Elio Govea

Senior Software Engineer · Vaisala

Systems engineer in networking and embedded Linux, now building cross-platform systems on Linux and Windows — from home routers to aviation weather platforms. ICPC World Finalist.

Summary

Eight years of production C++ across networking, embedded Linux and cross-platform delivery. At Vaisala, extending AviMet — an aviation weather platform running in 170+ countries — onto new Linux targets, and building the simulation tooling its modernization is verified against. Before that, four and a half years at F-Secure on the Sense SDK: home-router security embedded by service-provider partners and shipped across x86, ARM and MIPS, where I traced a production cost problem to its root and cut monthly CDN spend by 80%.

Skills

Languages
  • C++ (11–20)
  • C
  • Python
  • Bash
  • PowerShell
  • TypeScript / JavaScript
Networking
  • netlink
  • netfilter
  • iptables
  • nfqueue
  • nflog
  • conntrack
  • BPF
  • Unix domain sockets
Protocols
  • IPv4 / IPv6
  • TCP
  • UDP
  • DHCP
  • DNS
  • HTTP / HTTPS
  • TLS
  • QUIC
Platforms
  • Embedded Linux
  • Buildroot
  • OpenWrt
  • Alma Linux
  • x86 / ARM / MIPS
  • Windows
Build & CI
  • CMake
  • GNU Make
  • Cross-compilation
  • Git
  • Docker
  • LXC
  • Jenkins
  • AWS CI
  • Valgrind
  • Visual Studio
Frameworks
  • Qt
  • Robot Framework
  • OpenGL
Concepts
  • Algorithms & data structures
  • Performance optimization
  • Static & dynamic analysis
  • Debugging & profiling

Experience

Vaisala · Senior Software Engineer

– Present

Vantaa, Finland · AviMet aviation weather platform — deployed across 170+ countries, 2,500+ systems delivered · 8–10 developers, ~20 with integration and test

  • Made AviMet's behavior provable to the standard ICAO Annex 3 aeronautical meteorology demands — designed and implemented one programmable reference driving both the legacy and modernized systems into arbitrary states from simulated sensor data, spanning weather scenarios, sensor input and communication protocols, so correctness can be verified repeatably and equivalence testing becomes possible.
  • Replaced GUI-bound tooling with an interface developers, testers and AI-assisted workflows can script — what previously meant working through an extensive configuration checklist by hand now runs from defaults almost immediately, turning scattered team knowledge into executable documentation.
  • Led AviMet's expansion onto Alma Linux — extending the C++/Qt/CMake build matrix and toolchain to a second Linux distribution, and designing and implementing client-side license enforcement against Vaisala's existing licensing system.
  • Built tooling for a new cloud entitlements system, designed for reuse across Vaisala products beyond AviMet.
  • Hardened a long-lived C++ codebase spanning Windows and Linux — root-caused a 32-bit Windows leak that presented as a null-pointer dereference, and a leak triggered only by audio-device disconnect, which on a remote machine happens only once the RDP session ends: it never reproduced while anyone was watching (Valgrind, Visual Studio).

F-Secure

Helsinki, Finland · Poznań, Poland · Sense SDK — C++ home-router security embedded by 200+ service-provider partners · 8–10 developers, ~20 with integration and test

Senior Software Engineer

  • Cut monthly CDN spend by 80% with no user-visible impact. Root-caused it to router-side behavior driving excessive traffic; a router update would have taken months to reach deployed devices, so I shipped a backend-side mitigation in days instead, then landed the router-side fix for future releases to close the cause permanently.
  • Co-designed and implemented cloud-driven dynamic traffic-rule enforcement, letting F-Secure push new security policy to deployed routers without firmware updates.

Software Engineer

  • Built core Sense SDK functionality — URL filtering and parental controls (forcing safe-mode browser engines), traffic-statistics collection, device recognition and fingerprinting — across IPv4/IPv6, DHCP, TCP/UDP, DNS and HTTP/HTTPS, using Linux networking interfaces (netlink, netfilter, iptables, nfqueue, nflog, conntrack, BPF) against cloud back-end services.
  • Built the embedded Linux clients consuming those cloud services, the Unix-domain-socket IPC between clients and services, and reworked the security-event notification path.
  • Owned the cross-platform build system (CMake + GNU Make) for fast, reproducible builds across x86, ARM and MIPS toolchains, plus SDK integrations for reference platforms that shortened partner demos and onboarding.
  • Designed the Jenkins/AWS CI pipelines and the quality gates behind them — coverage, static and dynamic analysis — producing builds for every supported architecture and reference platform.
  • Built the test infrastructure in Python and Robot Framework, including recovery paths for OS- and cloud-service-level failures.

Universidad de Pinar del Río · Software Engineer

Pinar del Río, Cuba

  • Built real-time C++/Qt applications for vibration-signal processing and IMU-based object position tracking — embedded sensor input over serial (Arduino), Linux, OpenGL visualization.
  • Served as ICPC judge for the Caribbean region and coached a team to the ICPC Latin American Finals, alongside teaching C++, Python, Arduino, Linux and Raspberry Pi.

Education

Universidad de Pinar del Río · B.Sc. Telecommunications and Electronics Engineering

Pinar del Río, Cuba · GPA 4.95 / 5.00 · ICPC World Finalist

Achievements

Selected projects

DNS library 2022–2024

Wire format parsed and generated from scratch.

Parses and emits DNS messages against the wire format directly, with example resolvers for common query types.

  • C++
  • Networking
  • DNS

Router-network Docker testbed 2024

Client → router → server, in containers, no hardware.

Exercises network applications end-to-end — NAT, routing and all — in containers.

  • Docker
  • Networking
  • Linux

C++ project template 2021–2026

Identical builds on any machine.

Pins the toolchain so a new machine or contributor produces an identical build.

  • C++
  • CMake
  • Docker
  • CI

Automatic layout for a growing DAG 2019–2026

Construction order fixes one axis; forces settle the rest.

Laying out a suffix automaton as it is built, using the problem's structure instead of a generic graph layout.

  • TypeScript
  • D3
  • Graph layout

Baseball Limits 2D 2024–2026

Pareto frontiers over 150 years of MLB data, shipped client-side.

Pareto frontiers over MLB history: collection pipeline, an encoding compact enough to ship the whole history client-side, and animation of how each frontier moved.

  • JavaScript
  • Python
  • Data pipeline
More projects →