Skip to content
Great Blue Heron

Trans: Latin prefix implying “across” or “Beyond”, often used in gender nonconforming situations Scend: Archaic word describing a strong “surge” or “wave”, originating with 15th century english sailors Survival: 15th century english compound word describing an existence only worth transcending

Jess Sullivan

About

Senior Full-Stack & Systems Engineer · 8+ years

Full-Stack & Product · DevSecOps · ML / Computer Vision · Compilers & HPC · Kernel & Security Research

Senior full-stack and systems engineer with 8+ years building software across TypeScript/SvelteKit, Python, Go, C++, Rust, Zig, Chapel, Haskell, and Nix-first infrastructure.

Lewiston, ME & Boston, MA

I spent about a year completely offline — no LinkedIn, no blog, no social media. Late 2023 through the end of 2024. An intentional disconnect. I'm back to building in the open.

Hey! I am always hacking, learning, building, reading, and tinkering. Day in, day out, this is what I do.

Recent Posts

View all posts →

Experience

Systems Analyst (DevSecOps) — Bates College

2024–present

Build and maintain enterprise systems supporting staff, faculty, and the technical ILS team. 24/7 on-call for CVE triage and mitigation; help lead IaC and dev-CI parity college-wide.

  • Current Bates work spans enterprise authentication, SAML/LTI/Shibboleth, secret management, ACME certificate automation, OpenTelemetry, GitLab AutoDevOps, OpenTofu, RKE2/Rancher, legacy modernization, and 24/7 CVE response.
  • Built a property-based orchestrator and instrumentation harness for 1980s-era degree-management C in Haskell + Python (QuickCheck, Cabal, podman-compose for dev parity, FPM for packaging, AutoDevOps for CI/CD); turned an unautomatable legacy codebase into a verifiable, traceable, k8s-friendly workload.
  • Overhauled and automated the event-management lifecycle (C#, Go, Ansible).
  • Helped lead adoption of horizontally-scalable Apache Solr instances across multiple public and private indexing and search applications.
  • Built out internal ACME-first certificate-management and DNS libraries, templates, and tooling.
  • Contributed to enterprise secret-management practice and authentication / authorization college-wide; developed multiple SAML, LTI, Shibboleth, and bespoke TOTP / OAuth integrations; helped lead adoption of KeePassXC, firewalld, and fail2ban inside declarative Ansible workflows; OTEL / LGTM / Tempo telemetry stack in production.

Computer Vision Software Engineer — Macaulay Library, Cornell Lab of Ornithology

2019–2021

Developed & launched Merlin Sound ID, a production fine-grained audio classification system used by millions worldwide.

  • Led R&D on internal ML annotation tooling, model-evaluation web APIs, and end-to-end MLOps pipelines (Flask, TypeScript, React, Vue, Docker, BitBucket CI); built real-time inference demos in React Native and Swift; contributed to novel community-science fine-grained classification research with the Visipedia / iNaturalist community.
  • Streamlined Macaulay Library MLOps and asset ingestion pipeline.

Fabrication Laboratory Manager — Cornell CALS Landscape Architecture (DLA Makerspace)

2021–2022

Developed and taught rapid-fabrication curricula.

Independent contractor — Full-Stack Contracting & FOSS

2017–present

Independent contractor; active upstream contributor and committer.

  • Developed web GIS tools used by the National Park Service, Foundation for Healthy Communities, GPRED, the Northern Border Regional Commission, presented at the 2019 AAG Annual Meeting in Washington, DC
  • Client work (client list on request): the entire business stack for a multi-location clinical practice, grown through four business expansions over three years; R&D for a hydraulic sawmill equipment maker; and business systems for other small firms.
Roles and ventures timeline

Ventures

Columbari.us LLC

2017–2021 — Independent contractor / contributor business while in the GIS & ML space.

