You should view this by running man <(curl
https://nicholas.sh/nicholas.sh.6) in your terminal.
./nicholas.sh, Nicholas, Nick
./nicholas.sh
[--chat|--message|--email] content ...
Run dig +short -t txt hi.nicholas.sh in your terminal to
see my email—or just use some online website to get the TXT
record.
nicholas.sh loves seeing where large systems fail and how
they can be improved.
nicholas.sh enjoys working with anything that leads to
system-wide improvements such as distributed systems, infrastructure,
security, and compilers.
University of Illinois at Urbana-Champaign (Aug 2018 - May
2022)
Computer Science, Highest Honors
Google, Senior Software Engineer - Site Reliability Engineering
(May 2025 - Present)
- Networking TL for the team: led development of various networking
solutions to allow secure hybrid connectivity between GCP, on-prem
machines, Google Borg, and the external internet.
- TL for an Internal Developer Platform designed to allow Google developers
to easily productionize enterprise workloads on various runtimes: Google
Kubernetes Engine, Cloud Run, Google Compute Engine, and on-prem
machines.
- Member of specialized on-call rotation staffed by senior SREs, responsible
for acting as incident commanders during major Google-wide incidents.
Google, Software Engineer - Site Reliability Engineering III
(Nov 2023 - Apr 2025)
- Led collaboration with multiple security teams in defining and enforcing
security mandates: network microsegmentations, SSH lockdowns, preventing
IPv4 exhaustion to allow security scanners to peer with all VPCs,
etc.
- Spearheaded a new effort to start extracting critical data across the
fleet, allowing my team to easily query for relevant information (e.g.
show all machines running binaries with X dependency) during incidents or
project planning.
- Taught internal courses on debugging production / handling outages to a
wide range of audiences: software engineer, manager, director, etc.
Google, Software Engineer - Site Reliability Engineering II
(Jul 2022 - Oct 2023)
- Designed and created a highly concurrent file syncing daemon in Go,
allowing quick data transfer across regions with high latency during
disaster recoveries (~150x faster than rsync).
- Created a runtime patch of Ansible which allows it to work without
transferring arbitrary AnsiballZ, thereby improving security by enforcing
proper provenance check of executed code on managed nodes.
- Halved the build time of the team's codebase by patching the compiler used
by the team upstream, improving developer productivity and reducing the
time it takes to push changes during an outage.
Google, Software Engineering Intern (May 2021 - Aug
2021)
- Created a generic MapReduce pipeline in C++ for doing language analysis,
enabling users to run custom analyzers over all of Google's codebase
efficiently (throughput: over 15,000,000 lines of code per minute).
- Implemented a schema converter for an internal configuration language that
transforms source code and AST into a flat schema that can be processed
using SQL queries, allowing language analysis to be done easily.
- Integrated an interpreter's language metamodel feature into a web-based
graphical debugger made with TypeScript and Angular to enrich the data
that can be displayed.
- Developed a Python script to programmatically refactor code style
violations in over 18,000 files.
Google, STEP Intern (May 2020 - Aug 2020)
- Developed an in-browser IDE with modern features: linting, auto-format,
auto-complete, Vim emulation, etc.
- Implemented a Node.js module that concurrently executes untrusted code in
sandboxes, visualizes the code interpretation process, and does analyses
such as test coverages.
- Researched and presented the potential of adapting BloodHound (open-source
Active Directory project) for internal usage by the Managed Service for
Microsoft AD team.
- Created a Python script that runs custom Cypher queries on a Neo4j
database as specified on YAML files, resulting in the possibility of
automated Active Directory analysis and vulnerability scanning.
- Languages: C, C++, Go, Python, JavaScript, Bash, Terraform,
Ansible.
- Technologies: Kubernetes, Docker, Linux, Git, SQL, tmux, Vim.
- Technical: distributed systems, infrastructure, security, and
compilers.
- Other: music, reading, and speedrunning Celeste.
- Likes spicy foods a little too much.
- Really likes using em dashes when writing—even before LLM became
mainstream.
https://nicholas.sh, https://linkedin.com/in/nicholashusin,
https://github.com/nicholashusin