai · Founder
2024–present — Bootstrapped engineering and contracting firm: infrastructure automation, build platforms, agent orchestration for semi-autonomous infrastructure lifecycle management, and full business stacks for clients.
Building glorious.build, a cache-first build and CI substrate (Bazel remote cache and execution, Nix, pooled self-hosted runners); pre-launch.
xoxd.ai on GitHubKitten Spit Labs
ongoing — Ultrasonics and piezoelectric lab-equipment venture focused on ultrasonic chaining of metapolymers.
Great Falls Tool Bus · Founder
2026–present — Founder of the Great Falls Tool Bus, a member-run tool and gear lending library in Lewiston, ME, and builder of its site and member infrastructure.
Great Falls Tool Bus on GitHubProjects
Merged Upstream
- llama.cpp · merged 2026-09-25
- nixpkgs · merged 2026-06-04
- KeePassXC (committer) · merged 2026-05-27
- ShikiJS textmate-grammars-themes · merged 2026-05-19
- numtide/nix-vm-test · merged 2026-04-22
- cmux · merged 2026-03-21
- rspamd (committer) · merged 2026-03-09
- svelte-superforms · merged 2026-02-22
- Futhark · merged 2026-02-10
- Chapel Mason registry (committer) · merged 2026-01-16
- xCaddy · merged 2025-05-05
- Klipper (contributor) · merged 2023-03-28
- FFT.js (contributor) · merged 2021-01-11
- Joplin · merged 2020-08-02
Other upstream involvement
Community
- Ongoing engagement with the Rocky Enterprise Linux Foundation (Rocky 10 platform, real-time (PREEMPT_RT) kernel lanes, and downstream CVE backport practice).
- First Fellow, D&M Makerspace, Plymouth State University (2017–2020)
- Membership Chair & 3D Printing Captain, Ithaca Generator (2020–2022)
Publications
- Sullivan, J. (2026). Recovering Write-Protected NVMe SSDs Through USB Bridge XRAM Injection: Bypassing the ASMedia ASM2362 Firmware Opcode Whitelist.
- Reitsma, L.R., Burns, C., & Sullivan, J. (2019). Poecile atricapillus (Black-capped Chickadee) Feeding Catharus guttatus (Hermit Thrush) Nestlings. Northeastern Naturalist, 26(2).
- Sullivan, J. (2019). Web GIS: Telling Stories & Solving Problems. AAG Annual Meeting.
Beyond Code
Photography
Cut my teeth professionally with world-renowned aerial photographer Alex MacLean and Mike Nyman Wedding Photography before going into business as J.S. Event Photography. Wrote and taught the youth photography curriculum at Joppa Flats and Drumlin Farm Mass Audubon Wildlife Sanctuaries — programs still going strong. Work featured at Celebrate Newton, Newton Public Library, Pease Public Library, Newtonville Cinema, Newton Camera Club, Broadmoor Wildlife Sanctuary, and in the Newton Tab. Did my own printing on a heavily modified inkjet printer. Completely burnt out from photography by end of 2017, sold all my gear by the end of college.
Music
20+ years of guitar — currently play a custom 9-string electric made for me in NH and a 12-string acoustic. 25+ years of piano/organ — primarily on a rotary Yamaha organ these days.
"If there were no computers I'd probably be a baker, a minstrel or a bard."
Hospitality
Evening bartender & event organizer at Modern Alchemy Game Bar in Ithaca — organized monthly Goth Nights, art shows & private events. Bartender at The Downstairs Listening Room & Tavern and The Watershed in New York. Casual bagel baker at Tandem Bagel Co in Northampton, MA (Spring 2024).