Moonlight Coworking LLC

2021–2024 — Formed in NY to raise capital and interest in a for-profit hackerspace with a focus on mathematics and high performance computing alongside my nonprofit work leading the Ithaca Generator; shelved due to move to Maine.

xoxd.ai · Founder

2024–present — Bootstrapped engineering and contracting firm: infrastructure automation, build platforms, agent orchestration for semi-autonomous infrastructure lifecycle management, and full business stacks for clients.

Building glorious.build, a cache-first build and CI substrate (Bazel remote cache and execution, Nix, pooled self-hosted runners); pre-launch.

xoxd.ai on GitHub

Kitten Spit Labs

ongoing — Ultrasonics and piezoelectric lab-equipment venture focused on ultrasonic chaining of metapolymers.

Great Falls Tool Bus · Founder

2026–present — Founder of the Great Falls Tool Bus, a member-run tool and gear lending library in Lewiston, ME, and builder of its site and member infrastructure.

Great Falls Tool Bus on GitHub

Projects

Project map of public repositories by category
ProjectCategory
birdsong-identification interpreter experiments and demos Applied ML & classification
image-based mushroom identification experiments for MushroomObserver Applied ML & classification
a Leaflet audio annotator for squirrel and chipmunk calls Applied ML & classification
ASM2362 NVMe recovery experiments and FTL-corruption research Kernel, firmware & security research
key-free, native-Linux recovery tooling for Canon MegaTank printers' ink-absorber lockout Kernel, firmware & security research
a native KeePassXC KDBX database readerKernel, firmware & security research
a research fork of Magic Lantern firmware Kernel, firmware & security research
Rocky Linux 10 real-time (PREEMPT_RT) kernel lane carrying XR display patches and Dirty Frag security backports Kernel, firmware & security research
early Chapel experiments: duplicate checking, string iteration and parallel evaluation Compilers, HPC & functional compute
glyph-compositor research with Futhark and WebGPU Compilers, HPC & functional compute
property-based testing package for Chapel Compilers, HPC & functional compute
provenance-clean Bessel functions (J0, J1 and J1 roots) for Futhark Compilers, HPC & functional compute
an accounting and financial-modeling R package and MCP tool surface for GnuCash Systems libraries & tools
a cross-platform disk-cleanup daemon with graduated thresholds (Go, Nix, systemd and launchd)Systems libraries & tools
in-progress encrypted sync filesystem (Linux FUSE + macOS FileProvider) Systems libraries & tools
an XWayland Emacs window manager experimenting with eye-gesture and XR input Systems libraries & tools
Zig capability libraries with C ABIs [2][3][4]Systems libraries & tools
automated patching for Chrome Remote Desktop on Budgie and GNOME desktops Build systems & infrastructure
a Bazel module registry for the firm's published packages Build systems & infrastructure
Bazel rules for compiling LaTeX to PDF with Tectonic Build systems & infrastructure
a Caddy, Tailscale and DNS reverse-proxy demo Build systems & infrastructure
a Dhall-typed Tailscale ACL policy with continuous delivery Build systems & infrastructure
Raspberry Pi image tooling: emulate, organize, burn and manage Debian images Build systems & infrastructure
Tailscale Aperture configuration bootstrapped from tagged devices over tsnet Build systems & infrastructure
a utility for out-of-band management of air-gapped network devices Build systems & infrastructure
experimental OAuth multiplexing for autonomous agents and people Software-lifecycle automation
a formal, auditable tool surface for playing the adversary in security testingSoftware-lifecycle automation
Linear and Google Workspace automation for calendar-facing operational workflows Software-lifecycle automation
a local agent-research condenser with provenance-preserving prompt minimization Software-lifecycle automation
reusable GitHub Actions composite actions for Nix, Attic cache and CI/CD Software-lifecycle automation
a self-bootstrapping LangGraph DAG harness for Ansible iteration cycles in GitLab Software-lifecycle automation
an ActivityPub federation libraryWeb product & libraries
an authentication library with TOTP, RBAC and pluggable storageWeb product & libraries
a backend-agnostic scheduling system with Acuity, Cal.com and native adapters Web product & libraries
a calendar library with CalDAV, iCal, RRULE and time-zone supportWeb product & libraries
a Flask image server with Lanczos resampling Web product & libraries
framework-agnostic rate-limiting and CSRF middlewareWeb product & libraries
the Great Falls Tool Bus apex site for Lewiston-Auburn, Maine Web product & libraries
markdown content services with versioning, scheduling and relationship resolutionWeb product & libraries
an OpenTelemetry instrumentation layer with a TraceQL query builder and RED metricsWeb product & libraries
physics-simulated animated vector backgrounds for Svelte 5 Web product & libraries
a public dark-sky planning map for astronomy, field sensing and low-light logistics Web product & libraries
request-security utilities: IP hashing, encryption, risk scoring and timing-safe helpersWeb product & libraries
a static rewrite of the transscendsurvival.org blog Web product & libraries
a streaming accessibility evaluation engine: WCAG contrast, ARIA and keyboard-navigation checksWeb product & libraries
structured logging with Loki integration and OpenTelemetry trace correlationWeb product & libraries
a tutorial for writing a command-line utility in modern TypeScript Web product & libraries
a Vite plugin for build-time WCAG checks of Svelte components Web product & libraries
a Vite plugin generating Skeleton UI color-pairing utilities on demand Web product & libraries
Zod schemas, field validators and Superforms integration helpersWeb product & libraries
3D-printer profiles for the Ithaca Generator makerspace GIS, fabrication & community
CAD-as-code 19-inch rack mounts for ATX power supplies GIS, fabrication & community
open-source stepper hardware for coil winding GIS, fabrication & community
R / Shiny KML geoprocessing tools GIS, fabrication & community
R processing for bird point-count field data GIS, fabrication & community
shelving and related CAD drawings for the Great Falls Tool Bus GIS, fabrication & community
a UV-reactive 3D-printer bed adhesive: recipe, scaler and Klipper integrationGIS, fabrication & community
Language mix across the mapped public repositories

Merged Upstream

Merged upstream work by project and merge date

Other upstream involvement

Community

  • Ongoing engagement with the Rocky Enterprise Linux Foundation (Rocky 10 platform, real-time (PREEMPT_RT) kernel lanes, and downstream CVE backport practice).
  • First Fellow, D&M Makerspace, Plymouth State University (2017–2020)
  • Membership Chair & 3D Printing Captain, Ithaca Generator (2020–2022)

Publications

Beyond Code

Photography

Cut my teeth professionally with world-renowned aerial photographer Alex MacLean and Mike Nyman Wedding Photography before going into business as J.S. Event Photography. Wrote and taught the youth photography curriculum at Joppa Flats and Drumlin Farm Mass Audubon Wildlife Sanctuaries — programs still going strong. Work featured at Celebrate Newton, Newton Public Library, Pease Public Library, Newtonville Cinema, Newton Camera Club, Broadmoor Wildlife Sanctuary, and in the Newton Tab. Did my own printing on a heavily modified inkjet printer. Completely burnt out from photography by end of 2017, sold all my gear by the end of college.

Music

20+ years of guitar — currently play a custom 9-string electric made for me in NH and a 12-string acoustic. 25+ years of piano/organ — primarily on a rotary Yamaha organ these days.

"If there were no computers I'd probably be a baker, a minstrel or a bard."

Hospitality

Evening bartender & event organizer at Modern Alchemy Game Bar in Ithaca — organized monthly Goth Nights, art shows & private events. Bartender at The Downstairs Listening Room & Tavern and The Watershed in New York. Casual bagel baker at Tandem Bagel Co in Northampton, MA (Spring 2024).

Equation: Learning = internet × (time + standards × Ambition) / Difficulty

Links